Privacy Policy

CoUnwrap (“CoUnwrap”, “we”, “us”, “our”) is a corporate gifting marketplace operated by [Registered company name], India. The platform connects corporate buyers who send gifts with brands and independent makers who sell them, including collaborative gift hampers built from several brands' products.

For the purposes of India's Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for the personal data described in this policy.

Account information. Your name, work email address and password (stored only as a one-way hash) when you sign up as a brand user or a corporate buyer.

Brand business information. If you register a brand: brand and company name, business address, phone number, GST and PAN numbers, product categories, and verification documents you upload, such as a GST certificate, PAN card, cancelled cheque, address proof and trademark or authorisation letters.

Catalogue content. Product names, descriptions, SKUs, prices, minimum order quantity pricing, inventory levels and product images that brands upload.

Corporate buyer information. Phone number, company name and saved delivery addresses, along with the carts, quote requests, negotiation messages and orders you create. Delivery addresses may include the names and addresses of gift recipients you provide.

Enquiries.Your name, email, role and message when you use the “Get in Touch” or Support form.

Technical information. IP address, browser type, device information and timestamps recorded in server logs, and the cookies described in Cookies and similar technologies.

We use personal data only for the following purposes:

• Creating and securing your account, signing you in, and resetting your password.
• Verifying brands before their products appear in the catalogue.
• Running the marketplace: showing catalogues, building gift hampers, routing quote requests to each brand, handling negotiations, and placing and fulfilling orders.
• Sending service messages, such as quote updates, order confirmations, shipping updates and verification outcomes, by email and as in-app notifications.
• Calculating platform fees and packaging charges, and keeping financial records.
• Responding to enquiries and support requests.
• Detecting and preventing fraud, spam and abuse, including by limiting request rates.
• Complying with legal obligations, such as tax and accounting rules, and lawful requests from authorities.

We do not sell your personal data, and we do not use it for third-party advertising.

We process personal data with your consent, given when you create an account or submit a form, and for legitimate uses permitted by the DPDP Act, such as complying with law and responding to emergencies. You can withdraw consent at any time by contacting us. Withdrawing consent does not affect processing that already took place, but we may no longer be able to provide services that depend on that data.

If you give us personal data about other people, such as gift recipients' names and addresses, you confirm that you are allowed to share it with us for delivering the gifts.

• Between buyers and brands.When a corporate buyer requests a quote or places an order, the brand involved sees the buyer's name, company, the items requested, the negotiation thread and, for orders, the delivery address it needs to fulfil the order. Buyers see brand names and the details brands publish. In collaborative gifting sets, participating brands see the set's details and each other's contributions.
• Service providers. We use trusted providers to host and run the platform, including cloud hosting, file storage and content delivery (Amazon Web Services) and email delivery. They process data only on our instructions.
• Our staff. Authorised CoUnwrap staff can access account and order data to verify brands, review product listings, provide support and resolve disputes. With a recorded reason, staff may temporarily sign in to a brand account to help that brand. These sessions are time-limited and every change made during them is logged.
• Legal and safety. We may disclose information when required by law, court order or a government authority, or to protect the rights, property or safety of CoUnwrap, our users or the public.
• Business transfers. If CoUnwrap is involved in a merger, acquisition or sale of assets, personal data may be transferred under protections at least as strong as those in this policy.

We use only essential cookies. These keep you signed in (secure, httpOnly authentication cookies that scripts on the page cannot read) and protect sessions. We do not use advertising or cross-site tracking cookies. If you block cookies in your browser, you will not be able to sign in.

Data is stored on secured cloud infrastructure. We protect it with encryption in transit (HTTPS), hashed passwords, private file storage that is reachable only through our content delivery network, role-based staff permissions, audit logs of administrative actions, and rate limiting on sign-in and public forms. No system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the law requires.

Our service providers may store or process data outside India. Where they do, we take steps to make sure the data stays protected and the transfer is allowed under Indian law.

We keep account data while your account is active. After you close your account, we delete or anonymise personal data within a reasonable period, except where we must keep it longer. For example, order, invoice and tax records are kept for the period Indian tax and accounting law requires, and records may be kept while a dispute is open. Enquiry form submissions are kept for as long as needed to respond and follow up.

Under the DPDP Act and other applicable law, you have the right to:

• Get a summary of the personal data we hold about you and how we process it.
• Have inaccurate or incomplete data corrected, and outdated data updated.
• Have your data erased when it is no longer needed, unless the law requires us to keep it.
• Withdraw consent you have given.
• Nominate another person to exercise these rights if you die or become incapacitated.
• Raise a grievance with us, and then with the Data Protection Board of India.

You can update most profile details yourself in your account settings. For anything else, email rahul@counwrap.com. We may need to verify your identity before acting on a request.

CoUnwrap is a business-to-business service for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make material changes, we will tell registered users by email or with a notice on the platform before the changes take effect.

For questions or complaints about this policy or how we handle your data, contact our Grievance Officer. We will acknowledge complaints within 48 hours and aim to resolve them within 30 days.

• Grievance Officer: Rahul Mahamna, Co-Founder
• Email: rahul@counwrap.com
• Phone: +91-9625190880

See also our Terms of Service.