EGC India Shopping Club
EGC CLUB
Data Protection & Privacy

Privacy Policy

At EGC India Shopping Club, your trust and privacy are paramount. This policy outlines how we collect, process, encrypt, and respect your personal information.

Last Updated: August 12, 2026
Jurisdiction: India (DPDP Act Compliant)
256-Bit SSL Encrypted
1

Identity of Data Controller

This platform, including the EGC India website (egcindia.in, shop.egcindia.in) and official mobile applications, is owned and operated by EGC INDIA.

For data protection inquiries, contact our designated privacy department at egcindia2016@gmail.com.

2

Data Collection Categories

We only collect information strictly required to facilitate club membership onboarding, physical deliveries, and tax compliance:

Personal Identifiers

Full name, email address, primary and alternate mobile numbers, date of birth, and gender.

Address & Location

Residential address, sector, node, PIN code, and city for hyperlocal Area Agent deliveries.

KYC & Identity (Agents)

PAN number, Aadhaar number (masked), and identity verification documents strictly for legal TDS compliance.

Device & Usage Data

Secure session tokens, IP address, device identifiers, and diagnostic crash logs.

3

Purpose of Data Processing

  • Membership Management: Verifying eligibility, administering accounts, and issuing digital membership cards.
  • Order Logistics: Transmitting delivery details to your assigned sector Area Agent for doorstep order handoff.
  • Statutory Compliance: Generating valid GST tax invoices and filing mandatory financial returns under Indian law.
  • Member Communications: Delivering OTP security codes, order dispatch alerts, and service notices.
4

Device & App Permissions

We adhere to strict minimum-privilege principles when requesting device access:

No Contact or SMS Scraping: We do NOT read your personal contact list, phone logs, or private SMS messages for referrals or marketing.
Camera & Photo Storage: Only requested during voluntary KYC document image upload or profile picture selection.
5

Third-Party Data Sharing

Strict Non-Commercialization Guarantee: EGC India does NOT sell, rent, or trade your personal data to external marketing companies or data brokers under any circumstances.

Data is shared strictly on a need-to-know basis with authorized entities:

  • PCI-DSS compliant payment gateways for processing transactions.
  • Assigned local Area Agents for product fulfillment and verification.
  • Law enforcement or statutory authorities when strictly mandated by court order or applicable Indian statutes.
6

Security & Safeguards

All data transmission between your device and EGC India servers is protected using TLS 1.3 / 256-bit SSL encryption. Sensitive database records, such as authentication hashes and KYC identifiers, are encrypted at rest in accordance with industry security standards.

7

Data Retention & User Rights

Under the Digital Personal Data Protection (DPDP) Act and applicable guidelines, you hold the following rights:

  • Right to AccessRequest a copy of your personal data stored on our servers.
  • Right to CorrectionUpdate inaccurate or incomplete profile information anytime.
  • Right to GrievanceEscalate concerns to our designated Grievance Officer.
  • Right to ErasureRequest complete account deletion and data scrubbing.
8

Account & Data Deletion Policy

In compliance with Google Play Store, Apple App Store, and Indian Data Privacy Regulations, users may permanently delete their account and associated personal data at any time. Simply uninstalling the application or logging out does not automatically delete your records.

How to Request Permanent Deletion:

  • In-App Self Service: Open the app → Profile → Privacy & Security → Tap "Delete Account".
  • Via Web Portal: Access our direct Account Deletion Request Portal.
  • Via Email: Send from your registered address to egcindia2016@gmail.com with subject "Account Deletion Request".
Statutory Retention Exceptions:Upon account deletion, all profile credentials, loyalty point balances, and active subscriptions are permanently purged. However, transaction records, tax invoices (TDS/GST), and fraud audit logs will be retained for the minimum statutory timeframe required by Indian law.
9

Privacy Officer & Grievances

If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact our Compliance and Grievance Desk:

Designation: Data Protection & Grievance Officer

Email: egcindia2016@gmail.com

Operational Territory: Navi Mumbai, Maharashtra, India

Turnaround Time: We respond to verified data requests within 48 business hours