Swagloop is a corporate gifting platform operated by Swagloop Ventures Private Limited from New Delhi, India. This policy explains what personal data we collect when you use www.swagloop.com, why we collect it, how it is stored, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
1. Who we are
Swagloop is a brand operated by Swagloop Ventures Private Limited (“we”, “us”, “Swagloop”). For the purposes of the DPDP Act, Swagloop Ventures Private Limited is the Data Fiduciary in respect of personal data collected through this platform.
CIN: U82990DL2026PTC463530
Registered office: A1/87, 4th Floor, Sewak Park, Dwarka, New Delhi – 110059, India
We collect only what we need to take and fulfil a corporate gifting order.
Account information
Name, work email, mobile number, company name, and role.
Password (stored as a one-way hash, never in plain text).
Order information
Shipping address (company and recipient), GSTIN, and PAN where required for invoicing.
Order contents, quantities, branding artwork and customisation instructions.
Communication you exchange with us about an order.
Payment information
Card and UPI details are entered directly with our payment gateway and are not stored on Swagloop servers. We retain only the transaction identifier, amount, status, and a masked reference.
Usage information
IP address, device, browser, referrer, pages viewed, and basic AI Pack prompt text.
Cookies and similar technologies. See our Cookie Policy for details.
3. Why we collect it
To run your account — signup, login, password reset.
To process and ship orders — including GST-compliant invoicing, manufacturing, courier handover, and after-sales support.
To generate AI Curated Packs — your brief is passed to our recommendation engine to assemble curated kits from our catalog.
To improve the platform — aggregated, de-identified analytics on browsing and conversion.
To meet legal obligations — tax filings, fraud checks, and responding to lawful requests from government authorities.
We process personal data only for the purposes listed above, in line with Section 4 of the DPDP Act (consent or legitimate uses).
4. Who we share it with
We share personal data only with parties who help us deliver your order. We do not sell personal data, and we do not share it for third-party advertising.
Payment gateways — for processing payment securely.
Logistics partners — name, address, and phone of the recipient, for delivery only.
Manufacturing and print partners — product specs and branding artwork required to produce the kit.
Cloud infrastructure — Amazon Web Services in the Mumbai region (ap-south-1).
Government or law enforcement — only in response to a valid written request, and only to the extent required by Indian law.
5. Where your data lives
Personal data and order data are stored on AWS infrastructure in the Mumbai (ap-south-1) region. We do not transfer your data outside India except where a logistics or compliance partner requires it for fulfilment, and never to a country restricted under the DPDP Act.
6. How long we keep it
Account data — while your account is active, plus three years after closure.
Order and invoice data — eight years, to meet tax and GST record-keeping requirements.
Logs and analytics — up to twelve months, in de-identified form thereafter.
7. Your rights
Under the DPDP Act, you can ask us to:
Confirm what personal data we hold about you and provide a copy.
Correct or update inaccurate or incomplete data.
Erase personal data we no longer need (subject to legal retention rules).
Nominate someone to exercise these rights on your behalf if you cannot.
Withdraw consent at any time, where consent is the basis of processing.
To exercise any right, write to our Grievance Officer (see Section 11). We respond within thirty days. If you are not satisfied, you can complain to the Data Protection Board of India.
8. Security
We use TLS in transit, encryption at rest for sensitive fields, signed access tokens, audit logs, and role-based access for our team. No system is perfectly secure; please use a strong, unique password and contact us immediately if you suspect unauthorised access to your account.
9. Children
Swagloop is a B2B service intended for adults purchasing on behalf of a company. We do not knowingly collect personal data of anyone under 18. If you believe a minor has provided us data, write to us and we will delete it.
10. Changes to this policy
We may update this policy as the platform or the law evolves. Material changes will be notified by email and on this page. The date at the top of this policy reflects the current version.
11. Grievance Officer
In line with the DPDP Act and the Information Technology Act, 2000, you can contact our Grievance Officer for any privacy concern:
Grievance Officer Swagloop Ventures Private Limited (Swagloop) A1/87, 4th Floor, Sewak Park, Dwarka, New Delhi – 110059, India Email: hello@swagloop.com