Privacy Policy

1. Introduction & Scope

BunkYard ("we", "our", or "us") operates the campus store for the IIT Jodhpur community. We are committed to protecting your personal data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 of India. This Privacy Policy outlines what personal information we collect, how we process it, and your rights as a data principal.

2. Data We Collect

To fulfill your orders and manage campus delivery, we collect the following personal data:

• Identity Details: Full Name.
• Contact Details: Email Address (preferably IITJ institutional email) and Phone Number.
• Delivery Details: Hostel Block, Room Number, and chosen pick-up location inside the IIT Jodhpur campus.
• Technical Session Identifiers: Anonymous session tokens and transaction logs generated during UPI/Card checkout.

3. Purpose and Legal Basis of Processing

We process your data strictly for the following purposes:

• Order Fulfillment: Printing, preparing, and delivering customized merchandise directly to your hostel room.
• Communication: Sending transaction receipts, payment confirmation, order tracking updates, and delivery alerts.
• Referral Wallet Balance Management: Attributing credits for referred purchases.

The legal basis for this processing is your explicit consent provided during checkout/wallet registration, and the performance of our contract to deliver products to you.

4. Data Storage and Security

Your personal data is stored securely in hosting environments powered by trusted infrastructure partners (Neon PostgreSQL databases). We apply industry-standard electronic and procedural safeguards, including SSL/TLS encryption for database connections and secured API endpoints, to protect your data from unauthorized access, modification, or leakage.

5. Data Sharing and Third Parties

We respect your privacy and do not sell, rent, or trade your personal data with any third parties. Your name, email, and phone number are shared securely only with our integrated payment gateway (Cashfree Payments) to complete financial transactions. We do not store or witness your credit card numbers, net banking passwords, or UPI PINs.

6. Your Rights under the DPDP Act 2023

As a data principal under Indian law, you have the following rights:

• Right to Access: The right to request details of your personal data processed by us.
• Right to Correction & Erasure: The right to correct inaccuracies or request the complete deletion of your data once fulfillment is completed.
• Right to Withdraw Consent: The right to withdraw consent for processing at any time.

To exercise any of these rights, please contact our support team at hi.bunkyard@gmail.com.