At Mypacktech, your privacy is essential to us. When you use our services, you trust us with your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and the rights and choices available to you.

This Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. It forms part of our Terms & Conditions.

Data Fiduciary: GHV Packtech Enterprises, Plot No. 23, Ground Floor, Nangla Gujran Industrial Area, Sohna Ballabhgarh Road, Faridabad – 121004, Haryana, India, which owns and operates mypacktech.com, is the Data Fiduciary responsible for your personal data. In this Policy, “you” refers to the Data Principal whose personal data is processed.

Last updated: 31 July 2026

1. Information We Collect

We collect information to provide better, safer, and more personalised services. The type of information we collect depends on how you use Mypacktech’s services and the privacy choices you make.

2. Purposes and Legal Basis for Processing

Under the DPDP Act, we process your personal data only for lawful purposes, and only on one of the following bases:

1. Your consent — freely given, specific, informed, unconditional and unambiguous, given by a clear affirmative action, for the purposes notified to you at the time of collection
2. Certain legitimate uses permitted by Section 7 of the DPDP Act — for example, where you voluntarily provide data for a specified purpose, to comply with a legal obligation or court order, or to respond to a medical or safety emergency
3. Performance of our contract with you, including fulfilling and delivering your orders

We use your information to:

1. Create and manage your account and verify your identity
2. Process orders, quotations, bids, payments, invoices, delivery and returns
3. Issue GST-compliant tax invoices and maintain statutory accounting records
4. Provide customer support and respond to your enquiries and complaints
5. Operate our platform, personalise your experience and improve performance and analytics
6. Match candidates and employers where you use the Rojgar jobs platform
7. Detect, prevent and address fraud, abuse, and security risks, and protect our users and the public from harm
8. Send service and transactional communications relating to your account and orders
9. Send promotional communications, where you have consented to receive them
10. Comply with applicable law and respond to lawful requests from authorities

We will not use your personal data for a new purpose that is incompatible with the purpose notified to you, without obtaining your consent afresh.

3. Consent and Withdrawal of Consent

Where we rely on your consent, we will give you a clear notice at or before the time of collection, setting out the personal data to be collected, the purpose of processing, how you may exercise your rights, and how you may complain to the Data Protection Board of India. This notice is available in English and in the other languages supported by our platform, at your option.

You may withdraw your consent at any time, with the same ease with which it was given, by:

1. Changing the privacy or communication preferences in your account
2. Using the unsubscribe link in any marketing email
3. Writing to our Grievance Officer at the contact details in Clause 13

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Following withdrawal, we will cease processing your data within a reasonable time, unless retention is required by law. Please note that withdrawing consent necessary for a service may mean we can no longer provide that service, and that transactional communications relating to your existing orders will continue.

4. Sharing of Your Information

We do not sell your personal data.

We share personal data only as necessary, and only with:

1. Data Processors and service providers who help us operate the platform — such as hosting, payment gateways, logistics and courier partners, SMS and email providers, and analytics providers — under binding contracts requiring confidentiality and appropriate security
2. Employers or recruiters, where you apply for a role through Rojgar and choose to share your profile with them
3. Counterparties to a transaction, where you buy or bid on our marketplaces and the transaction requires the exchange of contact and delivery details
4. Courts, regulators, law enforcement and government agencies, where required to comply with a legal process or an enforceable government request
5. Professional advisers or an acquirer, in connection with a merger, acquisition or restructuring, subject to this Policy continuing to apply

Our processors act only on our documented instructions and may not use your data for their own purposes.

5. Data Retention and Erasure

We retain your personal data only for as long as is necessary for the purpose for which it was collected, or for such longer period as is required by law.

1. Order, invoice and tax records are retained for the period required under the GST and income tax legislation, currently up to eight years
2. Account data is retained while your account is active
3. Records relating to content removed following a complaint are retained for 180 days, as required under the IT Rules, 2021

When you withdraw consent, or when the purpose of processing is no longer being served and retention is not required by law, we will erase your personal data and require our processors to do the same.

6. Your Rights as a Data Principal

Under the DPDP Act you have the following rights, which you may exercise free of charge by contacting our Grievance Officer:

1. Right to access — to obtain a summary of the personal data we process about you, the processing activities undertaken, and the identities of the Data Fiduciaries and Processors with whom it has been shared
2. Right to correction, completion and updating — to have inaccurate or misleading data corrected, and incomplete data completed
3. Right to erasure — to have your personal data deleted where it is no longer required and retention is not mandated by law
4. Right to grievance redressal — to a readily available means of raising a grievance with us, as set out in Clause 13
5. Right to nominate — to nominate another individual who may exercise these rights on your behalf in the event of your death or incapacity

We will respond to a request within the timelines prescribed under the DPDP Act and its rules. We may ask you to verify your identity before acting on a request.

Where your account is part of a business account, the administrator of that account may be able to access data in accounts under their control, reset passwords, and suspend or terminate access. Please check with your organisation before storing personal information in a business account.

7. Your Duties as a Data Principal

Section 15 of the DPDP Act places certain duties on you. In particular, you must not:

1. Impersonate another person while providing personal data
2. Suppress any material information while providing personal data for any document or identifier issued by the State
3. Register a false or frivolous grievance or complaint
4. Furnish any information that is not verifiably authentic when exercising your right to correction or erasure

8. Children and Persons with Disability

Our services are intended for persons aged 18 years or older. In accordance with Section 9 of the DPDP Act, we do not knowingly process the personal data of a child without verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

Where a person with a disability has a lawful guardian, we process their personal data only with the verifiable consent of that guardian. If we become aware that we hold a child’s personal data without the required consent, we will erase it.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the website. These include:

1. Strictly necessary cookies — required for login, session management, security and your shopping cart; these cannot be disabled
2. Preference cookies — which remember settings such as your chosen language
3. Analytics cookies — which help us understand how the platform is used so we can improve it

Non-essential cookies are used only where you have consented. You may withdraw that consent, or block and delete cookies, through your browser settings, though some features of the website may not function correctly as a result.

10. International Users and Cross-Border Transfer

Our platform is available in multiple languages and may be accessed from outside India. Personal data collected through the platform is stored and processed in India.

Where we transfer personal data outside India — for example to a cloud or communications provider — we do so in accordance with Section 16 of the DPDP Act and will not transfer data to any country restricted by the Central Government. If you access our services from outside India, you understand that your data will be processed in India under Indian law.

11. Keeping Your Information Secure

We implement reasonable security safeguards to prevent personal data breaches, including:

1. Encryption of data in transit
2. Secure servers and hardened infrastructure
3. Role-based access controls and the principle of least privilege
4. Continuous monitoring for vulnerabilities and threats
5. Contractual security obligations on our processors

No system is completely secure, and we encourage you to keep your account credentials confidential and to notify us immediately if you suspect unauthorised access.

12. Personal Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and each affected Data Principal in the form and manner prescribed under the DPDP Act, without undue delay. Where applicable, we will also report cyber security incidents to CERT-In within the timelines prescribed under its directions issued under Section 70B(6) of the Information Technology Act, 2000.

13. Grievance Redressal and Contact

If you have any question, concern or grievance about this Privacy Policy or about how your personal data is handled, please contact our Grievance Officer:

Grievance Officer
Name: Geeta Sharma
Designation: Customer Support
GHV Packtech Enterprises,
Plot No. 23, Ground Floor, Nangla Gujran Industrial Area,
Sohna Ballabhgarh Road, Faridabad – 121004, Haryana, India
Email: ghvpacktech@gmail.com
Phone: +91 95559 10001
Working hours: Monday to Saturday, 10:00 AM – 6:00 PM IST

We will acknowledge your grievance within 48 hours and resolve it within the timelines prescribed under applicable law.

If you are not satisfied with our response, you may make a complaint to the Data Protection Board of India in the manner prescribed under the DPDP Act.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any change will be posted on this page with a revised “Last updated” date. Where a change materially affects your rights, or where a new purpose requires your consent, we will notify you through your registered contact details and, where required, obtain your consent afresh. We recommend reviewing this page periodically.