Privacy Policy
This privacy policy (“Policy”) was last changed on June 26, 2025. We may occasionally make changes to the Policy. If we do, we shall notify either by sending you an e-mail or sending you a notification through our mobile application (“App”). Please make sure to read such notices carefully.
We hold the sincere belief that you should always know what data we collect from you, the purposes for which such data is used, and that you should have the ability to make informed decisions about what data you want to share with us.
This is why we want to be fully transparent about: (i) how and why we collect, store, share and use your personal data through the various capacities in which you interact with us; and (ii) the rights that you have to determine the parameters of this interaction.
While we would strongly advise you to read the Policy in full, the following summary will give you a snapshot of the salient points covered herein:
- This Policy details the critical aspects governing your personal data relationship with “OnPacts” which is owned and operated by OnPacts Private Limited, a company incorporated under the laws of India, and having its registered office at Rh No. 1, Artillery Road, Nashik- 422101, Maharashtra, India.
- Your personal data relationship with OnPacts varies based on the capacity in which you interact with us/avail of our products and services (“Services”). You could be: (i) a visitor to https://www.onpacts.com (“Website”) or any pages thereof (“Visitor”); or (ii) a person who has an account with OnPacts to avail our Services (“Registered User”);
- Based on whether you are a Visitor or Registered User, the type of data we collect and the purpose for which we use it will differ and this Policy details such variations;
- This Policy applies to all the Services provided by OnPacts through the Website, App or any other associated website of OnPacts;
- This Policy is a part of and should be read in conjunction with our Terms of Service; and
- This Policy will clarify the rights available to you vis-à-vis the personal data you share with us.
If you have any queries or concerns with this Policy, please contact our Grievance Officer. If you do not agree with the Policy, we would advise you to not visit/use the Website or the App.
INFORMATION WE COLLECT AND HOW WE USE IT
- Your IP Address;
- Your location;
- How you behave on the Website, (what pages you land on, how much time you spend, etc.);
- What device you use to access the Website and its details (model, operating system, etc.);
- Your name, age, gender, phone number, e-mail address, mailing address;
- Your height, weight;
- Username or other relevant unique identifier;
- How you behave on the Website, (what pages you land on, how much time you spend, etc.);
- Credit card/debit card/other payment mode information to facilitate payments for our Services;
HOW AND WHY WE USE IT
We collect this data in order to help you register for and facilitate provision of our Services.
We use this data to show age appropriate content and advertisements.
We use this data to enable you to make payments for our Services. We use a third-party service provider to manage payment processing. This service provider is not permitted to store, retain, or use information you provide except for the sole purpose of payment processing on our behalf
We use this data for processing your requests, enquiries and complaints, customer services and related activities.
We use this data to communicate about existing or new offers, content, advertisements, surveys, key policies or other administrative information.
We also use this data to provide you with informative features and services that are developed by us from time to time.
We also use this data for providing, testing, improving, or recommending the Services.
We also use this data for analytics and reviews to improve the Services.
We also use this data to provide support to law enforcement agencies or in connection with an investigation on matters related to public safety, as permitted by law or anti-fraud activities/systems.
If you give us your consent, we may send you newsletters and emails to market other products and services we may provide.
FOR THE AVOIDANCE OF ANY DOUBT, WE SHOULD CLARIFY THAT IN THE EVENT WE ANONYMIZE AND AGGREGATE INFORMATION COLLECTED FROM YOU, WE WILL BE ENTITLED TO USE SUCH ANONYMIZED DATA FREELY, WITHOUT ANY RESTRICTIONS OTHER THAN THOSE SET OUT UNDER APPLICABLE LAW.
YOUR RIGHTS & PREFERENCES AS A DATA SUBJECT IN THE EU
It might have come to your attention that a new law was passed in the European Union (EU) called the General Data Protection Regulation (GDPR). The GDPR gives certain rights to individuals who are EU data subjects, in relation to their personal data.
Subject to the GDPR and applicable law’s limitations, the rights afforded to you if you are an EU data subject are:
RIGHT TO BE INFORMED You have a right to be informed about the manner in which any of your personal data is collected or used which we have endeavoured to do by way of this Policy. | RIGHT OF ACCESS You have a right to access the personal data you have provided by requesting us to provide you with the same. |
RIGHT TO RECTIFICATION You have a right to request us to amend or update your personal data if it is inaccurate or incomplete. | RIGHT TO ERASURE You have a right to request us to delete your personal data. |
RIGHT TO RESTRICT You have a right to request us to temporarily or permanently stop processing all or some of your personal data. | RIGHT TO OBJECT You have a right, at any time, to object to our processing of your personal data under certain circumstances. You have an absolute right to object to us processing your personal data for the purposes of direct marketing. |
RIGHT TO DATA PORTABILITY You have a right to request us to provide you with a copy of your personal data in electronic format and you can transmit that personal data for using another third-party’s product/service. | RIGHT NOT TO BE SUBJECT TO AUTOMATED DECISION-MAKING You have a right to not be subject to a decision based solely on automated decision making, including profiling. |
In case you want to exercise the rights set out above you can contact our helpline emails: support@onpacts.com, and operations@onpacts.com
The data provided by you as a Visitor, or when you sign up as a Registered User for our Services will be processed by us for the purpose of rendering Services to you or in order to take steps prior to rendering such Services, at your request. Where such data is not being used by us to render Services to you, we shall explicitly seek your consent for using the same. You can choose to withdraw this consent at any time by writing to us on our above listed email links. Additionally, we may process your data to serve legitimate interests.
If you believe we have used your personal data in violation of the rights above or have not responded to your objections, you may lodge a complaint with your local supervisory authority.
COMPLIANCE WITH CHILDREN’S ONLINE PRIVACY PROTECTION ACT
As a business service, we neither knowingly collect or store nor use any personal data of any child. Children under the age of 18 (or such other minimum age prescribed under law of the relevant territory) should seek the consent of their parents before providing any information about themselves, their parents, or other family members on our Website/App.
TRANSFER OF INFORMATION
In the ordinary course of business, we may employ other companies and people to assist us in providing certain components of our Services in compliance with the provisions of this Policy. To do so, we may need to share your data with them.
Where applicable – if the entities to which these transfers are effected are not situated in countries deemed ‘adequate’ by the European Commission or are not registered under the EU-US Privacy Shield framework, we shall enter into appropriate Data Protection Addendums with the transferee parties that comprehensively protect your data. We shall also put in place industry-standard technical and organizational measures (including robust data handling policies) to ensure that such transfers are completed in accordance with applicable laws.
Some of the examples of where we may sub-contract processing activities to third parties include—record keeping, data analysis, marketing assistance, processing payments, and providing customer service.
THIRD PARTY LINKS
We may display links to third-party websites or applications on our Website or App for advertising or providing you with relevant content. We will not be responsible for such third-party websites or applications if you choose to access them. If you provide any data to such a website/application, please ensure you read their policies given that you will no longer be bound by this Policy in doing so.
We may receive data whenever you visit a third-party link through our Website/App which includes the date and time of your visit to the third-party website, the web address or URL, technical information about the IP address, browser and the operating system you use and, if you are logged into OnPacts, your username.
SECURITY OF YOUR PERSONAL INFORMATION
We implement industry-standard technical and organizational measures by using a variety of security technologies and procedures to help protect your data from unauthorized access, use, loss, destruction or disclosure. When we collect particularly sensitive data (such as a credit card number or your geo-location), it is encrypted using industry-standard cryptographic techniques including but not limited to PBKDF2, AES256, TLS1.2 & SHA256.
The collection, storage, usage, and sharing of your data by the Company shall be in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and other applicable laws.
Your password is your first line of defence once you set up an OnPacts account, we recommend that you set a strong password which you never share with anyone.
We have taken appropriate steps for the security and protection of all our digital platforms including internal applications, however, we shall not be responsible for any breach of security or the disclosure of personal data for reasons outside our control, such as hacking, social engineering, cyber terrorism, espionage by third parties, or any events by way of force majeure such as sabotage, fire, flood, explosion, acts of God, civil commotion, strikes or industrial action of any kind, riots, insurrection, war or acts of government.