Our DPDP 2023 Privacy Commitments
Under the Digital Personal Data Protection Act of India, you and your website visitors retain complete sovereignty over your digital personal data. Here is our solemn pledge:
Explicit Consent Prior to Collection
Every inquiry form, booking widget, and lead capture block requests clear consent before sending customer details to the business.
Zero Data Reselling or Aggregation
We never broker, bundle, rent, or sell phone numbers, leads, or merchant contact details to telemarketers or third-party advertisers.
Role-Based Masking & Least Privilege
Viewer and support team roles see masked customer contacts. Only verified primary business owners have permission to inspect raw leads.
Right to Erasure & Portability
Merchants and visitors may request complete data exports or irreversible erasure of lead submissions at any time without penalty.
1. Information We Collect
MiniSite collects personal data in three limited contexts:
- Business Account Information: Name, WhatsApp / mobile telephone number, email address, physical store/office location, business category, and optional UPI ID used to generate direct UPI payment links.
- Visitor Lead & Booking Details: Customer name, contact number, preferred booking timeslot, or project inquiry message submitted voluntarily through a merchant's published page.
- Platform Analytics: High-level view counts, referring source tag (e.g. Instagram reel, QR code scan), and anonymous device type (mobile or desktop). We do not perform cross-site tracking or build third-party behavioral advertising profiles.
2. How We Use and Process Information
In compliance with the Principle of Purpose Limitation under the DPDP Act, personal data is processed solely for legitimate business operations:
- To display your public business microsite to potential customers.
- To transmit customer inquiries and VIP booking requests directly to the business owner via secure dashboard and WhatsApp handoff.
- To enable peer-to-peer UPI payments directly between the customer's banking app and the business's bank account with zero middleman holding.
- To verify certified partner identities and prevent fraudulent representation of local businesses.
3. Financial & Payment Data Security (Zero Gateway Retention)
MiniSite does not operate a custodial payment wallet or payment gateway.
All customer payments are initiated via direct standard upi://pay universal deep-links or QR codes. When a customer pays, transaction credentials, PINs, bank accounts, and card numbers are entered strictly inside the customer's own bank or NPCI-approved UPI app (Google Pay, PhonePe, Paytm, BHIM, etc.).
4. Data Retention, Storage, and Erasure
Data is securely stored in cloud facilities compliant with industry standards including AES-256 encryption at rest and TLS 1.3 in transit.
- Retention Period: Lead submissions are preserved only as long as necessary for the merchant to service the inquiry.
- Deletion on Request: Business owners can delete any lead record directly from their dashboard. When an account is terminated, all associated microsite content and lead databases are permanently purged within 30 days.
- Customer Erasure: If a customer previously submitted a form to a merchant and requests deletion, MiniSite provides a dedicated channel to purge records from backups.
5. Rights of the Data Principal (Under DPDP Act 2023)
As a Data Principal, Indian law grants you the following statutory rights:
6. Grievance Officer & Privacy Contact
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, our designated Data Protection & Grievance Redressal Officer may be reached at:
Grievance Officer: Data Privacy Desk, MiniSite
Email: privacy@minisite.com
Response SLA: Within 48 hours for acknowledgment; resolution within 30 days.
Jurisdiction: Ahmedabad, Gujarat, India