This Privacy Policy explains what information AIBDA Online Store(the “Store”, operated by the All India Blood Donors Association) collects when you use the Store, how we use it, and the choices you have. This Policy applies only to the Store; AIBDA’s broader donor platform has its own Privacy Policy.
1. Information We Collect
You give us directly
- Mobile number — used to sign you in and to confirm AIBDA membership.
- Name, delivery address, district/state — used to place orders and connect you with Providers.
- Cart contents — the products you intend to order.
- Messages to Providers — the order summary we pre-fill into WhatsApp on your behalf at checkout.
- Profile photo / banner — only if you are a Provider and upload them yourself.
If you register as a Provider
- Shop details — name, address, category, logo and banner images.
- Authorised persons — name, mobile number, designation and signature image.
- Agreement details— the name, designation and signature of whoever accepts the agreement, the names, addresses and signatures of any witnesses you enter, the date and time of acceptance, and the IP address and browser the acceptance came from.
- Hospitals only— establishment type, registration/licence number and the discounts you commit to under the MOU.
What appears publicly on your shop page
We collect the agreement details above to draw up your agreement with AIBDA and to prove who accepted it. We also publish a copy of that signed agreement on your public shop page so shoppers can see what you have committed to. This is a separate purpose from the one it was collected for, so we tell you before you sign, on both the registration form and the acceptance screen.
- Published:the agreement text, your shop name and address, the signatory’s name and designation, the signature images, witness names and addresses, and the acceptance date.
- Not published: the IP address and browser details. The contact number is masked to its last four digits. AIBDA retains the full record privately to verify the agreement in a dispute.
- Witnesses:if you enter witness details you are giving us another person’s information. Please make sure they know it will be published.
- The agreement page is not indexed by search engines, and the published copy is withdrawn if the shop is removed from the Store.
We collect automatically
- Basic device and browser information, IP address, and approximate location — for security, fraud prevention, and to make the site work on your device.
- Anonymous usage signals (which pages were viewed, which searches were run) — for improving the Store. We do not run third-party advertising trackers.
- Cookies — a small session cookie keeps you signed in. We use no third-party advertising cookies.
We do not collect
- Card numbers, UPI IDs, or any payment credentials — payment happens directly between you and the Provider, off the Store.
- Health, blood-group, or donation history from AIBDA’s donor database — the Store only reads membership status, not your medical record.
2. How We Use Your Information
- To authenticate you (OTP login over WhatsApp).
- To show you relevant products and shops, including search results and personalised recommendations.
- To generate the WhatsApp message that connects you with the Provider when you check out.
- To detect fraud, abuse, and policy violations.
- To communicate with you about your account, your orders, or important Store updates.
3. How We Share Your Information
- With Providers you order from: Your name, contact number, delivery address, and the items you ordered are shared with the Provider through the WhatsApp message you send at checkout, so they can fulfil your order. Once that message is sent, the Provider becomes an independent data controller of that information.
- With AIBDA staff: Authorised admins can view your account, orders, and Provider listings to manage the Store and resolve disputes.
- With service providers we rely on (e.g. WhatsApp Business API, cloud hosting): only the minimum data required to deliver the service, under written terms requiring confidentiality.
- With authorities: if required by law, by a court order, or to protect the rights, property, or safety of AIBDA, our members, or the public.
We do not sell your personal information to anyone.
4. Data Retention
- Your account stays active as long as your AIBDA membership is active. If your membership ends, your account is deactivated and your data is retained only as long as needed for legal, accounting, or dispute-resolution purposes.
- Order history is retained for at least 3 years for accounting and dispute reasons.
- Cart contents are auto-deleted if untouched for an extended period.
- OTP sessions are deleted shortly after use.
5. Security
We use reasonable technical and organisational measures — encrypted transport (HTTPS), hashed credentials, principle-of-least-privilege access — to protect your data. No system is perfectly secure; if we become aware of a breach that affects your data, we will notify you as required by law.
6. Your Choices
- Access & correction: You can view and update your account details from the Account page after signing in.
- Deletion: You can request deletion of your Store account by writing to us at the contact below. Note that some information must be retained to comply with law or to resolve open disputes.
- Communication preferences: Service messages (OTPs, order confirmations) are mandatory while you have an active account. We do not send marketing messages without separate consent.
7. Children
The Store is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us so we can remove the account.
8. Changes to This Policy
We may update this Policy from time to time. The “Last updated” date at the top reflects the current version. If we make a material change, we will notify you through the Store or by message before it takes effect.
9. Contact
For privacy questions or to exercise your data choices, write to AIBDA at the email address listed on aibda.org.in. Please mention “AIBDA Store privacy” in the subject line so it reaches the right team.