Privacy Policy

1. Information We Collect

1.1 Vendor Data Collection & Identity Proofs

To ensure a trustworthy marketplace environment and prevent fraudulent business listings, SpotList.in collects necessary identity and commercial operation proofs from Vendors during account setup:

• Contact & Personal Identifiers: Full name of business owner/authorized representative, primary email address, and mobile phone number (verified via mandatory One-Time Password / OTP).
• Business Details: Official Shop / Business Name, physical commercial store address, operational category, and customer service contact details.
• Government Verification Documentation: Verification proofs required to audit business legitimacy, including:
  • Shop & Establishment License
  • Commercial / Business License
  • Goods and Services Tax (GST) Registration Certificate
  • Permanent Account Number (PAN Card)
  • Udyam / MSME Registration Certificate
  • Other government-approved business licenses
• Micro-Enterprise Allowance: For small shop owners, micro-vendors, or sole proprietors lacking formal tax/GST registrations, official government photo identity proofs (such as PAN card or government ID proofs) are accepted solely for identity verification purposes.

1.2 User Data Collection

To enable B2C directory access and routing of business inquiries, end-users (“Users”) are required to register and provide basic verification identifiers:

• Full Name, primary email address, and verified mobile phone number.
• Search parameters, geographic query locations, and specific service request details submitted on the platform.

2. Purpose and Legal Basis for Processing Data

SpotList.in collects and processes information strictly for legitimate commercial and regulatory compliance purposes:

• Business Verification & Fraud Prevention: To audit vendor authenticity, eliminate fake or clone profiles, and maintain platform integrity.
• B2C Lead Facilitation: To connect verified local service providers and shop owners with Users seeking business solutions.
• Administrative Communication: To send account verification codes, transactional notices, system alerts, and statutory updates regarding our terms or policies.
• Payment Processing: To manage voluntary Vendor subscriptions for Premium plans using secure third-party payment gateways.

3. Data Privacy, Non-Disclosure & Secure Storage

3.1 Strict Non-Public Disclosure Policy

Government identity proofs, business license certificates, tax registration numbers, and internal audit files submitted by Vendors are collected strictly for administrative and verification audits. SpotList.in will NEVER publicly publish, display, trade, sell, or rent private verification documents or tax identifiers to general website visitors or third-party marketing entities.

3.2 Financial Credentials Safeguard

SpotList.in DOES NOT request, collect, store, or process sensitive personal banking credentials, credit/debit card numbers, CVV codes, bank PINs, or financial One-Time Passwords (OTPs). All subscription payments are executed through secure, PCI-DSS compliant third-party payment gateway providers.

4. Cyber Security & Limitation of Liability

SpotList.in implements appropriate administrative, technical, and physical security measures to safeguard stored data against loss, unauthorized access, or disclosure. However, Vendors and Users acknowledge that no digital transmission or cloud storage system is completely immune to security breaches.

Cyber Security Disclaimer: In the event of illegal hacking, malicious cyber-attacks, third-party data theft, server corruption, or accidental loss beyond reasonable technical control, SpotList.in shall NOT be held financially, legally, or criminally liable for any damages, losses, or claims arising therefrom.

5. Policy Modifications & Advance Notice

SpotList.in reserves the right to revise or update this Privacy Policy at any time. When material changes occur, SpotList.in will notify registered Vendors and Users via email or prominent platform announcements at least fifteen (15) calendar days prior to the effective date of the updated policy. Continued use of the platform after the 15-day notice period constitutes binding agreement to the revised Privacy Policy.

6. Governing Law & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India and the State of Tamil Nadu. Any legal dispute, claim, or proceeding relating to data privacy or platform operations shall fall under the EXCLUSIVE JURISDICTION OF THE COURTS OF DINDIGUL DISTRICT, TAMIL NADU, INDIA.