This policy explains how SUB Solution (“we”, “us”) processes personal data when you use our website and the platform at app.subsolution.in. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, and act as the Data Fiduciary for the data described here.
Where you, as a shipper, give us your customers’ details to deliver their orders, you decide why that data is processed; you are responsible for having a lawful basis to share it with us, and we process it only to provide the services you ask for.
1. Data we collect
- Account data: name, business name, email, mobile number, address, GSTIN, PAN and KYC documents, and login credentials.
- Team data: names, emails and roles of the users you add to your account.
- Shipment data: pickup and delivery names, addresses, pincodes and phone numbers, parcel contents, value, weight and dimensions, invoices and tracking events.
- Payment data: wallet top-ups, transaction references, COD amounts and bank account details for remittance. Card and UPI details are handled by our payment gateways; we do not store full card numbers.
- Usage data: IP address, device and browser details, pages visited and actions taken, collected through logs and essential cookies.
- Communications: messages you send us and details you give when asking for a quote by email or WhatsApp.
2. Why we use it
We process personal data on the basis of your consent or for legitimate uses permitted by the DPDP Act, such as performing the service you requested or complying with law. Marketing messages are sent only with your consent, and you can opt out at any time.
- To create and secure your account and verify your business.
- To quote, book, track and deliver shipments, including sharing details with the courier that carries them.
- To run the prepaid wallet, re-rate shipments, reconcile and remit COD, and issue invoices.
- To provide support, send service messages (booking, tracking, wallet and payment alerts) and resolve disputes.
- To prevent fraud, enforce our terms and meet legal, tax and regulatory obligations.
- To improve the platform, using aggregated or de-identified data where possible.
3. Who we share it with
We do not sell personal data. Some service providers may process data outside India; where they do, we transfer it only as permitted under the DPDP Act.
- Courier partners, which need the pickup and delivery details to carry the shipment.
- Payment gateways and banks (such as Razorpay and CCAvenue) to process top-ups, refunds and remittances.
- Service providers that host, store, secure or support the platform, under contracts that limit their use of the data.
- Government authorities, courts or regulators where the law requires it.
4. How long we keep it
We keep personal data for as long as your account is active and as long as needed for the purposes above. Shipment, invoice and payment records are kept for the period required by tax and accounting laws (generally eight years). When data is no longer needed, we delete or anonymise it.
5. How we protect it
We use reasonable security safeguards, including encryption in transit, role-based access so each user sees only what their role allows, audit logs of changes, and restricted access to production systems. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act requires.
6. Your rights
To exercise any of these rights, write to support@subsolution.in. We may need to verify your identity before acting on a request.
- Access a summary of the personal data we process about you and the processing activities.
- Correct, complete or update inaccurate or incomplete data.
- Erase data that is no longer needed, subject to legal retention requirements.
- Withdraw consent at any time (this does not affect processing already done, and may mean we can no longer provide some services).
- Nominate another person to exercise your rights in the event of death or incapacity.
- Have your grievances redressed by our Grievance Officer, and then by the Data Protection Board of India.
7. Cookies
We use essential cookies and local storage to keep you signed in, remember your theme and keep the platform secure. We do not use advertising cookies.
8. Children
The platform is meant for businesses and adults. We do not knowingly collect personal data of children (persons under 18) for any purpose other than delivering a parcel addressed to them.
9. Grievance Officer
Grievance Officer: [Name to be confirmed], SUB Solution, 401, Pooja Complex, Veer Savarkar Block, Shakarpur, Delhi 110092. Email: support@subsolution.in · Phone: +91 98105 92557. We will acknowledge a grievance promptly and try to resolve it within the time the DPDP rules prescribe.
10. Changes to this policy
We may update this policy. The latest version is always on this page with its “Last updated” date; for material changes we will also notify you by email or in the platform.