Last updated: 24 October 2026
This policy explains how AmazeBazaar ("we", "us"), operator of AmazeBazaar, collects, uses and protects your personal data, in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Data we collect
- Account data: name, email address, phone number (optional) and an encrypted password.
- Order data: books purchased, amounts, billing state and GSTIN (if provided), invoice details.
- Payment data: payments are processed by our payment partners (e.g. Razorpay). We never see or store your full card number, CVV, UPI PIN or net-banking password.
- Seller data: if you sell on AmazeBazaar, we also collect your legal name, address, PAN, GSTIN (if any) and payout details (UPI ID or bank account). PAN and bank account numbers are stored encrypted and are visible only to staff who process payouts and tax filings.
- Technical data: IP address, browser type, device, pages viewed and download records, used for security and fraud prevention.
2. Why we use it
- To create your account and deliver the books you buy.
- To issue GST invoices and meet tax and accounting obligations.
- To pay sellers, deduct tax where the law requires, and report it to the authorities.
- To protect your account and our files from fraud, piracy and abuse.
- To send order and account emails and, unless you unsubscribe, news about new books and offers. Every such email has an unsubscribe link.
3. Sharing
We share data only with service providers who help us run the store (payment gateways, email delivery, hosting), with authorities where the law requires it, and never sell your personal data. Sellers see sales of their books (date, book, amount and billing state) but never a buyer's name, email address or payment details.
4. Retention
We keep account data while your account is active. Order, invoice and seller payout records are kept for at least 8 years as required by Indian tax law, even after account deletion.
5. Your rights
You can access and correct your data from your account, unsubscribe from marketing emails at any time, and delete your account from Account → Security. For any request, write to support@amazebazaar.com.
6. Grievance Officer
Grievance Officer, AmazeBazaar, Kolkata, West Bengal, India. Email: support@amazebazaar.com. We acknowledge complaints within 24 hours and resolve them within 15 days.
7. Visitor statistics
To understand how our store is used, we run our own visitor statistics on our own server; no third-party tracking service is used for this. When you browse AmazeBazaar we record the pages you view and how long they stay open, the website or app that sent you (for example Google or Facebook), your device type, browser, operating system, screen size and language, and an approximate location (country, state and city) worked out from your IP address. Each browser gets a random identifier stored in a cookie so we can tell new visitors from returning ones; it does not contain your name or email address.
Only our staff can see these statistics. Full IP addresses are kept for at most 30 days and are then shortened (the last part is removed). Visit records are deleted after 400 days. Locations are looked up in a database stored on our server.
Google Ads measurement
AmazeBazaar advertises on Google. When you arrive from one of our ads, Google sets cookies (such as _gcl_au and _gcl_aw) and we keep the ad click ID with your order, so we can measure whether our ads lead to sign-ups and purchases. For a purchase Google receives the order number and amount, never your card or bank details. With your purchase we also send Google a one-way encrypted (hashed) version of your email address and phone number, so Google can match the purchase to an ad you saw while signed in to Google; Google cannot read them and does not receive them in plain text. These cookies are only used after you accept them in the cookie banner; you can change your choice by clearing cookies for this site. You can control ads personalisation at adssettings.google.com.
Facebook and Instagram (Meta) measurement
AmazeBazaar uses the Meta Pixel and Meta Conversions API to measure our Facebook and Instagram ads. They record pages you view, books you add to your cart, the start of checkout, account sign-ups and purchases (order number, books and amount; never card or bank details). Meta sets cookies such as _fbp and _fbc. To match these actions to Facebook and Instagram accounts, a one-way encrypted (hashed) version of your email address, phone number and name is shared with Meta; Meta cannot read them in plain text. You can manage ad preferences at facebook.com/adpreferences.
Google Tag Manager
AmazeBazaar uses Google Tag Manager to load measurement and advertising tools (for example Google Analytics and ad platforms). Tag Manager itself does not set cookies, but the tools it loads may. They receive information such as the pages and books you view, items added to the cart and orders (order number and amount, never card or bank details). For a purchase, a one-way encrypted (hashed) version of your email address and phone number may be shared with these services so they can measure it; they cannot read them. These tools only use cookies after you accept them in the cookie banner.