Your data, yourchoice, control, consent, rights
What we collect, why we collect it, and how to ask us to change or delete it.
This policy explains what personal data WECARE.DIGITAL collects, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it.
WECARE.DIGITAL is a brand of WECARE.DIGITAL BHARATWORKS. In this policy, "we" and "us" mean that business, and "you" means anyone whose personal data we handle.
Read it alongside our Terms of Service at Terms of Service. Some services show additional privacy information of their own; where they do, that information applies on top of this policy.
Using our services is not blanket consent to every possible use of your data. Where the law requires your consent for something, we ask for it separately and specifically.
The “In short” lines are plain-language summaries to help you find the part you need. They are not part of the agreement and do not change it. Where a summary and the numbered text below it differ, the numbered text is what applies.
1What this policy covers
In shortEverything we offer under the WECARE.DIGITAL name, and nothing that independent sellers do with your data for their own purposes.
This policy covers our websites and apps, your account, orders and deliveries, appointments and bookings, professional and expert services, documentation and processing work, travel and experience services, digital products, subscriptions and memberships, partner and referral programmes, gift cards and promotions, customer support and grievances, and enterprise or institutional services.
Some things on our platform are provided by independent sellers, service providers or payment companies. Where they decide for themselves how to use your data, they are responsible for it and their own privacy terms apply, not ours.
2What we mean by personal data
In shortAny information that identifies you, or that can be linked back to you.
Personal data means information about a person who can be identified from it, or from it combined with something else we hold. Where the law you are covered by defines the term more broadly, that definition applies.
It includes what you give us directly, what we observe as you use the platform, and what we receive from third parties who are allowed to share it.
3What we collect
In shortWhat we collect depends on the service. We ask for what that service needs and not more.
The categories below describe the kinds of data a service may involve. Which of them apply to you depends on which services you use.
3.1Account and contact details
Your name, email address, phone number, username or account identifier, login credentials, contact preferences, and any profile details you choose to add or that a particular service requires.
3.2Transactions
When you buy, book or request something we handle the order or booking details, what was requested, billing and delivery information, the amount, payment status, any refund or cancellation, invoices, gift card or account credit, and your transaction history.
Payments are processed by independent banks and payment gateways. Depending on the method, we receive a transaction reference, a status, and limited payment details from the processor.
Where a payment provider collects your card or bank credentials directly, those credentials are held under that provider's privacy and security practices, not ours.
3.3Information you submit for a service
Depending on the service this can include documents, photographs, forms, application details, appointment information, instructions, preferences, identity or eligibility evidence, professional-service information, travel details, and anything else needed to complete your request.
Some services necessarily involve sensitive information - health, financial, identity, legal or consultation details. We handle it only for the purpose it was given, under the law that applies to it and any additional privacy notice shown for that service.
3.4Your messages to us
We process what you send by email, phone, messaging apps, platform chat, web forms, support requests and social media.
Where we record a call, consultation or interaction, we give notice or obtain authorisation before doing so where the law requires it.
3.5Device and usage data
This is collected automatically and includes your IP address, browser and device type, operating system, device or session identifiers, the pages and features you use, referring and exit pages, timestamps, diagnostic data and security logs.
3.6Location
Some services use approximate or precise location - for delivery, local availability, navigation, or a feature that depends on where you are.
Where a device permission or consent is required, we ask for it first. You can change or withdraw location permissions in your device or browser settings at any time.
3.7Cookies and similar technologies
We use cookies, pixels, local storage and similar technologies to keep the platform working, hold your session, remember preferences, protect accounts, measure performance, understand how services are used, prevent fraud, and support analytics, communications or advertising.
Where consent is legally required for a category of these technologies, we ask before setting them. Turning some of them off will stop parts of the platform working.
3.8Data we receive from others
We may receive personal data about you from sellers and service providers, payment providers, delivery partners, login providers, an organisation arranging your access to a service, your authorised representative, referral partners, public sources, and public authorities where the law permits it.
4How we collect it
In shortMostly from you, as you use the platform. Sometimes from partners, where that is necessary and lawful.
We collect data when you create or use an account, browse the platform, buy or book something, submit documents or forms, contact us, enter a promotion or event, deal with a seller through us, use a payment or delivery flow, leave a review, or interact with cookies.
We also receive data from authorised third parties where it is genuinely needed for a service you asked for, or for security, fraud prevention or verification.
5Why we use it
In shortTo run your account, deliver what you asked for, take payment, support you, keep the platform safe, meet legal duties, and improve the service.
We use personal data to set up and run accounts; provide the services you request; process orders and bookings; coordinate sellers and providers; take and verify payments; deliver goods; manage appointments; handle documents and requests; personalise relevant features; message you about your transactions; provide support; run subscriptions and memberships; operate partner and referral programmes; manage promotions, credits and gift cards; verify identity, authority or eligibility; protect users and the platform; prevent fraud and abuse; detect and investigate security incidents; maintain service quality; analyse and improve what we offer; handle complaints and disputes; bring or defend legal claims; and comply with the law.
If we ever want to use your data for something materially unrelated to the above, we will seek a fresh lawful basis first, including your consent where that is what the law requires.
6Consent, and when we do not need it
In shortWhere we rely on consent we ask clearly and you can withdraw it. Withdrawing may mean we can no longer provide the service.
Where we rely on your consent, we ask for it with a clear affirmative action and tell you what you are agreeing to.
You can withdraw consent at any time, using the mechanism shown for that service or by contacting us. Withdrawal stops future processing; it does not make lawful past processing unlawful.
If we need particular data to provide something you asked for, withdrawing consent or asking us to delete that data may mean we cannot start or continue the service. We will tell you when that is the case.
Some processing does not rely on consent - for example meeting a legal obligation, or preventing fraud. Where the law permits or requires us to process data on another basis, we do.
7Children
In shortOur services are built for adults. Where a child uses one and the law requires a guardian's consent, we obtain it. We do not target advertising at children.
Services that involve buying or entering into a contract are intended for people legally able to do so.
Where a service is available to a child and the law requires parental or guardian authorisation, we take steps to obtain and verify it.
We do not knowingly track, profile or target advertising at children where the law prohibits it.
If you believe we hold data about a child without the required authorisation, email one@wecare.digital and we will act on it.
8Professional and consultation information
In shortWhat you tell a professional through us is still protected personal data. It is not shared just because it was said in a consultation.
Some services involve professionals, experts, practitioners or institutions.
Information you give in connection with those services is personal data like any other. Access to it is limited to what the service requires, subject to the professional's own obligations and the law.
We do not treat consultation information as falling outside privacy protection merely because it was given during a professional interaction.
We will disclose it only where the law requires it, where it is necessary to address a serious and legally recognised safety risk, where you authorise it, where sharing is necessary to provide the service you asked for, or where another lawful basis applies.
Individual professionals may owe you additional duties of confidentiality beyond this policy.
9When an employer or institution arranges your access
In shortThey can see enough to confirm eligibility and pay for it. They do not get your consultation content just because they paid.
An employer, school, or other organisation may arrange or fund a service for you.
In that case the organisation gives us what is needed to confirm you are eligible and to administer your access.
What we report back to them depends on the arrangement, the service-specific terms and the law. Where we can report in aggregate or de-identified form, we do.
Your personal consultation content is not disclosed to that organisation merely because it funded your access. We disclose it only if you authorise it, if it is necessary to provide the service and we have told you so, or if the law requires it.
10Who we share it with
In shortOnly those who need it to deliver what you asked for, run the platform, or meet a legal obligation.
We share personal data only as far as necessary for a legitimate service, operational, security, transactional or legal purpose, and only as the law allows.
10.1Sellers and service providers
When you order something supplied by an independent seller or provider, we pass on what they need to fulfil and support the transaction. They may have their own legal and professional duties over that information.
10.2Suppliers who process data for us
We use third parties for cloud hosting, communications, authentication, support, analytics, security, payments, logistics, document processing, appointment systems and other infrastructure.
They receive only what their function requires, and are bound by contract, confidentiality and security obligations.
10.3Payment providers
What is needed to complete a payment, refund, chargeback or payment investigation passes between us and payment gateways, banks and card networks. They handle it under their own privacy terms and regulatory duties.
10.4Delivery partners
Delivery names, addresses, phone numbers and other details needed to complete a delivery are shared with couriers, sellers, warehouses and other fulfilment partners.
10.5Organisations that fund your access
Where an organisation arranges or pays for a service, we share what is needed to administer eligibility, billing and participation - as described for that service, and as the law allows. Section 9 sets the limits.
10.6Legal and regulatory disclosure
We disclose data where it is necessary or legally required to comply with the law or legal process, respond to a competent authority, protect someone's rights or safety, investigate fraud, prevent a security incident, enforce our agreements, or bring or defend a legal claim.
10.7If the business is restructured
If WECARE.DIGITAL is restructured, acquired, merged, financed or sold, personal data may transfer as part of that transaction, subject to the law and to appropriate safeguards.
11What you post publicly
In shortReviews and public profile content are visible to others. Giving us data for one purpose does not let us use it in advertising.
Anything you submit for public display - reviews, ratings, public comments, profile content - can be seen by other people. Please do not publish anything you would not want public.
Our rights over content you submit are set out in the Terms of Service at Terms of Service.
Giving us personal data for one purpose does not authorise us to use it in promotion or advertising. Where the law requires separate permission for that, we obtain it.
12Analytics, advertising and marketing
In shortYou can opt out of marketing. You cannot opt out of messages about your own order, payment or security - those are part of the service.
We use aggregated or de-identified information to understand how the platform performs and what people need.
Marketing messages carry the consent, unsubscribe or opt-out mechanism the law requires.
Messages necessary for your account, order, booking, payment, a security event, a grievance or a service you asked for continue even if you opt out of marketing. They are not marketing.
Where personalised advertising uses your personal data and the law requires consent or a specific choice, we provide that choice.
13Automated systems
In shortWe use software to route, secure and improve services. Where an automated decision materially affects you and the law requires review, you get it.
We use software and automated workflows to operate, secure, organise, route and improve our services, and for fraud detection, security monitoring, spam prevention and analytics.
Where an automated process materially affects you and the law requires additional disclosure, consent, human review or another safeguard, we provide it.
14Processing outside your country
In shortSome of our suppliers operate abroad, so data may be processed outside the country you use us from. Transfers are subject to legal safeguards.
Some technology, cloud, communications, payment and analytics providers process data outside the country you are using our services from.
Where data crosses a border we do so subject to the restrictions, requirements and safeguards that apply to that transfer.
We will change, restrict or stop a transfer arrangement where the law or a government direction requires it.
15How long we keep it
In shortFor as long as the purpose needs, or the law requires. Some financial and security records outlast your account.
We keep personal data for as long as the purpose it was collected for requires, or as long as a legal obligation requires. Different categories therefore have different retention periods.
Data may be retained for an active transaction or ongoing service; account administration; financial, tax and accounting records; statutory record-keeping; transaction security; fraud prevention; a complaint or dispute; backups; legal claims; and enforcing our agreements.
Some transaction, security and financial records must be kept after you close your account or ask for deletion, because the law requires it. Section 18 explains how that interacts with a deletion request.
When data is no longer needed we delete, anonymise or de-identify it.
16Security
In shortWe use access controls, encryption, monitoring, backups and vendor controls. No system is perfectly secure, so protect your own credentials too.
We use technical and organisational measures appropriate to the data and the risk. These include access controls, authentication, encryption or masking, monitoring and logging, backups, security testing, vendor controls, incident-response procedures and internal confidentiality rules.
No electronic system can be guaranteed completely secure. Please take reasonable care of your account credentials and devices.
17If there is a data breach
In shortWe contain it, investigate it, and tell you and the regulator where the law requires.
If we become aware of a personal data breach we assess it and take steps to contain, investigate and remedy it.
We notify affected people and the competent authorities where, and in the manner, the law requires.
A notification will describe what happened, the risks, what we have done, and what you can do to protect yourself.
18Your rights
In shortYou can ask what we hold, correct it, complete it, have it deleted, withdraw consent, or complain. Email one@wecare.digital.
Subject to the law and any lawful exception, you can ask us to tell you what personal data we process about you; correct anything inaccurate; complete or update anything incomplete; delete data where the law allows; stop processing that relies on consent you have withdrawn; and consider a privacy grievance. Where the law gives you the right to nominate someone to exercise your rights, you can do that too.
Send requests to one@wecare.digital. We may ask you for enough information to confirm who you are, or that you are authorised to act for someone else, before we act.
A deletion request does not cover data we are legally required to keep, or that remains genuinely necessary for another lawful purpose. Where we cannot delete something, we tell you why.
19Closing your account
In shortYou can close it. Some records are kept afterwards where the law requires.
Where account closure is available you can request it through the platform or through customer support.
Closing an account does not delete every record immediately. Data may be kept for completed transactions, legal obligations, fraud prevention, security, an unresolved dispute, or backups. Section 15 explains the periods.
20Your contact preferences
In shortManage them in the platform, by unsubscribe link, in device settings, or by asking us.
You can manage communication preferences through the platform, an unsubscribe link, your device settings, or by contacting us.
Marketing preferences do not affect operational messages about your account, a transaction, a booking, a security matter or a grievance.
21Other websites and services
In shortWe do not control third-party sites we link to. Read their terms.
The platform links to independent websites, apps and services. We do not control how they handle your data.
When you leave our platform, or deal directly with an independent provider, their privacy information and terms apply.
22Changes to this policy
In shortWe will tell you about material changes. Silence is never treated as consent where the law needs an explicit yes.
We update this policy when our services, technology, practices, security requirements or the law change.
Where a change materially affects how we handle your data, or where the law requires notice, we give notice.
We do not treat silence, inactivity or continued use as fresh consent where the law requires a separate affirmative consent.
23Questions and complaints
In shortEmail one@wecare.digital or call +91 9330994400. You can always go to a data-protection authority instead.
For any question, request or complaint about your personal data, contact our Privacy and Grievance Desk: email one@wecare.digital, or call +91 9330994400. Our postal address is in section 24.
We may ask for enough information to verify your identity or authority before acting on a request.
If you are not satisfied with our response, you keep any right you have to approach a data-protection authority, board, regulator, court or other lawful forum. Using our grievance process first is not a precondition.
24Who we are and how to reach us
In shortWECARE.DIGITAL BHARATWORKS, Kolkata. one@wecare.digital, +91 9330994400.
Brand: WECARE.DIGITAL, operated under the business name WECARE.DIGITAL BHARATWORKS.
Address: The W.B.S.I.D.C. Building, Unit 1/20 81/2/7, Phears Lane, Kolkata, West Bengal 700012, India.
Email one@wecare.digital or call +91 9330994400 with any question about this policy or about how we handle personal data.