Avantara Global Logo
Home/Legal & Policies/Privacy Policy
Data Protection & DPDP Act Compliant (v2.3)

Privacy Policy of Avantara Global

Learn how we protect your personal data, ensure privacy across all digital utility & e-commerce transactions, and maintain absolute transparency.

Effective Date: September 28, 2026
DPDP Act 2023 & IT Act 2000

256-Bit SSL Encryption

Military-grade data transmission security for all user sessions.

Zero Third-Party Selling

We never monetize or trade your personal data with advertisers.

PCI-DSS Payment Gateways

Tokenized, certified payment processing with verified banking partners.

Full Data Rights

Access, modify, or request deletion of your records under DPDP Act 2023.

Section 01

Data Controller & Scope of Policy

Entity responsible for personal data management and platform boundaries covered by this policy.

This Privacy Policy outlines how Avantara Global ("Company", "we", "our", or "us") collects, uses, stores, processes, discloses, and protects your personal and sensitive data when you visit www.Avantaraglobal.com, use our mobile applications, member portal, e-commerce store, utility gateways, or engage with our direct selling and franchise networks.

Avantara Global serves as the primary Data Controller for the personal data collected under the provisions of the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By creating an account, browsing our website, or submitting documents for KYC verification, you explicitly consent to the collection, transfer, and processing of your personal data as described in this policy.

Section 02

Information We Collect

Categories of personal, financial, KYC, device, and transactional information collected from users.

We collect personal information necessary to deliver our multi-sector services safely and efficiently:

Personal & Identity Data

Full name, date of birth, gender, residential address, postal code, mobile number, email address, sponsor ID, and direct seller ID.

KYC & Regulatory Identifiers

Permanent Account Number (PAN), masked Aadhaar number, government ID proofs, GSTIN (for franchise partners), and bank account details.

Transaction & Utility Data

Order history, product delivery addresses, gold holdings, mobile recharge numbers, FASTag IDs, flight booking records, and commission payouts.

Device & Technical Logs

IP address, browser type, operating system version, device identifiers, session cookies, login timestamps, and referral URLs.

Section 03

How We Use Your Information

Lawful purposes including account operation, commission distribution, KYC audits, and service delivery.

We process your personal information strictly for legitimate commercial and regulatory objectives:

  • Account Administration: Registering and authenticating your user dashboard, managing member IDs, and securing access via 2-Factor Authentication (2FA).
  • Order Fulfillment & Delivery: Processing product orders, dispatching physical goods, generating GST tax invoices, and providing real-time courier tracking.
  • Commission & Bonus Calculations: Calculating legitimate direct sales incentives, bonus payouts, and executing bank transfers with mandatory TDS deduction.
  • Gold Vault Management: Recording live gold purchases, updating physical vault holdings, and dispatching BIS-hallmarked bullion upon redemption.
  • Utility Execution: Routing recharge, FASTag, travel reservations, and tax filing requests through authorized API aggregators and BBPS gateways.
  • Fraud Prevention & Legal Compliance: Detecting duplicate accounts, preventing money laundering, and complying with statutory reporting directives.
Section 04

Data Protection & Security Architecture

256-bit SSL encryption, tokenization, restricted role-based access, and audited vault storage.

Avantara Global employs industry-leading technical, physical, and managerial security protocols to prevent unauthorized access, alteration, disclosure, or destruction of your personal data:

End-to-End Encryption

All communication between your browser and our servers is secured with 256-bit SHA-256 Transport Layer Security (TLS 1.3). Sensitive data such as passwords and transaction PINs are irreversibly hashed with salted cryptographic algorithms.

PCI-DSS Compliant Payment Gateways

We do NOT store your full credit card numbers, CVVs, or net banking passwords. All online payments are securely processed by RBI-licensed PCI-DSS Level 1 certified payment aggregators.

Role-Based Access Control (RBAC)

Access to sensitive member information and KYC documents is restricted strictly to authorized compliance officers on a strict need-to-know basis, monitored with audit logs.

Section 05

Data Sharing & Third-Party Disclosures

Circumstances under which data is shared with logistics, telecom, payment, or regulatory partners.

We never sell, rent, or trade your personal data to third-party advertisers. We share data only with verified partners under strict non-disclosure obligations:

  • Courier & Logistics Partners: Name, delivery address, and contact number shared with delivery partners (e.g., Blue Dart, Delhivery) for package dispatch.
  • Payment Gateways & Banking Partners: Bank account numbers and IFSC details shared for automated NEFT/IMPS payout disbursements and tax deduction filings.
  • Utility & Service Providers: Telecom operators, airlines, hotel reservation systems, and GST filing partners strictly for fulfilling requested transactions.
  • Law Enforcement & Statutory Authorities: When compelled by valid court orders, government notices, or to comply with the Prevention of Money Laundering Act (PMLA).
Section 06

Your Rights as a Data Principal

Right to access, correct, delete, withdraw consent, and file grievances under the DPDP Act 2023.

Under the Digital Personal Data Protection Act, 2023, you have clear, enforceable rights regarding your personal information:

Right to Access & SummaryRequest a complete summary of all personal data held and processed by Avantara Global.
Right to Correction & ErasureRectify inaccuracies or request deletion of data that is no longer required for statutory compliance.
Right to Withdraw ConsentWithdraw consent for non-essential processing by emailing our Data Protection Officer.
Right to NominateNominate an individual to exercise your data rights in the event of death or incapacity.

To exercise any of these rights, submit a written request to privacy@Avantaraglobal.com.

Section 07

Data Retention & Archival Policies

Timeframes for retaining personal, tax, purchase, and KYC records in compliance with Indian law.

Avantara Global retains your personal data only as long as necessary to fulfill the purposes for which it was collected or to satisfy statutory legal, accounting, tax, or reporting requirements:

  • Active Accounts: Retained for the duration of your active membership and business relationship.
  • Tax & Financial Records: Invoices, commission ledgers, and TDS certificates are retained for a minimum of 8 financial years under the Income Tax Act, 1961.
  • KYC & AML Documents: Identification proofs and transaction histories are retained for a minimum of 5 years following account closure under PMLA guidelines.
Section 08

Data Protection Officer & Grievance Contact

Direct contact info for Privacy Officer and grievance redressal turnaround.

For any queries, feedback, or grievances regarding our privacy practices or data handling, you may contact our designated Data Protection Officer:

Data Protection Officer (DPO) Desk48-Hour Response
Company:Avantara Global
Helpline Number:+91 9546771356
Postal Address:Unit 902, Sattva Magnus, Shaikpet, Hyderabad - 500008