DATA DELETION POLICY & INSTRUCTIONS

1. OUR COMMITMENT

OrderEzee Technologies Private Limited (“OrderEzee”, “we”, “us” or “our”) respects the right of individuals to request deletion of eligible personal data processed through the OrderEzee platform and associated services, in accordance with applicable law including the Digital Personal Data Protection Act, 2023.

This page explains how users may request deletion of their personal data, including data received through authorised integrations with Meta, Facebook and WhatsApp.

2. HOW TO REQUEST DELETION

To request deletion of your personal data, email: grievances@orderezee.com

We may request additional information where reasonably necessary to verify your identity or authority before processing the request. We reserve the right to decline requests that we cannot reasonably verify or that are manifestly unfounded, excessive or repetitive.

3. META / FACEBOOK DATA DELETION

If you have connected a Meta or Facebook account, Page or related service with OrderEzee and want information received through that integration deleted, email: grievances@orderezee.com

Use the subject line: META/FACEBOOK DATA DELETION REQUEST

Please provide sufficient information to identify:

• your OrderEzee account;
• the relevant organisation / business; and
• the connected Meta / Facebook account or Page.

Following reasonable verification, OrderEzee will use commercially reasonable efforts to process deletion of eligible personal data received through the relevant integration that is under OrderEzee’s direct control, subject to applicable legal and legitimate retention requirements.

Important limitation: Meta, Facebook and related platforms operate independently. OrderEzee has no control over data retained within Meta’s own systems. Users should also revoke OrderEzee’s access through the relevant settings provided by Meta / Facebook and may need to submit a separate deletion request directly to Meta if they wish data held by Meta itself to be deleted.

Revoking access stops future access through the revoked permission but does not necessarily delete information already lawfully processed by OrderEzee. A deletion request to OrderEzee should therefore be submitted if you also want eligible previously received information deleted from OrderEzee systems.

4. WHATSAPP DATA

If you want eligible personal data associated with an OrderEzee-enabled WhatsApp interaction deleted, email: grievances@orderezee.com

Use the subject line: WHATSAPP DATA DELETION REQUEST

Please include the mobile number associated with the request and sufficient information to identify the relevant interaction or business account. Do not provide OTPs or other security credentials.

Limitation: WhatsApp is operated by Meta Platforms. Message content and metadata may also reside on WhatsApp / Meta systems outside OrderEzee’s control. OrderEzee can only process deletion of eligible data held within its own systems. For data held by WhatsApp / Meta, users should use the tools and processes provided by those platforms.

5. WHAT HAPPENS AFTER A REQUEST

After receiving a valid and verifiable deletion request, OrderEzee will use commercially reasonable efforts to:

1. review the request;
2. reasonably verify the identity or authority of the requester where required;
3. identify eligible personal data associated with the request that is under OrderEzee’s direct control;
4. delete or anonymise eligible personal data from relevant active systems under our control;
5. take reasonable steps to instruct applicable processors under our control, where required and practicable; and
6. communicate completion or any applicable limitation to the requester.

Requests will be handled within the timelines required under applicable law, subject to the practical constraints of verification, investigation, technical feasibility and any necessary cooperation from third-party providers.

OrderEzee does not guarantee instantaneous deletion or deletion from systems outside its reasonable control (including third-party platforms, residual backup media that are overwritten in the ordinary course, or archived logs retained for security or legal purposes).

6. INFORMATION WE MAY NEED TO RETAIN

Deletion rights are subject to applicable law. Certain information may need to be retained where reasonably necessary or legally required for purposes including:

• compliance with law or regulatory obligations;
• taxation, accounting and audit requirements;
• fraud prevention and security;
• transaction and audit records;
• establishment, exercise or defence of legal claims;
• dispute resolution; or
• enforcement of contractual rights.

Where only part of the information must be retained, OrderEzee will endeavour to delete or anonymise the remaining eligible information using commercially reasonable methods.

Information may also temporarily remain in secure backup or disaster-recovery systems until it is overwritten or deleted in accordance with applicable backup and retention procedures. OrderEzee does not undertake to perform special deletion from every backup media outside the ordinary overwrite cycle.

7. EFFECT OF ACCOUNT DELETION

Deletion of information required to operate an OrderEzee account may result in:

• closure of the account;
• loss of access to the platform and associated Services;
• loss of certain integrations;
• inability to retrieve historical information; or
• discontinuation of Services dependent upon that information.

Business users should ensure that any records required by their organisation are appropriately exported before requesting account deletion. OrderEzee is not responsible for any loss of access to historical data after a verified deletion request has been processed.

8. REQUESTS INVOLVING BUSINESS-CONTROLLED DATA

OrderEzee is primarily a B2B technology platform. In many circumstances, personal data is processed by OrderEzee on behalf of a manufacturer, distributor, retailer, employer or other business customer (the “Business Customer”).

Where the relevant Business Customer controls the purposes for which that information is processed, OrderEzee may:

• refer the request to that Business Customer;
• coordinate with the Business Customer as appropriate; or
• require the requester to direct the request to the Business Customer that controls the data.

OrderEzee is not obliged to delete data that it processes solely on the instructions of a Business Customer without that Business Customer’s authorisation or contrary to its documented instructions, except where required by applicable law.

9. THIRD-PARTY SYSTEMS AND LIMITATIONS

OrderEzee’s ability to delete data is limited to systems and data under its direct operational control. Data that resides on independent third-party platforms (including Meta, Facebook, WhatsApp, cloud infrastructure providers, payment gateways, AI providers or other integrated services) is subject to those providers’ own retention, deletion and privacy practices.

OrderEzee will use commercially reasonable efforts to process deletion requests for data under its control and, where contractually and practically feasible, to instruct relevant processors. OrderEzee cannot guarantee deletion of data held exclusively by third parties and accepts no liability for the retention or deletion practices of independent third-party providers.

10. CONTACT FOR DATA DELETION

11. ACKNOWLEDGEMENT

By submitting a deletion request or using the Services, you acknowledge that:

• OrderEzee will process valid requests using commercially reasonable efforts consistent with applicable law and technical feasibility;
• complete or instantaneous deletion from every system (including third-party platforms and residual backups) is not always possible;
• certain information may be retained where required by law or legitimate purposes; and
• you have read and understood the limitations set out in this Policy and in our Privacy Policy.