Privacy Policy

Docsico (OPC) Private Limited (“Docsico”, “we”, “us” or “our”) provides e-commerce, marketplace onboarding and account management, website development, photography, digital marketing and related professional services. This Privacy Policy explains how personal information is handled when you visit our website, send an enquiry, communicate with our team, engage us for services or interact with our advertising and business channels.

This policy covers docsico.com and relevant communications by email, telephone, WhatsApp, Telegram and third-party platforms. A marketplace or payment provider may also process information under its own privacy terms.

We process personal information for identified purposes and in accordance with applicable Indian law, including requirements as they become operative. Where a specific processing activity requires consent or a separate notice, we will address that requirement through the relevant channel. Merely visiting this page does not itself constitute consent to every form of processing described here.

This Policy also covers enquiries about Docsico training and Classes, and interactions involving customer case studies or portfolios where personal information is processed. When Docsico handles personal information solely on instructions from a business client, the respective roles and responsibilities may also be determined by the applicable service agreement.

Depending upon how you interact with Docsico, we may collect the following categories of information.

2.1 Personal and Contact Information

This may include:

• name;
• business name;
• brand name;
• email address;
• telephone/mobile number;
• WhatsApp number;
• city;
• state;
• country;
• postal address; and
• other contact information voluntarily provided by you.

2.2 Business and Service Information

Where you enquire about or purchase our Services, we may collect information such as:

• business category;
• product category;
• marketplace interest;
• service requirements;
• company/firm information;
• GST or other business-registration details;
• marketplace information;
• brand information;
• website information;
• product details;
• service history;
• project requirements; and
• information necessary to provide the requested Service.

2.3 Marketplace and Account Information

Where required to provide marketplace onboarding, account management, advertising, website or related Services, you may provide Docsico with:

• marketplace account information;
• website access details;
• hosting/domain information;
• advertising-account information;
• social-media account information;
• login credentials;
• account identifiers;
• product/catalogue information;
• seller information;
• verification information; and
• other operational information necessary for Service delivery.

Clients should provide access only where reasonably required for the agreed Service. Depending on the platform, account access may be through delegated permissions or authorised client-provided credentials.

2.4 Documents Provided for Services

Depending upon the Service, Clients may provide business or verification documents required by marketplaces, service providers or authorities. Such documents may include, where relevant:

• GST information;
• business-registration documents;
• tax-related information;
• licences;
• certificates;
• bank/payment-related verification documents;
• authorised-signatory information;
• identity-related documents where required for the applicable Service; and
• marketplace-required documentation.

Docsico shall use such information only for legitimate business, contractual, compliance and Service-delivery purposes.

2.5 Payment and Transaction Information

We may collect information relating to:

• invoices;
• payment status;
• transaction references;
• amounts paid;
• refunds;
• billing information; and
• payment history.

Payments may be processed through PhonePe, banking channels or other authorised payment gateways or payment methods.

Docsico ordinarily does not directly store complete card details, UPI PINs, banking passwords or similar financial authentication credentials handled directly by payment processors.

Payment providers may independently process information in accordance with their own privacy policies and legal obligations.

2.6 Communications

We may retain communications made through:

• email;
• WhatsApp;
• Telegram;
• website forms;
• social-media messages;
• telephone;
• customer-support channels; and
• other authorised communication methods.

This may include enquiries, Service instructions, approvals, complaints, feedback, support requests and other business communications.

Where telephone calls are recorded, Docsico shall handle such recordings in accordance with applicable law and reasonable business requirements.

2.7 Website and Technical Information

When you use our Website, certain information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring pages;
• pages visited;
• approximate location derived from technical information;
• time spent on the Website;
• interaction information;
• advertisement interaction;
• cookie identifiers; and
• similar technical information.

2.8 Advertising and Lead Information

If you interact with Docsico advertisements or lead forms on platforms such as Google, Meta, Facebook or Instagram, we may receive information that you voluntarily provide through those platforms. This may include:

• name;
• mobile number;
• email;
• city/location;
• business details;
• service interest;
• enquiry information; and
• information contained in the applicable lead form.

Such platforms may also process information independently under their own privacy policies.

2.9 Training, Classes and Portfolio Information

If you enquire about or register for Docsico training, we may process your name, contact information, course selection, enrollment status, attendance, related communications and completion information where relevant. Any classroom imagery, session recordings or testimonials involving identifiable participants are subject to the appropriate notices and permissions.

For client portfolios and case studies, we may handle business contacts, client-approved testimonials, project imagery or service outcomes. We will evaluate whether confidentiality restrictions, permissions and privacy obligations apply before publication.

2.10 Sensitive Access Details

Ordinary website enquiry forms should not be used to transmit passwords, one-time passwords (OTPs), UPI PINs or full banking authentication details. Where a particular engagement requires restricted account access or verification documentation, Docsico and the client should agree an appropriate, controlled method of providing it.

We may collect personal information:

• directly from you;
• through our Website;
• through enquiry/contact forms;
• through telephone calls;
• through WhatsApp or messaging services;
• through email;
• through social-media platforms;
• through advertising lead forms;
• during meetings or consultations;
• during Service onboarding;
• through payment transactions;
• through cookies and analytics technologies;
• from representatives authorised by your organisation; or
• from third-party platforms where you have submitted an enquiry or authorised information sharing.

Docsico may use personal information for legitimate business and Service-related purposes, including:

• responding to enquiries;
• contacting prospective customers;
• understanding Service requirements;
• preparing quotations and proposals;
• onboarding Clients;
• providing and managing Services;
• marketplace onboarding and account-management activities;
• website-development and maintenance activities;
• advertising and marketing Services;
• social-media-management Services;
• product photography and creative Services;
• customer support;
• communicating project updates;
• processing payments, invoices and refunds;
• maintaining business and transaction records;
• verifying Client instructions;
• preventing fraud, misuse and unauthorised activity;
• protecting Docsico's systems, Clients and business;
• resolving complaints and disputes;
• complying with legal, accounting, tax and regulatory requirements;
• analysing Website and advertising performance;
• improving our Website, Services and customer experience;
• maintaining customer relationship and Service history; and
• sending marketing or promotional communications where permitted by applicable law.

We shall not intentionally process personal information for purposes materially unrelated to the purpose for which it was collected unless permitted by applicable law or appropriate consent/authorisation has been obtained.

Where lawfully permitted, Docsico may contact prospective or existing customers about relevant services, training, marketplace opportunities and updates through the channels they have used or authorised.

Marketing messages are distinct from necessary service, security, billing or project communications. Where consent is required for promotional messaging, Docsico will seek that consent through the relevant channel and respect valid withdrawal or opt-out requests.

Recipients may ask us to stop promotional communication through an available unsubscribe mechanism or by writing to info@docsico.com. Opting out of marketing does not prevent necessary transactional or legally required messages.

Contact information supplied for one purpose should not automatically be treated as unrestricted permission for unrelated promotional use.

Our website uses technologies that support essential operation, security, forms and user preferences. Depending on the tools enabled, analytics and advertising technologies may also be used to understand website visits, measure enquiries, evaluate campaigns and improve our services.

Our website is hosted on Shopify and uses Google Tag Manager and Google Analytics 4. Other advertising or measurement technologies, including Meta and platform-integrated pixels, may be present depending on their active configuration. Cookies, identifiers and similar technologies may be used by those providers according to their respective roles and policies.

Shopify's cookie controls are configured using automated regional settings. The banner and available choices may therefore differ depending on your location and applicable settings. Where consent choices are offered, they are intended to be reflected in the operation of relevant tracking tools; essential technologies may remain active.

You may also manage cookies through your browser. Blocking some cookies can affect certain website functions. Specific tags, cookies and processing arrangements may change as our services and website configuration evolve.

Docsico uses or may use Google Analytics 4, Google Tag Manager, Google Ads and Meta advertising or measurement tools in connection with website analytics and campaigns. Depending on configured tags, consent choices and your interactions, these tools can process technical identifiers, referral information, page events and advertising interactions.

Google, Meta and other providers may process certain information independently under their own policies. Their involvement does not remove Docsico’s responsibilities where applicable. We do not state that a particular tag, pixel or event is active on every page without technical verification.

Our privacy and cookie disclosures will be reviewed when tracking tools or campaign configurations change.

Where analytics and advertising tools are active, Docsico should configure them according to applicable requirements and the visitor's relevant choices. A third party's independent processing does not remove any obligations that apply to Docsico's own use, configuration or disclosure of information.

Where required by our applicable store settings or law, visitors may see a Shopify cookie banner with options to accept, decline or manage certain processing categories. The banner may not appear in all countries, including locations where Shopify's automated settings do not require it to be shown.

In regions where choices are available, you can use the displayed controls to express your preferences. You may also limit or clear cookies through your browser settings. Necessary technologies may continue to operate to provide site functions and security.

Some analytics and advertising services may use consent signals to alter how information is stored or measured. The availability of a particular choice does not necessarily stop all technical communications, including limited consent-mode measurements where applicable.

If you need assistance with a privacy choice, contact info@docsico.com or infodocsico@gmail.com.

Docsico does not sell or rent contact lists or personal information as a standalone commercial product. We may disclose information when reasonably necessary to deliver the requested service or operate our business, including to marketplaces, Shopify or website providers, payment processors, communication and storage services, advertising and analytics vendors, professional advisers and authorised contractors.

We may also disclose information to respond to lawful requests, address suspected fraud or security incidents, or establish and defend legal rights, where permitted or required by applicable law.

We aim to share information relevant to each purpose rather than giving every recipient unrestricted access. Some third parties act on our instructions; others determine their own purposes and obligations.

We distinguish vendors providing services on Docsico's instructions from platforms that determine their own purposes or means of processing. Appropriate access restrictions, confidentiality arrangements and service instructions may apply according to the relationship and applicable law.

Public-facing testimonials, identifiable photographs, account screenshots or customer-profile information should be used only where Docsico has appropriate authorisation or another valid lawful basis and has considered contractual confidentiality obligations.

Shopify platform and enhanced services

Our website is hosted on Shopify. Information you provide through the website, as well as technical information about your visits and interactions, may be processed by Shopify to operate, secure, maintain and improve the website and associated services. Shopify and relevant service providers may process data in countries other than your country of residence.

Docsico has enabled Shopify Network Intelligence. Certain enhanced Shopify features may use information about interactions with Docsico’s website together with information about interactions with Shopify and other merchants to help provide improved services, advertising insights or personalisation. For such enhanced processing, Shopify describes its own responsibilities and the options available to individuals in its Consumer Privacy Policy and Privacy Portal.

Shopify’s independent processing does not remove Docsico’s responsibilities for personal information that Docsico collects or controls. Privacy requests about Docsico’s own processing may be directed to info@docsico.com; requests concerning Shopify’s independent enhanced processing may also be addressed through Shopify’s Privacy Portal.

When Docsico supports a client on Amazon, Myntra, AJIO, Nykaa, Flipkart, Etsy, eBay, Alibaba.com, Shopify or other platforms, the agreed work may require the submission or processing of authorised business, account, identity or verification information.

The client is requested to provide accurate, current and appropriately authorised documents. Docsico may seek clarification where discrepancies or missing material are identified.

Approval, verification, eligibility, platform access and account decisions are made by the relevant third party under its own rules. Docsico does not promise platform approval or control an independent platform's privacy practices, but will take reasonable steps appropriate to its own role and applicable duties.

Docsico may use third-party technology and service providers to support our business.

Where reasonably applicable, we expect service providers handling information on our behalf to use appropriate confidentiality and security measures and to process information for the permitted purpose.

However, some third parties, such as marketplaces, payment providers and advertising platforms, may process information independently rather than solely on Docsico's behalf.

Docsico personnel and approved collaborators, including developers, designers and service specialists, may receive access limited to what is reasonably required for assigned work. Access permissions and confidentiality obligations are managed according to applicable engagement arrangements and operational responsibilities.

Where Docsico processes personal information on behalf of a business client, the client instructions, allocation of responsibilities and any needed data-processing terms should be documented in the applicable engagement arrangements.

Some platforms, cloud services and communication providers used for our operations may process or store personal information outside India. The destination and recipients depend on the service involved and provider configuration.

Where applicable restrictions or safeguards govern cross-border transfers, Docsico will follow the law in force for the relevant activity. We do not promise that all information remains exclusively within India.

International access or storage should be assessed according to the categories of information, service provider, destination and legal requirements then applicable. No statement in this policy should be interpreted as automatic permission to transfer every category of information to any country.

Because our website is hosted by Shopify and may use Shopify enhanced services, personal information may also be processed outside India by Shopify or service providers. For information about Shopify’s processing and available choices, please see the Shopify Consumer Privacy Policy and Shopify Privacy Portal. Cross-border processing remains subject to applicable law and appropriate safeguards where required.

Docsico keeps personal information, business communications, service documents and project records for periods reasonably necessary to provide the requested services, maintain relevant business records, resolve disputes, support security requirements and meet applicable legal obligations.

We do not apply one universal fixed retention period to every type of information. Actual retention may vary depending on the client, project, information category, contract, legal requirements and the systems in which the information is maintained, including cloud services, office devices, email and authorised messaging platforms.

• Enquiries and service communications may be retained where needed for support, follow-up and business administration.
• Billing, taxation and accounting records may be kept for applicable statutory periods.
• Verification documents, account-access records and working project files may be reviewed for deletion or restricted retention when no longer required.
• Information relevant to complaints, security incidents, investigations or legal proceedings may be retained where justified or required by law.

When information is no longer needed, we assess appropriate deletion, anonymisation or secure disposal in light of applicable obligations and the systems involved. We do not promise automatic deletion of every record after a single fixed number of days.

Docsico may need access to client-owned marketplace accounts, websites, advertising platforms and related systems to provide agreed services. Depending on the platform and engagement, access may be through authorised partner permissions, delegated user roles or client-provided usernames and passwords.

Client-provided account details may be received or accessed through authorised business communications, files or credential-management tools. Access is used for agreed service-related purposes. Where a platform supports it, we encourage delegated access rather than the sharing of a primary administrator password.

Clients should retain control of their accounts, recovery information, primary administrator permissions and copies of important documents and final deliverables. At handover or termination, clients should review permissions, revoke access no longer required and change passwords that were shared where appropriate. Docsico also reviews service-related access according to operational needs and applicable obligations.

Unless expressly agreed in writing, our professional services do not include indefinite archival storage of all source files, drafts, credentials or historical operational records. Retention and deletion of information after handover remain subject to contractual arrangements and applicable legal duties.

Former clients should not assume that Docsico will retain historical photographs, design drafts, website materials, account records, catalogues or reports indefinitely. Availability depends on the project, storage location, prior handover arrangements and any applicable preservation requirement.

Where older materials are requested, we will consider whether they remain available and whether disclosure is authorised, appropriate and lawful. We cannot guarantee that a particular file or working copy will still be accessible.

Substantial restoration, reconstruction, retrieval, migration or account-recovery work that falls outside the original engagement may be offered as a separately chargeable professional service, with the scope and fee agreed in advance. A valid statutory personal-data access, correction or erasure request will not be made conditional on paying for unrelated professional services.

Docsico takes reasonable technical and organisational precautions appropriate to the nature of the information and services involved. These may include account authentication, permission controls, restricted handling of client documents, use of suitable service providers and review of access when personnel change responsibilities or leave the organisation.

Documents and account information may be handled across cloud systems, office devices, business files and authorised messaging channels. Personnel access and offboarding practices can differ by platform and role. We continue to review these arrangements to reduce unnecessary access and strengthen credential handling.

Clients should avoid sending passwords, one-time passwords, banking PINs or similar authentication secrets through ordinary website enquiry forms. Where shared account access is necessary, clients should consider delegated permissions and review or rotate shared credentials after handover.

No electronic system or transmission method can be guaranteed completely secure. This does not limit any duty or responsibility imposed by applicable law. Suspected unauthorised access should be reported promptly using the contacts in Section 30.

When Docsico becomes aware of a suspected personal-data breach or security incident, it will assess the event and take containment, investigation, remediation, documentation and notification steps required by the law applicable at that time.

If you suspect that credentials or information connected with a Docsico service have been compromised, please contact info@docsico.com promptly with sufficient context, without sending passwords or OTPs.

When a suspected incident is reported, the appropriate team should investigate, take reasonable containment steps, preserve necessary evidence and determine whether notices or other responses are required under applicable law and relevant contracts. Statutory reporting timelines, where applicable, take precedence over general policy language.

Subject to the applicable law and its commencement, individuals may have rights to receive information about their personal data, seek correction, completion or updating, request erasure where appropriate, withdraw consent where processing relies upon it and seek grievance redressal.

Requests can be sent to info@docsico.com. We may reasonably verify the identity and authority of the requester before releasing or changing information. A request may be limited where law requires or permits continued retention, or where information is controlled by an independent third party.

We will explain the outcome or next steps using the applicable statutory process rather than promise that every request can be fulfilled immediately.

The availability and scope of particular privacy rights may depend on the law in force and the relationship in which Docsico handles the information. Docsico may need to verify the identity or authority of the requester before disclosing or changing personal information. Requests may be recorded for administration, security and legal compliance.

Where applicable, rights relating to data processed by Shopify for its own enhanced services may be exercised using the Shopify Privacy Portal. Docsico remains the contact for requests concerning personal information it controls. Rights, exceptions and response times depend on applicable law and the capacity in which each organisation processes the information.

Where processing relies on your consent, you may withdraw it through the same or another practicable channel made available for that purpose, including by contacting info@docsico.com.

Withdrawal does not retrospectively invalidate processing that was lawful before withdrawal. It may affect Docsico’s ability to provide a service where the relevant information is necessary and no other lawful basis permits continued processing.

When a request to withdraw consent is received, Docsico should identify the relevant processing activity and take any action required by applicable law. This does not invalidate processing lawfully completed before withdrawal, and certain processing may continue where a separate lawful basis or legal obligation permits or requires it.

You may request correction, completion or updating of inaccurate personal information, and erasure where the applicable law provides that right. Please identify the relevant data and provide enough information to help us locate the record and verify your authority.

Some data may need to be retained for legal, accounting, tax, security or dispute-related reasons where permitted by law. Data independently controlled by marketplaces, payment providers or other services may need to be addressed through their processes.

When information was provided through a third-party platform or is controlled independently by a client or other organisation, the person may also need to contact that organisation. Docsico will assess the parts of a request that relate to information it controls or is responsible for processing.

To make a privacy enquiry, access or correction request, or complaint about personal information processed by Docsico, please email info@docsico.com. You may alternatively contact infodocsico@gmail.com.

Please use a subject such as “Privacy Request” and describe the matter sufficiently for us to identify the relevant information. Do not include account passwords, OTPs or unnecessary identity documents in the initial message.

We may take reasonable steps to confirm the requester's identity and authority. Requests will be considered and answered in accordance with applicable law, including applicable response requirements and lawful exceptions. Where another organisation independently controls information, we may direct you to that organisation's privacy contact or process.

Clients and users are requested to supply information that is accurate, current, complete, genuine and appropriately authorised, including business identity, seller-registration, tax, trademark and verification documents where relevant.

Docsico may seek clarification or additional information where material inconsistencies, missing documents or verification concerns arise. A client should notify Docsico when information relevant to an active engagement materially changes.

Docsico's services may rely on information supplied by the client and decisions by independent marketplaces. Responsibility for inaccurate, fraudulent or unauthorised client-provided information will be assessed according to the facts, applicable agreements and law; nothing in this policy excludes a duty that Docsico cannot lawfully exclude.

Docsico's professional services and standard training programmes are primarily intended for adults and businesses. Unless expressly arranged with appropriate safeguards, individuals under 18 should not independently enrol in or contract for services.

For classes, training, photographs or session recordings involving minors, Docsico should assess whether additional age verification, parental/guardian permission, notices or other protections are required under applicable law. Such arrangements must be confirmed before publishing an open enrolment or recording policy.

If a parent or guardian believes a child has provided personal information to Docsico inappropriately, they may contact us for review.

Our Website may contain links to external websites, marketplaces, social-media platforms or other third-party services.

Docsico does not control and is not responsible for the privacy policies, security, content or independent data-processing practices of such third parties.

Users should review the privacy policy of a third-party website or platform before submitting personal information.

Where legally permitted, information may be disclosed or transferred as part of a genuine corporate transaction such as:

• merger;
• acquisition;
• restructuring;
• financing;
• transfer of business/assets; or
• similar corporate event.

Any such processing shall remain subject to applicable legal requirements.

Docsico may preserve, use or disclose information where reasonably necessary to:

• comply with applicable law;
• comply with court orders;
• respond to lawful government or regulatory requests;
• investigate fraud;
• protect Docsico's legal rights;
• protect users or Clients;
• enforce contractual obligations;
• establish or defend legal claims; or
• respond to security incidents.

We may revise this policy when our services, data practices, third-party technology or legal obligations change. Material changes will be reflected on this page, and additional notice or consent will be sought where required by law.

The effective date shown on this page identifies the current version of this policy.

For material changes affecting how information is used, Docsico will assess whether additional notice, a renewed choice or consent, or another action is required by applicable law. Publication of an updated policy does not by itself authorise a new processing purpose where a separate legal requirement applies.

This policy explains processing of personal information. Commercial terms—including payment, refunds, ownership of code and creative work, scope, confidentiality obligations, handover, liability and termination—are addressed in the separate Terms and Conditions and applicable quotations or service agreements.

A service agreement cannot override non-excludable rights or obligations under applicable privacy law.

Client permissions for identifiable case studies, public reviews, testimonials, photographs and account-performance screenshots should also be documented through appropriate agreements or specific approvals. The Privacy Policy itself should not be treated as blanket client permission to publish confidential projects.

This policy is intended to operate under applicable Indian law. Where legally appropriate and subject to non-excludable statutory rights or jurisdiction, disputes concerning Docsico’s business may be addressed by competent courts in Surat, Gujarat.

Nothing here limits rights to approach a regulator, Board, authority or forum where applicable law provides that option.

For questions, requests or complaints concerning this Privacy Policy or personal information handled by Docsico, contact:

Company: Docsico (OPC) Private Limited
Location: Surat, Gujarat, India
Website: docsico.com
Primary privacy email: info@docsico.com
Additional privacy email: infodocsico@gmail.com
Telephone: +91 9725655651

Requests received through either email address will be assessed under applicable privacy requirements. Please put “Privacy Request” in the subject line and do not send passwords, OTPs, PINs or unnecessary identity documents in an initial message.

Shopify privacy resources: Shopify Consumer Privacy Policy · Shopify Privacy Portal.