Consent Management

1. What is Consent?

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the EU General Data Protection Regulation (GDPR), consent means your free, specific, informed, unambiguous, and voluntary agreement to the processing of your personal data for a clearly stated purpose.

Consent is not valid if it is bundled, forced, or obtained through misleading design. At Puniyo, we ask for consent separately for each purpose, and we never make essential services conditional on unnecessary consent.

2. What Data We Collect

Data Type	Purpose	Consent Required
Name, phone number, email	To connect you with verified movers and send quotes	Yes — required to use the service
Pickup / drop address	For route calculation and vendor matching	Yes — required to receive quotes
Inventory / move details	For accurate vendor pricing	Yes — required for quotes
Device / browser info	For security, fraud prevention, and site performance	Legitimate interest (no consent needed)
Cookies (analytics)	To understand site usage and improve experience	Yes — opt-in
Cookies (advertising)	To show relevant ads on other platforms	Yes — opt-in
Marketing emails	Offers, tips, service updates	Yes — opt-in

3. Why We Need Your Consent

We need your explicit consent to:

Share your enquiry with verified movers — because they need your contact details and address to send you a quote.
Send you WhatsApp or SMS updates — about your enquiry, vendor calls, and account activity.
Use analytics cookies — to understand which pages help users most.
Send you marketing content — if you opt in to receive it.
Process your data in our systems — including cloud storage and CRM tools.

We never sell your phone number or personal data to third parties. See our Lead Resale Disclosure for full details.

4. How Consent is Obtained

Consent is collected through these clear, unbundled methods:

OTP verification form — when you submit an enquiry, you confirm your number with a 6-digit OTP. The form clearly states that verified movers will contact you.
Checkbox opt-ins — for marketing emails and analytics cookies. These are never pre-checked.
Cookie banner — on your first visit, you can accept, reject, or customize cookies.
Business registration form — vendors consent to specific processing at signup.

5. Manage Your Consent

You can review and update your consent at any time:

Registered Email *

Essential processing — Required to provide the service. Cannot be disabled while using Puniyo. Share my enquiry with verified movers — So they can contact me with quotes. WhatsApp / SMS updates — About my enquiry and vendor calls. Marketing emails — Offers, tips and service updates. Optional. Analytics cookies — To help us improve the site. Optional. Advertising cookies — To show relevant ads. Optional.

You can also email privacy@puniyo.com with your preferences.

6. Withdraw Consent

You have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing already carried out.

Please note: If you withdraw consent for vendor sharing, we cannot connect you with movers, and the quote request cannot proceed.

To withdraw consent, use any of the following methods:

Email: Send a request to privacy@puniyo.com with the subject "Withdraw Consent".
In-product: Use the "Manage Consent" link in your account settings or in the footer of any email we send.
Data Deletion Request: See our Data Deletion Request page for permanent removal.

We process withdrawal requests within 7 working days.

7. Cookie Preferences

You can manage cookie preferences via the cookie banner that appears on your first visit or by clicking "Cookie Preferences" in the footer.

Category	Default	Can be Disabled
Strictly necessary	On	No
Functional	On	Yes
Analytics	Off	Yes
Marketing	Off	Yes

8. Your Rights

Under the DPDP Act and GDPR, you have the right to:

Access — Request a copy of your personal data.
Correction — Ask us to fix inaccurate data.
Erasure — Request deletion of your data.
Withdraw Consent — At any time, as described above.
Grievance Redressal — Contact our Data Protection Officer.
Nominate — Nominate another person to exercise your rights in case of death or incapacity.

See the GDPR / DPDP Compliance page for full details.

Consent Management.