Data Deletion Request.
You have the right to request deletion of your personal data from Puniyo. This page explains what we delete, what we must retain, and how to submit a request.
1. What Gets Deleted
When you submit a deletion request, we permanently delete:
- Your name, phone number, and email address.
- All enquiries you have submitted.
- All reviews you have posted.
- Any saved preferences or account details.
- Your marketing consent records (after retention period).
- Any other personally identifiable information we hold on you.
2. What We Must Retain
Some data cannot be deleted immediately due to legal, tax, or security obligations:
| Data | Retention Period | Why |
|---|---|---|
| Completed booking records | 7 years | Tax & accounting compliance (Indian IT Act) |
| Fraud prevention records | 5 years | Security & abuse prevention |
| Legal dispute records | Until dispute ends | Legal defense |
| Aggregate anonymized analytics | Indefinite | Not personal data |
All retained data is minimized, isolated, and never used for marketing or analytics.
3. Timeline
- Day 0: You submit the request.
- Day 1-3: We verify your identity via OTP.
- Day 3-14: We process deletion across all systems.
- Day 15-30: Confirmation email sent to you.
Under DPDP Act 2023 and GDPR, we complete requests within 30 days.
4. Submit a Deletion Request
You can also email privacy@puniyo.com with the subject "Data Deletion Request".
5. Verification
To protect you from fraudulent deletion requests, we verify identity via:
- OTP sent to your registered phone number.
- Confirmation email to your registered email address.
If we cannot verify your identity, we may ask for additional details.
6. If You Are a Vendor
Vendor accounts have additional obligations:
- Business registration, GST, and PAN records may be retained as legally required.
- Wallet transaction records are retained for 7 years for tax compliance.
- Dispute and complaint records are retained until resolution.
- Any pending wallet balance above ₹500 is refunded within 30 days.