Digital Personal Data Protection Act notice

For data collected through this website, Ensmbl Technologies Pvt. Ltd. is the Data Fiduciary as defined in the DPDPA 2023.

When you run EnsmblOS in your outlet, you are the Data Fiduciary for the customers who transact with you. Ensmbl is your Data Processor. We process customer data strictly on your instructions and only to provide the service.

Customer data is processed to complete transactions, fulfil orders, run your loyalty programme (if enabled), provide receipts, and comply with Indian tax law (which requires 7-year retention of order and payment records).

We support explicit consent capture before any optional processing (marketing SMS, profile enrichment). Consents are timestamped and stored against the customer’s phone identity.

A customer can request access, correction, portability or deletion of their data. We provide your operators with tools in the dashboard to honour these requests within 30 days, as required by the DPDPA.

In case of a personal data breach, we will notify you within 72 hours of confirmation.

privacy@ensmbl.in — for any DPDPA-related enquiry.