Privacy Policy

Who we are

This Privacy Policy explains how Ordelis (“Ordelis”, “we”, “us”) collects, uses, shares and protects personal data when you use ordelis.in and the Ordelis cashback service. For the purposes of India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000, Ordelis is the data fiduciary for the personal data described here.

Questions about this policy can be sent to support@ordelis.in. Our business address is 60, Tronglaobi Makha Leikai, Bishnupur, Manipur, India.

Information we collect

Information you give us

Account details: your name, email address and, if you choose to give it, your mobile number.
Payout details: your UPI ID, or your bank account number, IFSC and account holder name, so we can send you cashback.
Messages: what you write to us by email or through the contact form, including order details and screenshots you send for a missing-cashback claim.

Information created when you use Ordelis

Click records: the offer you clicked, the time, and a unique click reference that lets the store link your order to Ordelis.
Order information reported by stores: order ID, order date, order value, commission and status (for example, confirmed or cancelled). Stores do not share your payment details with us.
Technical data: IP address, browser and device type, and pages requested, recorded in server logs by our hosting provider for security and troubleshooting.

What we never collect

We never ask for or store your card number, CVV, UPI PIN, OTPs, net-banking passwords or your passwords for store accounts.

How we use your information

To create and manage your Ordelis account.
To track purchases made through Ordelis links and match them to your account.
To calculate, confirm and pay your cashback, and keep payout records.
To answer your questions, investigate missing-cashback claims and handle grievances.
To send service messages about your account, cashback status and payouts.
To detect and prevent fraud, abuse and misuse of the service.
To comply with applicable laws, including tax, accounting and law-enforcement requirements.

We send promotional messages only if you have agreed to receive them, and you can opt out at any time.

Legal basis for processing

We process personal data on the basis of your consent (given when you create an account, request a payout or contact us) and for the legitimate uses permitted under Section 7 of the DPDP Act, such as complying with law. You may withdraw consent at any time by emailing support@ordelis.in. Withdrawing consent does not affect processing already carried out, and we may not be able to track or pay cashback without the data needed to do so.

We share personal data only where needed to run the service:

Partner stores and affiliate networks: the click reference, so your order can be attributed to Ordelis. This reference does not need to include your name or contact details.
Banks and payment service providers: your payout details and the amount, to send your cashback.
Service providers: companies that host our website, store data or deliver email for us, who may use it only on our instructions.
Authorities: where required by law, court order or a lawful request from a government agency, or to protect against fraud.

We do not sell or rent your personal data, and we do not share it with advertisers.

Messages, email and WhatsApp

We send account and cashback updates by email. If we offer updates by SMS or WhatsApp, we will message you on those channels only after you have opted in, and only about the topics you agreed to. You can opt out at any time by replying STOP, using the unsubscribe link in an email, or writing to support@ordelis.in. We will never ask you to share an OTP, PIN or password in any message.

How long we keep it

Account details are kept while your account is open, and deleted or anonymised after you close it, except where we must keep them longer by law.
Cashback, commission and payout records are kept for as long as Indian tax and accounting laws require.
Support messages are kept for as long as needed to resolve your query and handle any follow-up.
Server logs are kept for a limited period for security purposes.

How we protect it

We use reasonable security practices to protect personal data, including HTTPS encryption for data in transit, restricted access to personal data on a need-to-know basis, and service providers who are required to keep data secure. No system is completely secure; if a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the law requires.

Your rights

Under the DPDP Act, you can:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete or update inaccurate or incomplete data;
ask us to erase your data when it is no longer needed, subject to legal retention requirements;
withdraw your consent;
nominate another person to exercise your rights in the event of your death or incapacity; and
raise a grievance with us.

To make a request, email support@ordelis.in with “Privacy request” in the subject, from the email address linked to your account. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

Ordelis is meant for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

Cookies

The Ordelis website does not set cookies or use analytics or advertising trackers. Stores and affiliate networks set their own cookies when you click through to them. See our Cookie Policy for details.

Other websites

When you click an offer, you leave Ordelis and go to the store’s website or app. That store’s own privacy policy applies to anything you share with it, including your payment and delivery details.

Changes to this policy

We may update this policy as our service or the law changes. We will change the “Last updated” date above and, for significant changes, tell account holders by email before the change takes effect.

Contact and grievances

For privacy questions, requests or grievances, email support@ordelis.in with “Grievance” or “Privacy request” in the subject. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.