5.1 Processing of Personal Data. In connection with your access to and use of RetailReach, ENS Enterprises Limited may collect, receive, store, use, disclose, transmit and otherwise process personal data relating to you and, where applicable, individuals whose personal data is provided by you in connection with your use of the Platform, including account information, contact details, authentication information, usage information and other personal data necessary for the operation, administration, security and provision of the Platform.
5.2 Applicable Data Protection Law. ENS Enterprises Limited shall process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the rules, regulations, notifications, directions and other applicable requirements issued thereunder, in each case to the extent applicable and in force from time to time, and any other applicable law governing the processing of personal data.
5.3 Purpose of Processing. Personal data shall be processed only for specified and lawful purposes in connection with the provision, administration, security and improvement of the Platform, the creation and management of User accounts, authentication and access control, customer support, billing and payment administration, prevention and detection of fraud, misuse and security incidents, compliance with applicable legal and regulatory obligations, and such other purposes as may be permitted under applicable law.
5.4 Data Retention. ENS Enterprises Limited shall retain personal data only for so long as is reasonably necessary to fulfil the purpose for which such personal data is processed or to comply with an applicable legal or regulatory requirement. Upon the personal data no longer being required for the relevant specified purpose, and subject to any applicable legal, regulatory, accounting, audit, dispute-resolution, security or other lawful retention requirement, ENS Enterprises Limited shall erase or otherwise dispose of such personal data in accordance with applicable law.
5.5 Rights of Data Principals. Where the Digital Personal Data Protection Act, 2023 and the rules made thereunder are applicable to the processing of personal data, Data Principals shall have the rights available to them under such law, including, as applicable, the right to correction, completion, updating and erasure of personal data, subject to the conditions, procedures and exceptions prescribed under applicable law. Requests for the exercise of such rights may be made through the channels and procedures designated by ENS Enterprises Limited for this purpose.
5.6 Data Security. ENS Enterprises Limited shall implement reasonable technical and organisational measures appropriate to the nature of the personal data processed and the risks associated with such processing, with a view to protecting personal data against unauthorised or unlawful processing and against accidental or unlawful loss, destruction, alteration or disclosure, in accordance with applicable law.
5.7 Data Processors and Third Parties. Where ENS Enterprises Limited engages a data processor, service provider or other third party to process personal data on its behalf, such processing shall be undertaken subject to appropriate contractual or other lawful arrangements and in accordance with applicable law. ENS Enterprises Limited may disclose personal data where reasonably necessary for the provision of the Platform, compliance with applicable law, protection of the rights, property or security of ENS Enterprises Limited, its users or other persons, or as otherwise permitted by applicable law.
5.8 User-Provided Personal Data. Where you provide or otherwise make available to RetailReach personal data relating to any individual other than yourself, you shall be responsible for ensuring that such provision and processing is undertaken in accordance with applicable law and that you have obtained any consent, provided any notice, or otherwise established any lawful basis or authorisation required under applicable law for such processing.
5.9 Data Breaches. In the event of a personal data breach, ENS Enterprises Limited shall take such measures and provide such notices to the relevant Data Principal, the Data Protection Board of India or any other competent authority as may be required under applicable law.
5.10 Changes in Applicable Law. The processing of personal data by ENS Enterprises Limited shall be subject to the requirements of applicable data protection law as amended, supplemented, replaced or re-enacted from time to time. Where required by applicable law, ENS Enterprises Limited may modify its practices, procedures or the relevant provisions of these Terms to ensure continued compliance.