Privacy Policy

1. Introduction

Losung360 Private Limited (“Losung360”, “We”, “Us”, “Our”), a company incorporated under the Companies Act, 2013, having its registered office at 610-613, 6th Floor, Tower-A, Spaze I-Tech Park, Sector-49, Sohna Road, Gurgaon, Haryana, 122018, India, is committed to protecting the privacy and security of the personal data of its users, merchants, and business partners. We operate the Losung360 2.0 Platform — a unified e-commerce technology ecosystem comprising ShipMaxx, ShipBulk, SupplySphere, StockBridge, and SellerPro — accessible through our website(s) and mobile applications (collectively, the “Platform”).

 

This Privacy Policy (“Policy”) describes how Losung360 collects, uses, stores, processes, shares, and protects personal data and other information in connection with the Platform and all related Services. This Policy forms an integral part of Losung360’s Terms of Service and applies to all registered and unregistered users, merchants, and visitors.

 

This Policy is an electronic record under the Information Technology Act, 2000 (“IT Act”) and its associated rules, and has been published in compliance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

 

BY ACCESSING OR USING THE PLATFORM OR ANY SERVICES, YOU CONSENT TO THE COLLECTION, USE, STORAGE, AND PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS POLICY. IF YOU DO NOT AGREE, PLEASE DISCONTINUE USE OF THE PLATFORM IMMEDIATELY.

 

This Policy may be updated from time to time. We encourage you to review it periodically. The date of the latest revision is indicated at the top of this document.

2. Scope of the Privacy Policy

This Policy applies to personal data processed in connection with:

  • All products and services offered on the Losung360 2.0 Platform, including ShipMaxx (shipping aggregation and OMS), ShipBulk (B2B cargo logistics), SupplySphere (supply chain management), StockBridge (inventory and warehouse management), and SellerPro (marketplace seller enablement).
  • All registered Merchants, authorised users, platform visitors, and business contacts who interact with Losung360 directly or through the Platform.
  • End-customer data submitted by Merchants through the Platform for the purposes of order fulfilment, shipping, and logistics.

 

This Policy does not apply to third-party websites, Marketplace platforms, Courier Partners, or other external services that may be integrated with or linked from the Platform. Losung360 exercises no control over such third parties and recommends that you review their individual privacy policies.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register, access, or use the Platform, you submit the following data:

  • Identity and Contact Details: Full legal name, business name, designation, email address, mobile number, and mailing/registered address.
  • Business and KYC Details: GSTIN, PAN, CIN, Aadhaar number/OTP, bank account details, cancelled cheque, GST certificate, income tax returns, entity type, and any other KYC documents required by Losung360 or its Courier Partners for onboarding and compliance purposes.
  • Financial and Billing Details: Bank account information, payment instrument details (credit/debit card numbers are processed securely through payment gateways and are not stored by Losung360 directly), billing address, subscription details, and transaction history.
  • Customer Data: Details of your end-customers including name, address, phone number, email address, order details, product descriptions, and delivery instructions, submitted for the purpose of fulfilling orders and shipments.
  • Communication Data: Voice recordings, chat transcripts, email correspondence, and support tickets when you interact with Losung360’s support teams.
  • Profile and Preference Data: Username, password (stored in encrypted form), notification preferences, and user settings.
  • Any other information you voluntarily provide to us through the Platform or otherwise.
3.2 Data Collected Automatically

When you access or use the Platform, we automatically collect:

  • Device and Technical Data: IP address, device type, operating system, browser type and version, plug-ins, ISP, mobile carrier, and system configuration.
  • Usage Data: Pages visited, features used, search queries, click patterns, advertising preferences, date and time stamps, session duration, and language preferences.
  • Service Metrics: Interaction logs, error reports, API call data, and performance data related to your use of the Platform.
  • Location Data: Approximate location derived from IP address or, where explicitly permitted, GPS data from mobile devices.
3.3 Data from Third-Party Sources

We may also receive data about you from:

  • Courier Partners and Logistics Providers: Shipment status, delivery confirmation, POD data, and related logistics information.
  • Marketplace Platforms: Order data, return data, seller performance metrics, and listing data where you have authorised such integration through ShipMaxx OMS or SellerPro.
  • Payment Partners: Transaction confirmation, refund status, and payment instrument validation data.
  • Social Media and Advertising Platforms: Profile data from social accounts where you engage with Losung360’s official profiles or authorise a social login.
  • Public Sources: Publicly available business registration data and directories for KYC verification.
3.4 Sensitive Personal Data or Information (SPDI)

To the extent applicable under the SPDI Rules, certain data collected by Losung360 (such as bank account details, payment instrument information, and Aadhaar-linked data) may constitute Sensitive Personal Data. Losung360 collects SPDI only for lawful purposes directly connected to the provision of Services and with your informed consent, which you provide by accepting this Policy.

4.A. COOKIES AND TRACKING TECHNOLOGIES

Losung360 uses cookies, web beacons, pixels, tags, and similar tracking technologies on the Platform to enhance user experience, analyse usage, and support marketing activities.

  • Strictly Necessary Cookies: Essential for the Platform to function (e.g., session management, security). These cannot be disabled.
  • Functional Cookies: Enhance usability by remembering your preferences and settings. We seek your prior consent before enabling functional cookies.
  • Analytical / Performance Cookies: Help us understand how users interact with the Platform, to improve functionality and content.
  • Advertising Cookies: Used to display relevant ads and measure campaign effectiveness. We seek your explicit prior consent before enabling advertising cookies.

 

You may control cookie preferences through your browser settings. Disabling certain cookies may limit your ability to use some Platform features. Losung360 also engages third-party advertising networks that collect data through web beacons; such usage is restricted to purposes consistent with this Policy.

4.B. HOW WE USE YOUR PERSONAL DATA

Losung360 uses the personal data it collects for the following purposes:

4.B.1 Service Delivery
  • To create and manage your Merchant Account and provide access to the Platform and Services.
  • To process and fulfil shipment bookings, order management, inventory tracking, and supply chain workflows across all Platform products.
  • To assign Courier Partners, generate AWBs, track shipments, and manage returns, NDRs, and RTO processes.
  • To facilitate OMS integrations with Marketplaces for order ingestion, processing, and reporting.
  • To provide financial services including COD collection, remittance, and wallet management.
4.B.2 Billing and Payments
  • To process fee payments, generate invoices, manage Wallet credits, deduct outstanding dues, and remit COD amounts.
  • To verify KYC information and bank account details for secure remittances.
4.B.3 Customer Support and Communication
  • To respond to your queries, support tickets, and grievances.
  • To send transactional notifications including shipment updates, payment confirmations, invoice alerts, and Service-related communications via SMS, email, WhatsApp, push notifications, or phone calls.
  • To use call recordings for training support staff and quality assurance. Where required by applicable law, you will be notified of and given the opportunity to object to call recordings.
4.B.4 Platform Improvement and Analytics
  • To analyse usage patterns, conduct internal data analysis, and improve the functionality, content, and user experience of the Platform.
  • To detect, investigate, and prevent fraud, security breaches, and violations of our Terms of Service.
  • To develop new products, features, and services.
4.B.5 Marketing and Promotions
  • To send you newsletters, promotional offers, product updates, and event invitations from Losung360 or its partners, subject to applicable opt-in/opt-out requirements.
  • To conduct targeted advertising on third-party platforms using anonymised or aggregated data. We will seek your prior consent for the use of advertising cookies as described in Section 7 below.
  • To create marketing materials in connection with commercial events, webinars, and industry conferences hosted or sponsored by Losung360.
4.B.6 Legal and Regulatory Compliance
  • To comply with applicable laws, regulations, and legal processes.
  • To respond to lawful requests from regulatory authorities, law enforcement agencies, and courts.
  • To share Merchant KYC details and documents with Courier Partners, judicial authorities, police, or complainants in connection with shipment disputes, insurance claims, or legal proceedings.
  • To exercise or defend Losung360’s legal rights.
4.B.7 Third-Party Service Delivery
  • To share data with sub-processors including IT infrastructure providers, hosting services, analytics providers, payment gateways, and customer support platforms, each of whom process data on Losung360’s behalf under confidentiality obligations consistent with this Policy.
  • To engage automated solutions, AI analytics engines, and data science tools to generate operational insights, demand forecasting, and performance analytics (in non-identifiable or aggregated form wherever possible).

5.A. Disclosure of Information

We may share your information with third parties only in the following circumstances:

  • For purposes outlined in this Privacy Policy;
  • When required by law, court order, or governmental authority;
  • With our group companies, employees, or service providers acting on our behalf, subject to confidentiality and data protection obligations;
  • To detect, prevent, or address fraud, security breaches, or technical issues; or
  • To protect the rights, property, or safety of Losung360, our users, or others.

Except as stated above, we do not disclose your personal information without your consent unless legally required to do so.

5.B. HOW WE SHARE YOUR PERSONAL DATA

Losung360 shares your personal data only as described in this Policy and only with parties who maintain standards of data protection consistent with or higher than those described herein.

5.B.1 Courier Partners and Logistics Providers

Merchant and end-customer data (including names, addresses, phone numbers, and shipment details) is shared with Courier Partners to the extent necessary for pickup, delivery, tracking, and returns processing. This includes Shiprocket and its affiliate logistics vendors where ShipMaxx shipping services are used.

5.B.2 Marketplace Platforms

Where the Merchant authorises integration of Marketplace accounts (through ShipMaxx OMS or SellerPro), Losung360 processes order data, product data, and seller metrics on behalf of the Merchant. Marketplace platforms’ own privacy policies govern data on their side.

5.B.3 Technology and Service Partners

Losung360 contracts with third-party service providers for IT infrastructure, cloud hosting, payment processing, customer support, analytics, marketing, and AI/ML services. These providers process data on Losung360’s behalf and are bound by data processing agreements.

5.B.4 Financial Partners

For COD remittance, payment processing, and financial services (including working capital financing where applicable), Losung360 may share relevant Merchant financial and KYC data with banking partners and payment service providers.

5.B.5 Professional Advisers

Losung360 may share personal data with lawyers, auditors, insurers, and other professional advisers where reasonably necessary for legal, financial, or regulatory purposes.

5.B.6 Government and Law Enforcement

Losung360 will disclose personal data to regulatory authorities, courts, law enforcement agencies, and other governmental bodies where required by law, court order, or to protect Losung360’s legal rights.

5.B.7 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Losung360’s business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

5.B.8 Aggregated / Anonymised Data

Losung360 may share aggregated, de-identified, or anonymised data publicly or with business partners for research, product development, or industry reporting. Such data cannot reasonably identify individual Merchants or end-customers.

5.B.9 Cross-Border Transfers

Your personal data may be transferred to and stored in jurisdictions outside India for the purposes described in this Policy. Losung360 ensures that such transfers are made in accordance with applicable law and that the receiving jurisdiction or entity provides an adequate level of data protection. For data of EU/UK residents, Losung360 relies on European Commission adequacy decisions or Standard Contractual Clauses. For Indian residents, Losung360 complies with the DPDP Act and any directions issued by the Central Government regarding restricted jurisdictions.

6. DATA RETENTION

Losung360 retains personal data for as long as necessary to fulfil the purposes described in this Policy and as required by applicable law (including statutory record-keeping obligations for tax, accounting, and legal purposes). Specifically:

  • Merchant Account data is retained for the duration of the account’s active status and for a minimum of 7 years thereafter to comply with statutory and regulatory requirements.
  • Shipment and transaction records are retained for a minimum of 7 years or as required under the applicable Courier Partner’s SLA, whichever is longer.
  • Customer Data submitted for OMS and order fulfilment purposes is retained for the duration of the Merchant’s subscription and for a reasonable period thereafter.
  • Marketing communications data is retained until you withdraw consent or unsubscribe.

 

After the applicable retention period expires, personal data is securely deleted or anonymised. Where technical deletion is not feasible immediately, Losung360 implements controls to prevent further processing of such data.

 

If you withdraw consent for specific processing purposes, Losung360 may be unable to provide certain Services. Withdrawal of consent does not affect the legality of processing carried out prior to withdrawal.

7. DATA SECURITY

Losung360 implements industry-standard technical, physical, and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, loss, or destruction. These include:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Role-based access controls limiting internal access to personal data.
  • Regular security assessments, vulnerability scanning, and penetration testing.
  • Data processing agreements with all sub-processors.
  • Incident response procedures for data breaches, including notification to affected parties and regulatory authorities as required by law.

 

No method of electronic transmission or storage is entirely secure. While Losung360 takes every reasonable precaution, it cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for ensuring that access to the Platform is restricted to authorised users.

 

In the event of a personal data breach that poses a high risk to your rights and freedoms, Losung360 will notify you without undue delay and in accordance with the requirements of the DPDP Act and other applicable laws.

9. YOUR RIGHTS AS A DATA PRINCIPAL

As a Data Principal under the DPDP Act and applicable privacy laws, you have the following rights:

9.1 Right to Access and Correction

You have the right to access the personal data Losung360 holds about you and to request correction of inaccurate, incomplete, or outdated information. You may exercise this right through your account settings or by writing to grievance@losung360.com.

9.2 Right to Erasure

You may request deletion of your personal data, subject to our legal obligations and legitimate business needs (e.g., statutory record retention). We will process erasure requests in accordance with the DPDP Act.

9.3 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. Withdrawal will not affect the lawfulness of processing prior to withdrawal. Note that withdrawal of consent for core processing may result in our inability to provide certain Services.

9.4 Right to Grievance Redressal

You have the right to raise grievances about our data processing practices with our Grievance Officer. If not resolved satisfactorily, you may approach the Data Protection Board of India or other competent authority.

9.5 Right to Nominate

Under the DPDP Act, you have the right to nominate another individual to exercise your rights in the event of your death or incapacity.

9.6 Right Not to be Discriminated Against

Losung360 will not discriminate against you for exercising any of your rights under this Policy or applicable law.

9.7 Right to Data Portability

You may request that we transfer your personal data to another data fiduciary in a structured, machine-readable format, to the extent technically feasible and as permitted by applicable law.

9.8 Managing Marketing Preferences

To opt out of marketing communications, click the ‘Unsubscribe’ link in any Losung360 marketing email, adjust your notification preferences in the Platform settings, or write to marketing@losung360.com.

10. CHILDREN'S PRIVACY

The Platform and Services are not directed at or intended for use by persons under the age of 18. Losung360 does not knowingly collect personal data from minors. If you believe that a minor has provided personal data to Losung360 without appropriate consent, please contact us immediately at grievance@losung360.com so that we may take appropriate action.

11. THIRD-PARTY INTEGRATIONS AND PLATFORMS

The Platform integrates with various third-party services including Marketplace platforms, Courier Partners, payment gateways, and software tools. When you access or authorise such integrations, you may be subject to those third parties’ privacy policies. Losung360 has no responsibility for the data practices of third parties. We strongly encourage you to review the privacy policies of any third-party service you use in connection with the Platform.

12. PRODUCT-SPECIFIC PRIVACY NOTES

12.1 ShipMaxx — Shipping and OMS

In operating ShipMaxx’s shipping aggregation module, Losung360 shares end-customer data (name, address, phone number, order value) with Courier Partners to enable shipment delivery. This data is used solely for logistics purposes. KYC documents and financial data are shared with Courier Partners as required for compliance, fraud prevention, and insurance processing.

 

In operating the OMS module, Losung360 processes Marketplace order data on behalf of the Merchant. Marketplace API access credentials provided by the Merchant are used solely to retrieve and process orders and are stored with encryption. Losung360 does not use Marketplace credentials for any other purpose.

12.2 ShipBulk — B2B Cargo Logistics

ShipBulk processes business contact data, freight documentation, and shipment records for B2B logistics purposes. Data is shared with freight carriers and logistics partners to the extent necessary for shipment execution.

12.3 SupplySphere — Warehousing and Fulfilment

SupplySphere involves Losung360 physically handling the Merchant’s inventory across its fulfilment network. Data collected and processed in this context includes inventory master data (SKU details, quantities, dimensions, HSN codes), ASN and PO records, inward and outward transaction logs, and order fulfilment records. This data is used solely for operational purposes including inventory management, order processing, reporting, and dispute resolution. Losung360 may share relevant inventory and transaction data with its warehouse operations partners and third-party logistics providers to the extent required for fulfilment operations.

12.4 StockBridge — Seller-on-Record and Distribution

StockBridge involves a title transfer arrangement where the Merchant sells inventory to a Losung360-designated SOR Entity. Data processed in this context includes inventory transfer records, tax invoices, GST and KYC compliance data, settlement records, and product and pricing information. This data is shared with the SOR Entity and, where required, with financial, legal, and regulatory bodies in connection with the execution and compliance of the SOR arrangement. The Merchant’s KYC and tax documents provided in connection with StockBridge may be shared with auditors, legal advisers, and government authorities as required under applicable law.

12.5 SellerPro — Marketplace Growth and Managed Services

SellerPro is a managed service where Losung360 accesses the Merchant’s Marketplace accounts (with authorisation) to manage listings, cataloguing, advertising campaigns, and growth marketing. Data processed includes Marketplace account credentials (stored securely with encryption), listing content, advertising campaign data, performance metrics, and order data. Losung360 uses this data solely to deliver the SellerPro service on behalf of the Merchant. Aggregate and anonymised performance benchmarking data may be used by Losung360 to improve its services, but individual Merchant account data is not shared with third parties without explicit consent. Marketplace access credentials are used solely for service delivery and are revoked upon termination.

13. Grievance Officer

If you have any questions, concerns, or grievances regarding the collection, use, storage, or processing of your personal data under this Privacy Policy, or if you wish to exercise any of your rights described herein, please contact our designated Grievance Officer:

 

Customer Support: support@losung360.com

Grievance Email: grievance@losung360.com

Address: 610-613, 6th Floor, Tower-A, Spaze I-Tech Park, Sector-49, Sohna Road, Gurgaon, Haryana, 122018, India

Response Time: We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days of receipt.

 

You are requested to exhaust the opportunity of redressing your grievance through our Grievance Officer before initiating any other action, including approaching the Data Protection Board of India.

14. EU AND UK GDPR COMPLIANCE (WHERE APPLICABLE)

Where Losung360 processes personal data of individuals in the European Economic Area (EEA) or the United Kingdom, the following additional provisions apply:

14.1 Legal Bases for Processing
  • Performance of a contract: Processing necessary to provide the Services.
  • Legitimate interests: Processing for fraud prevention, security, platform improvement, and support.
  • Consent: Where you have explicitly consented (e.g., marketing cookies, promotional communications).
  • Legal obligation: Processing required to comply with applicable law.
14.2 International Transfers

Transfers of EEA/UK personal data to countries not deemed adequate by the European Commission or UK ICO are made under appropriate safeguards including Standard Contractual Clauses.

14.3 Additional Rights

EEA/UK residents have additional rights under the GDPR including the right to lodge complaints with their national data protection authority.

15. CHANGES TO THIS PRIVACY POLICY

Losung360 may update this Privacy Policy from time to time to reflect changes in our practices, Services, legal requirements, or technology. Material changes will be communicated via the Platform dashboard or email notice. The updated Policy will take effect upon posting. Continued use of the Platform after such notification constitutes your acceptance of the updated Policy.

 

Archived versions of this Policy are available upon request by contacting grievance@losung360.com.

16. MERCHANT'S DUTIES AS DATA PROVIDER

As a Merchant submitting data through the Platform (including end-customer data), you have the following duties:

  • Ensure all personal data submitted is lawfully obtained, accurate, and you have the legal authority to share it with Losung360.
  • Obtain all necessary consents from your end-customers for their data to be processed by Losung360 and its Courier Partners for the purposes of order fulfilment and shipping.
  • Comply with all applicable data protection and privacy laws in your jurisdiction.
  • Not register fictitious grievances or submit false or misleading data.
  • Notify Losung360 promptly if you become aware of any breach of data relating to information submitted through the Platform.