Skip to content

Seller Data Addendum

Version 1, last updated Sep 15, 2026

This addendum forms part of the Seller Agreement between you ("seller", "you") and Nmjoy ("Nmjoy", "we", "us"). It governs the personal data about buyers that we make available to you. Terms defined in the Seller Agreement have the same meaning here.

1. Purpose and parties

Because we are the merchant of record, buyers give their personal data to us, not to you. To let you fulfil sales, support your buyers and meet your own legal duties, we share a limited amount of that data with you. This addendum sets out what we share, what you may do with it, and what each of us is responsible for. It applies from the moment you accept the Seller Agreement.

2. Roles

Each of us is an independent data fiduciary under the Digital Personal Data Protection Act 2023 for the personal data it processes. We are the data fiduciary for the data buyers give us and for the data we share with you; you become a separate data fiduciary for the data once you receive it. Neither of us processes personal data on behalf of, or under the instructions of, the other, and nothing in this addendum makes either of us the other's data processor.

3. Data shared with the seller

We share with you only the following:

  1. the fact that a sale of one of your products occurred;
  2. the value of that sale;
  3. the buyer's display name, only where that buyer has posted a review or a question on one of your products.

We do not share the buyer's name, email address, postal address, payment details, IP address or any other identifier. If you need to contact a buyer, for example to answer a question, you do so through the tools we provide on the marketplace.

4. Permitted purposes

You may use the data we share only to:

  1. fulfil the sale and provide any support you have promised on the product page;
  2. respond to a buyer's review or question on the marketplace;
  3. keep the business records the law requires you to keep; and
  4. establish, exercise or defend a legal claim.

5. Prohibited uses

You must not:

  1. use the data to market to buyers, on the marketplace or anywhere else;
  2. combine it with other data to build a profile of a buyer;
  3. sell, rent or license it;
  4. share it with anyone except your own service providers who need it for a permitted purpose and are bound in writing to protect it; or
  5. try to identify a buyer beyond what we have shared, or contact a buyer outside the marketplace.

6. Seller obligations

As a data fiduciary you must:

  1. process the data only for the permitted purposes in section 4, and only on the basis the DPDP Act allows;
  2. give buyers the notice the DPDP Act requires about how you use their data, where you use it in a way they would not expect from the product page;
  3. protect the data with security measures appropriate to its sensitivity, including access control and encryption where it is stored or transmitted;
  4. tell us at privacy@nmjoy.com within 48 hours of becoming aware of any breach of security affecting the data, with enough detail for us to meet our own notification duties, and cooperate with us in dealing with it;
  5. delete the data when you no longer need it for a permitted purpose, subject to any legal retention duty; and
  6. keep records sufficient to show that you comply with this addendum, and provide them to us on reasonable request.

7. Transfers outside India

You must not transfer the data to any country or territory outside India that the Central Government has restricted by notification under section 16 of the DPDP Act. If you store the data with a service provider outside India, you remain responsible for it and for complying with this addendum.

8. Data subject requests

Each of us handles requests from buyers, as data principals, about the data it holds. If you receive a request that concerns data we hold, direct the buyer to privacy@nmjoy.com. If we receive a request that concerns data you hold, we will tell you and you will respond within the time the law allows. Each of us will give the other the cooperation reasonably needed to meet these requests and any enquiry from the Data Protection Board of India.

9. Liability and indemnity

Each of us is responsible for its own compliance with the DPDP Act and with this addendum. You will cover the losses, penalties and reasonable costs we incur as a result of your breach of this addendum, and we will do the same for you in respect of our breach. The liability limits in the Seller Agreement apply to this addendum, except that they do not limit either party's liability for a breach of section 5.

10. Term

This addendum applies for as long as the Seller Agreement is in force and, in respect of data you received while it was in force, for as long as you hold that data after the Seller Agreement ends. Sections 4 to 9 survive termination.

11. Governing law

This addendum is governed by the laws of India, and the competent courts in India have exclusive jurisdiction, in the same way as the Seller Agreement.

12. Contact

Data protection questions and breach notices: privacy@nmjoy.com. Seller support: sellers@nmjoy.com.