Privacy Policy
Last updated: February 2026. This policy applies to Rohima Technologies Private Limited and its products (ByajKhata, Doctors, Retails, and rohima.com).
1. Who we are
Rohima Technologies Private Limited (“Rohima”, “we”, “us”) operates the website rohima.com and the products ByajKhata, Doctors, and Retails. We are the data controller for the personal data we collect in connection with these services.
This Privacy Policy explains how we collect, use, store, and protect your information when you use our websites and applications. We are committed to handling your data responsibly and in accordance with applicable data protection laws, including the Information Technology Act, 2000 and related rules in India.
2. Data we collect
We may collect: (a) account and profile information (name, email, phone, address); (b) usage data (how you use our apps and websites); (c) payment-related data (processed by our payment partner; we do not store full card details); (d) device and log data (IP address, browser, device type) where relevant for security and support.
Account and profile data is provided by you when you register or update your profile. Usage data is generated when you interact with our services and may include pages visited, features used, and session duration. Payment data is collected and processed by our authorised payment partner; we receive only the information necessary to confirm transactions and manage subscriptions. Device and log data are collected for security, fraud prevention, and troubleshooting, and may be retained for a limited period as required by law or our retention policy.
3. How we use data
We use your data to provide, maintain, and improve our services; to process payments and subscriptions; to communicate with you (e.g. support, updates); and to comply with legal obligations. We do not sell your personal data to third parties.
We may also use aggregated or de-identified data for analytics, product improvement, and internal reporting. We do not use your personal data for marketing communications unless you have opted in or we have another lawful basis. You can unsubscribe from promotional emails at any time. Service-related communications (e.g. account or billing notices) may still be sent as necessary for the performance of our contract with you.
4. Sharing
We may share data with: (a) service providers (e.g. hosting, payment processing) under strict confidentiality; (b) authorities when required by law. We require partners to protect your data in line with this policy.
Service providers are bound by contractual obligations to use your data only for the purposes we specify and to implement appropriate security measures. We do not share your personal data with third parties for their own marketing purposes. We may disclose your data if required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
5. Security
We implement appropriate technical and organisational measures to protect your data. No system is completely secure; we encourage you to use strong passwords and keep your account details safe.
We use industry-standard practices such as encryption in transit (e.g. TLS), access controls, and secure development processes. We regularly review and update our security measures. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with applicable law.
6. Retention
We retain your data for as long as your account is active or as needed to provide services and comply with legal, tax, or regulatory requirements. You may request deletion of your account and associated data subject to applicable law.
After you close your account or request deletion, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal, audit, or dispute resolution purposes. Backups may retain data for a limited additional period before being overwritten. For specific retention periods applicable to particular categories of data, you may contact us using the details below.
7. Your rights
Depending on applicable law, you may have the right to access, correct, delete, or port your data, or to object to or restrict certain processing. To exercise these rights, contact us using the details on rohima.com. You may also have the right to lodge a complaint with a supervisory authority.
We will respond to legitimate requests within the timeframes required by applicable law. You may be asked to verify your identity before we process your request. If you are in India, you may have rights under the Digital Personal Data Protection Act and related regulations once in force; we will comply with such requirements. If you are in another jurisdiction, your local data protection laws may provide additional or different rights.
8. Changes
We may update this privacy policy from time to time. We will post the updated version on rohima.com/privacy. We encourage you to review it periodically.
We will update the “Last updated” date at the top of this page when we make changes. Material changes that affect how we use your personal data may be communicated via email or a prominent notice in our applications. Your continued use of our services after the effective date of the revised policy constitutes your acceptance of the updated policy, except where further consent is required by law.
9. Contact
For privacy-related questions or requests, contact Rohima Technologies Private Limited at the contact details provided on rohima.com.
If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about our handling of your data, please contact us using the contact information available on our website. We will acknowledge your request and respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with a data protection supervisory authority in your country or region.