DATA PROTECTION & COMPLIANCE

Privacy Policy

How NextGeen collects, safeguards, uses, and retains customer and business information for digital web engineering and catalogue services.

Effective Date: October 29, 2026
•
Last Updated: October 29, 2026
•
NextGeen Transparency & Operating Standards:

This document reflects NextGeen's actual business practices, service packages, and payment workflows. Please review these terms carefully. If you require custom enterprise agreements, reach out to our legal support desk.

Operational Disclosure & Scope

NextGeen (“we”, “us”, or “our”) operates website development, online product catalogues, shop location setups, and branding services for retail shops and small businesses across India. This policy describes our genuine data handling practices. It is drafted for practical transparency and must be reviewed by the business owner and legal counsel prior to formal certification.

1. Overview & Business Information

NextGeen (Tagline: “Your Shop Online, Always.”) provides website engineering, product catalogue showcases, WhatsApp order integration, and branding services for local shop owners, boutiques, supermarkets, jewellery stores, and other growing businesses in Maharashtra and throughout India.

When you visit our website (https://nextgeen-website.vercel.app), order a package, or contact our team, we collect and process specific information to fulfill your service order, provide customer assistance, and maintain business records.

2. Information We Collect

We collect only the information necessary to construct your business website, configure your catalogue, communicate project status, and verify transactions:

Customer & Contact Details

  • Customer full name & authorized representative name
  • Primary mobile phone number
  • WhatsApp phone number for order notifications
  • Email address for receipts and project correspondence

Business & Store Information

  • Shop / trade name and business category
  • Physical shop address, landmark, city, and state
  • Google Maps coordinates or business link
  • Operating hours, holidays, and delivery details

Order Specifications & Content

  • Selected package (Starter, Branding Bundle, or Location Setup)
  • Requested catalogue items, pricing, and product photos
  • Feature preferences, bilingual requirements, and custom notes

Payment Audit References

  • NextGeen Order Reference (e.g., NG-YYYYMMDD-XXXX)
  • Razorpay Gateway Order ID & Payment Transaction ID
  • Transaction amount, currency (INR), and verified timestamp
  • Payment status (Pending, Paid, Failed, or Refunded)

Strict Financial Data Exemption: NextGeen never collects, processes, or stores your credit or debit card numbers, CVVs, card expiry dates, netbanking credentials, or UPI MPINs. All payment transactions are executed directly through Razorpay's encrypted, PCI-DSS Level 1 compliant gateway.

3. Purposes of Processing

We process your data for the following explicit business purposes:

  • 1. Service Fulfilment & Development: To build, deploy, configure, and maintain your custom website, product catalogue, and Google Maps pin per your chosen package.
  • 2. Direct Project Communication: To contact you via phone or WhatsApp for catalogue discovery, design approvals, revision requests, and launch coordination.
  • 3. Invoicing & Transaction Verification: To generate server-side verified payment receipts, prevent fraudulent duplicate orders, and record statutory financial records.
  • 4. Customer Support & 1-Year Upkeep: To provide ongoing technical support, DNS administration, and catalogue price updates during your agreed 1-year service window.
  • 5. Security & Abuse Prevention: To monitor checkout rate limits and prevent spam or malicious bot submissions.

4. Payment Processing via Razorpay

NextGeen partners with Razorpay Software Private Limited (“Razorpay”) to process online payments via UPI (Google Pay, PhonePe, Paytm, BHIM), Credit/Debit Cards, and Netbanking.

What Data is Shared with Razorpay:

When you initiate a transaction, NextGeen transmits only limited identifiers to Razorpay's server: your Order Reference number, payable amount in INR, package name, customer name, mobile number, and email.

Server-Side Signature & Webhook Verification:

Payment confirmation is never determined by frontend client responses. When payment completes, Razorpay generates a cryptographic HMAC-SHA256 signature and transmits automated webhooks to our secure server. We verify these signatures server-side before updating an order's status to “Paid”.

Razorpay's independent privacy policy and compliance terms apply to payment interactions: Razorpay Privacy Policy.

5. Cookies, Local Storage & Tracking

We respect user privacy and do not deploy invasive third-party ad pixels or behavioral surveillance networks. Only the following essential and functional storage mechanisms are present:

Session Storage (Temporary Form State): We use browser sessionStorage to prevent you from losing your entered shop details when navigating multi-step order screens. This data is stored strictly on your local browser tab and is cleared when you close your browser window.
Admin Authentication Cookies (Strictly Necessary): An HTTP-only, secure cookie (nextgeen_admin_token) is used exclusively for verified team administrators logging into the internal operational dashboard. It is never used to track regular customers.
No Third-Party Advertising Trackers: NextGeen does not run third-party cross-site advertising trackers or sell browsing data to data brokers.

6. Data Storage, Security & Retention

Your order records and business details are housed on secure, encrypted PostgreSQL cloud infrastructure (Neon / AWS) utilizing Transport Layer Security (TLS 1.3) during transit and AES encryption at rest.

Retention Schedule:
  • Active Service Records: Maintained for the duration of your 1-year service agreement and active domain upkeep to deliver ongoing technical updates.
  • Financial & Invoicing Records: Order references, payment identifiers, timestamps, and receipt records are retained for the statutory period required by Indian accounting, tax, and commercial regulations (typically up to 7–8 years).
  • Unpaid Draft Orders: Temporary order requests that remain unpaid or unconfirmed may be archived or removed periodically after 90 days.

7. Customer Rights & Data Requests

As a NextGeen client, you hold fundamental rights regarding your personal and business information:

  • Right to Access & Review: You may request a copy of the personal and business details stored in your NextGeen account.
  • Right to Rectification: If your store address, phone number, opening hours, or catalogue details change, you can contact us at any time to update your records.
  • Right to Erasure / Deletion: You may request the deletion of non-essential personal information upon conclusion of your service agreement. Please note: We cannot erase verified transaction IDs, payment logs, and invoice references where statutory retention is legally mandated.
  • Right to Withdraw Consent: You may request to stop receiving project updates or marketing notifications by messaging our support desk.

To exercise any of these rights, email us from your registered order email address at nextgeen.info@gmail.com with the subject “Privacy Data Request - [Your Order Reference]”.

8. Disclosure to Third-Party Service Providers

We never rent, sell, or trade your personal or business data. Data is shared strictly with authorized infrastructure partners necessary to deliver your digital services:

Razorpay (Payment Gateway)Processes UPI, cards, and netbanking transactions under strict RBI and PCI-DSS compliance.
Cloud Hosting & Database PartnersPostgreSQL infrastructure (Neon) and cloud server networks for hosting your live shop catalogue.
WhatsApp Business / MetaDirect WhatsApp order button routing between your website visitors and your own shop phone number.
Legal & Regulatory AuthoritiesDisclosed only when strictly required by applicable Indian law, court order, or official governmental request.

9. Policy Updates & Grievance Contact

We may update this Privacy Policy periodically to reflect service evolutions, regulatory updates, or workflow enhancements. The updated version will be published here with a revised “Last Updated” date.

Designated Privacy & Grievance Officer:

Business Name: NextGeen Digital Services

Email: nextgeen.info@gmail.com

Phone / WhatsApp: +91 99706 20864

Headquarters / Location: Pune, Maharashtra, India

Operating Hours: Monday – Saturday, 9:00 AM – 8:00 PM IST

For complaints or data privacy inquiries, please quote your Order Reference number for faster resolution.

Need Assistance with This Policy?

Our business and compliance desk is available Monday – Saturday, 9:00 AM – 8:00 PM IST.

WhatsApp UsBuild My Website