Privacy Policy

1. Information We Collect

1.1 Personal Identifiable Information (PII)

• Contact Information: Name, email address, phone number, postal address
• Account Information: Username, password (encrypted), profile picture
• Business Information: Company name, GST number, business type, business address
• Payment Information: Billing address, payment method details (processed securely)
• Identity Verification: Government ID numbers when required for business accounts

1.2 Sensitive Personal Data Information (SPDI)

1.3 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, click patterns, search queries
• Location Data: Approximate location based on IP address (with consent for precise location)
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies

2. How We Use Your Information

2.1 Primary Business Purposes

• Order Processing: Process and fulfill your orders, manage payments and shipping
• Customer Service: Respond to inquiries, provide support, handle returns and refunds
• Account Management: Create and maintain user accounts, subscription management
• Product Customization: Create custom packaging solutions based on your requirements
• Business Communication: Send order confirmations, shipping updates, and important notices

2.2 Marketing and Communication (With Consent)

• Send promotional emails about new products and special offers
• Provide personalized product recommendations
• Share industry insights and packaging tips via newsletter
• Invite participation in surveys and feedback collection
• Announce company updates and sustainability initiatives

2.3 Legal and Compliance Purposes

• Comply with Indian laws and regulations (GST, Consumer Protection Act, IT Act)
• Prevent fraud, abuse, and security incidents
• Maintain accurate financial records and tax documentation
• Respond to legal requests and protect our rights

3. Information Sharing and Disclosure

3.1 Service Providers and Business Partners

• Payment Processors: Razorpay, Stripe, PayU (for secure payment processing)
• Shipping Partners: India Post, BlueDart, Delhivery (for order delivery)
• Cloud Services: AWS, Google Cloud (for secure data storage)
• Analytics: Google Analytics (anonymized data for website improvement)
• Customer Support: Email service providers and help desk systems

3.2 Legal Requirements

We may disclose your information when required by Indian law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety and that of our users
• Investigate and prevent fraud, security breaches, or illegal activities
• Enforce our Terms and Conditions and other agreements

4. Data Security and Protection

4.1 Technical Safeguards

• Encryption: SSL/TLS encryption for data transmission, AES-256 for data storage
• Access Controls: Multi-factor authentication, role-based access, regular access reviews
• Network Security: Firewalls, intrusion detection, regular security monitoring
• Data Backup: Regular automated backups with secure storage
• Vulnerability Management: Regular security audits and penetration testing

4.2 Organizational Safeguards

• Employee training on data protection and privacy practices
• Confidentiality agreements with all staff and contractors
• Regular privacy impact assessments
• Incident response procedures for data breaches
• Compliance monitoring and regular policy updates

5. Your Privacy Rights and Choices

5.1 Access and Correction Rights

• Access: Request a copy of all personal information we hold about you
• Correction: Update or correct inaccurate personal information
• Portability: Receive your data in a structured, machine-readable format
• Account Control: Update preferences and manage communication settings

5.2 Deletion and Withdrawal Rights

• Deletion: Request deletion of your personal information (subject to legal requirements)
• Withdrawal: Withdraw consent for marketing communications at any time
• Account Closure: Close your account and delete associated data
• Objection: Object to specific uses of your information

5.3 How to Exercise Your Rights

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality, cannot be disabled
• Performance Cookies: Help us understand how visitors use our website
• Functionality Cookies: Remember your preferences and settings
• Marketing Cookies: Track effectiveness of our advertising (with consent)

6.2 Managing Cookies

• Use our cookie consent banner to manage preferences
• Adjust browser settings to block or delete cookies
• Opt out of Google Analytics tracking
• Disable marketing cookies while keeping functional ones

7. Data Retention and Deletion

7.1 Retention Periods

• Account Data: Retained while account is active plus 3 years after closure
• Transaction Records: 7 years (as required by Indian tax and accounting laws)
• Marketing Data: Until consent is withdrawn or 2 years of inactivity
• Support Communications: 3 years for quality assurance and training
• Website Analytics: 26 months (Google Analytics default)

7.2 Secure Deletion

When data is no longer needed, we securely delete it using industry-standard methods to ensure it cannot be recovered or reconstructed.

8. International Data Transfers

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that we have collected personal information from a child under 18, we will:

• Delete the information immediately
• Notify the parent or guardian if possible
• Terminate the account if applicable
• Review our processes to prevent similar occurrences

10. Privacy Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will post the updated policy on our website
• We will notify you via email for significant changes
• The “Last updated” date will be revised
• We may require your consent for material changes

11. Contact Information and Grievance Redressal

Grievance Redressal Mechanism

As per Indian IT Rules, if you have any grievances regarding data protection or privacy:

1. Contact our Data Protection Officer using the details above
2. We will acknowledge your complaint within 24 hours
3. We will investigate and respond within 30 days
4. If unsatisfied, you may approach the Indian Computer Emergency Response Team (CERT-In)
5. You may also file complaints with appropriate consumer forums

12. Compliance with Indian Laws

This Privacy Policy complies with:

• Information Technology Act, 2000 and amendments
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Consumer Protection Act, 2019
• Indian Contract Act, 1872
• Goods and Services Tax Act, 2017 (for business data)