Privacy Policy

Effective Date: September 28, 2026

This Privacy Policy sets forth the principles and practices of P. Ramesh (hereinafter referred to as the "Entity", "Firm", "we", "us", or "our") regarding the collection, processing, storage, transfer, and protection of personal data obtained through our e-commerce portal and associated communication channels (collectively, the "Services").

This document is drafted in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

1. Scope and Categorization of Data Collected

●       Directly Submitted Identifiers: To execute transactions and comply with fiscal regulations, we collect data including, without limitation, your legal name, billing address, shipping address, contact telephone number, and electronic mail address.

●       Commercial and Transactional Records: Records of items browsed, carted, transacted, and invoiced, along with corresponding payment confirmations and tax invoices, are cataloged for operational fulfillment and statutory accounting compliance.

●       System and Telemetry Logs: When you navigate our digital storefront, our hosting infrastructure automatically collects technical telemetric indicators, including Internet Protocol (IP) addresses, browser architecture, operating systems, and device identifiers via essential cookies and tracking beacons.

●       Support and Operational Communications: Records of any electronic correspondence, written requests, or dispute notifications transmitted through our verified channels are archived for dispute resolution and quality auditing.

2. Legal Grounds and Operational Purposes for Data Processing

Personal data acquired by P. Ramesh is utilized strictly for lawful purposes, including:

●       Performing contractual obligations, specifically order processing, payment gateway verification, transit coordination, and order status communications.

●       Complying with regulatory obligations under Indian fiscal and taxation laws, including the Central Goods and Services Tax (CGST) Act, 2017, and applicable state statutes.

●       Detecting, mitigating, and preventing unauthorized, suspicious, or demonstrably fraudulent financial transactions.

●       Transmitting transactional notices, administrative updates, and commercial updates (subject to your legal right to revoke consent for non-transactional marketing).

3. Disclosure to Authorized Intermediaries

We do not sell, rent, or trade your personal data. Disclosures are restricted exclusively to operational data processors bound by statutory confidentiality and data security obligations:

●       E-Commerce Hosting Infrastructure: Shopify Inc., which supplies our digital storefront and secure cloud architecture.

●       Payment Aggregators: Authorized, PCI-DSS compliant digital payment gateways processing financial transactions without storing raw card authorization credentials on our localized servers.

●       Logistics Intermediaries: Domestic courier aggregators and international air freight forwarders tasked with last-mile physical fulfillment.

●       Statutory Authorities: Law enforcement agencies, judicial forums, or tax authorities upon receipt of a valid legal order, summons, or regulatory decree under the laws of India.

4. Data Security and Retention Standards

We implement technical, physical, and administrative safeguards designed to preserve the integrity and confidentiality of your personal information. While our systems use industry-standard encryption protocols, transmission across open networks carries inherent risks, and absolute security cannot be guaranteed. Personal and transactional records are retained strictly for the duration necessary to satisfy the commercial objective of the transaction, conclude warranty or return assessment periods, or satisfy statutory record-keeping periods mandated by tax authorities.

5. Data Principal Rights

Subject to verification of identity and statutory limitations, you are entitled to:

●       Inquire regarding the summary of personal data held under your profile.

●       Petition for the rectification of inaccurate, outdated, or incomplete data records.

●       Petition for the erasure of personal records, provided such data is no longer necessary for an active legal obligation, fraud investigation, or tax compliance matter.

●       Withdraw processing consent for promotional communications at any juncture.

6. Contact and Regulatory Grievance Escalation

All communications, legal notifications, and data protection petitions must be addressed to our designated nodal desk:

●       Operating Entity: P. Ramesh

●       Principal Place of Business: Shyamal, Ahmedabad, Gujarat, India

●       Dedicated Electronic Mail: prameshshyamal88@gmail.com

●       Official Contact Line: +91 9978944077