1. Introduction

ITALTRIKE INDIA PRIVATE LIMITED ("Italtrike", "we", "our", or "us") is committed to protecting the privacy and personal data of our customers, visitors and business partners.

This Privacy Policy explains how we collect, use, store, process and protect your personal data when you visit our website, create an account, purchase our products or otherwise interact with us.

This Policy has been prepared in accordance with the applicable laws of India, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and should be read together with our Terms and Conditions.

By using our website or providing your personal data, you consent to the processing of your information as described in this Privacy Policy where consent is required by applicable law.

2. Who We Are

Data Fiduciary:

ITALTRIKE INDIA PRIVATE LIMITED

GSTIN: 33AAICI8364C1ZM

For privacy-related questions, you may contact us at:

Customer Service: customerservice@italtrike.in

3. Grievance Officer

In accordance with applicable Indian law, we have appointed a Grievance Officer.

Prathul Sreeram
Director & Grievance Officer
Email: prathul@santhagrinder.com
Phone: +91 8300174550

We aim to acknowledge complaints within the timelines prescribed under applicable law and resolve them as promptly as reasonably possible.

4. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Identity Information

• Name
• Company name (where applicable)

Contact Information

• Email address
• Telephone number
• Shipping address
• Billing address

Transaction Information

• Products purchased
• Order history
• Payment status
• GST information (where provided)

Account Information

• Username
• Login credentials
• Saved addresses
• Preferences

Customer Communications

• Messages sent through contact forms
• Customer support requests
• Product enquiries
• Reviews or feedback voluntarily submitted

Technical Information

When you visit our website, certain technical information may be collected automatically, including:

• Device information
• Browser type
• Operating system
• IP address
• Website usage information

Technical information is collected only to the extent permitted under applicable law.

5. How We Collect Personal Data

We collect personal data:

• directly from you;
• when you create an account;
• when you place an order;
• when you subscribe to newsletters or marketing communications;
• when you contact customer support;
• when you communicate with us by email or other channels;
• through lawful technical means necessary for the operation and security of the website.

6. Why We Process Your Personal Data

We process personal data only for legitimate business purposes, including:

• processing and fulfilling orders;
• delivering products;
• managing customer accounts;
• providing customer support;
• issuing invoices;
• complying with legal and regulatory obligations;
• preventing fraud and maintaining website security;
• improving our products and services;
• communicating important information regarding orders or services;
• sending promotional communications where permitted by law or where you have provided your consent.

We will only process personal data for purposes that are lawful, specific and consistent with this Privacy Policy.

7. Legal Basis

Where required under the DPDP Act, we process your personal data based on:

• your consent;
• purposes permitted under applicable law;
• compliance with legal obligations;
• performance of contractual obligations.

You may withdraw your consent at any time, subject to applicable legal requirements.

Withdrawal of consent shall not affect processing already carried out before such withdrawal.

8. Sharing of Personal Data

We do not sell personal data.

We may share personal data only where reasonably necessary with:

• payment service providers;
• logistics and shipping partners;
• technology and cloud service providers;
• customer support providers;
• professional advisers;
• government authorities where required by law;
• companies within the Italtrike Group where necessary for operational, administrative, customer support, information technology or compliance purposes.

All third parties are expected to process personal data in accordance with applicable law and appropriate confidentiality obligations.

9. International Transfers

As part of an international business group, certain personal data may be processed outside India where permitted under applicable law.

Where international transfers occur, we take reasonable measures to ensure that personal data receives an appropriate level of protection consistent with applicable legal requirements.

10. Data Security

We implement reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• alteration;
• disclosure;
• misuse;
• destruction.

Although we strive to protect personal data, no electronic transmission or storage system can be guaranteed to be completely secure.

11. Data Retention

We retain personal data only for as long as reasonably necessary:

• to fulfil the purposes described in this Policy;
• to comply with legal obligations;
• to resolve disputes;
• to enforce contractual rights;
• to maintain appropriate business records.

When personal data is no longer required, it will be deleted or anonymised in accordance with applicable law.

12. Your Rights

Subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction or updating of inaccurate information;
• request completion of incomplete information;
• request deletion of personal data where legally applicable;
• withdraw consent where processing is based on consent;
• submit a grievance regarding the processing of your personal data.

Requests may be submitted using the contact details provided in this Policy.

We may request reasonable verification of identity before responding.

13. Children's Privacy

Our products are intended for children but are purchased by parents, guardians, educational institutions and authorised adults.

We do not knowingly collect personal data directly from children unless permitted by applicable law and appropriate consent has been obtained where required.

Parents or legal guardians who believe that a child has provided personal data may contact us to request appropriate action.

14. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites.

Users should review the privacy policies of those websites independently.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The updated version will be published on this website together with the revised "Last updated" date.

Where required by applicable law, we will obtain any necessary consent before processing personal data for new purposes.

16. Contact Us

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

ITALTRIKE INDIA PRIVATE LIMITED
Customer Support: customerservice@italtrike.in