PRIVACY POLICY

1. Statutory Overview & Scope

DuraStrand (“we”, “us”, “our”, or the “Company”) operates the website www.durastrand.com (“Site”). We are firmly committed to safeguarding the privacy and digital personal data of all visitors, registered customers, and commercial partners. This Privacy Policy is published in strict compliance with the legal and regulatory framework of India, specifically:

·       Digital Personal Data Protection: The Digital Personal Data Protection Act, 2023 (DPDPA 2023).

·       Information Technology Standards: The Information Technology Act, 2000 (as amended) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

·       Consumer Protection Mandates: The Consumer Protection (E-Commerce) Rules, 2020 promulgated under the Consumer Protection Act, 2019.

By accessing, browsing, or transacting on www.durastrand.com, you confirm that you have read, understood, and consented to the collection, storage, processing, and transfer of your personal data as described herein.

2. Personal Data We Collect

We collect only data necessary to fulfill commercial transactions, comply with statutory tax laws, and deliver customer support:

·       Identity & Contact Data: Full name, billing address, shipping/delivery address, email address, and direct mobile/contact numbers.

·       Commercial & Tax Information: Purchase history, invoice records, product customization specifications, and Goods and Services Tax Identification Number (GSTIN) for B2B tax compliance.

·       Payment & Transaction Details: All online payments are securely processed through Razorpay Software Private Limited (“Razorpay”). DuraStrand does not store, capture, or have access to your full credit/debit card numbers, CVV codes, net banking passwords, or UPI PINs. All payment transactions comply with PCI-DSS Level 1 security standards and Reserve Bank of India (RBI) tokenization guidelines.

·       Technical & Telemetry Data: IP address, browser type and version, operating system, device identifiers, and site usage data collected via essential and analytics cookies.

3. Purpose and Legal Basis for Processing

We process your personal data under explicit statutory grounds as mandated under Indian law:

4. Third-Party Service Providers & Sub-Processors

DuraStrand does not sell, rent, trade, or monetize your personal data. We disclose information strictly on a need-to-know basis to authorized service providers bound by contractual data security agreements:

·       Payment Processor: Razorpay Software Private Limited is our primary payment gateway and merchant processor for secure processing of UPI, Net Banking, Debit/Credit Cards, and Digital Wallets.

·       Domestic Logistics Couriers: Blue Dart Express, Delhivery, DTDC Express, Xpressbees, Ekart Logistics, and TCI Express (for heavy/B2B freight consignments) receive your recipient name, address, and mobile number strictly for last-mile delivery and SMS tracking.

·       Statutory & Law Enforcement: Information is disclosed only when required by a formal order from a court of competent jurisdiction in New Delhi, law enforcement authorities, or tax authorities under the CGST Act.

5. Data Storage, Retention & Security

·       Data Localization: Personal data collected through www.durastrand.com is stored in secure data centers located within the territory of India, adhering strictly to national data localization requirements.

·       Technical Safeguards: We employ 256-bit TLS/SSL encryption across all web pages, multi-factor administrative authentication, firewall protection, and regular vulnerability audits.

·       Statutory Retention: Transaction and invoice records are maintained for a mandatory period of 8 years in compliance with Section 128 of the Indian Companies Act, 2013 and Section 36 of the Central Goods and Services Tax Act, 2017.

6. Rights of the Data Principal (Under DPDPA 2023)

As a Data Principal, you are entitled to exercise the following legal rights by contacting our Grievance Officer:

·       Right to Access: Right to obtain confirmation of whether your data is being processed and a summary of the data held.

·       Right to Correction: Right to rectify inaccurate, incomplete, or outdated personal information.

·       Right to Erasure: Right to request deletion of personal information where processing is no longer required, subject to mandatory statutory retention rules.

·       Right of Nomination: Right to nominate another individual to act on your behalf in case of incapacity.

7. Grievance Officer & Customer Support Contact

In compliance with Section 5(9) of the Digital Personal Data Protection Act, 2023 and Rule 5(9) of the Information Technology Rules, 2011, inquiries and grievances may be addressed directly to:

·       Designation: Grievance Officer, DuraStrand Operations

·       Corporate Office: Plot No. 42, Okhla Industrial Area, Phase-III, New Delhi – 110020, India

·       Direct Email: support@durastrand.com

·       Customer Helpline: +91 (011) 4567-8900  /  +91 98765 43210 (Mon–Sat, 9:30 AM – 6:30 PM IST)

8. Governing Law & Jurisdiction

This Privacy Policy and any disputes or claims arising out of the processing of data on www.durastrand.com shall be governed by and construed in accordance with the laws of India. The courts of competent jurisdiction located at New Delhi, India shall have exclusive jurisdiction over all matters.