Delivering Authenticity
Delivering Authenticity
Deliver to
Set location
Delivering Authenticity
Delivering Authenticity
Deliver to
Set location
Tap to select delivery location
Home
Privacy Policy
Legal Document
We believe your personal data belongs to you. This policy explains plainly what we collect, why we collect it, and the rights you have over it.
Last Updated
1 July 2025
Effective From
1 July 2025
indiHeritedge ("we", "us", "our") operates the website www.indiheritedge.com and related services. This Privacy Policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules.
This policy applies to all personal data we process about you when you browse our website, create an account, make a purchase, contact our support team, or interact with us in any way. By using our platform, you consent to the practices described here.
Our registered office is at: 176, Vrindavan Colony, Jhotwara, Jaipur, Rajasthan 302012, India.
| Purpose | Legal Basis (DPDP Act 2023) | Data Used |
|---|---|---|
| Processing and fulfilling orders | Performance of contract | Name, address, phone, order details |
| Account creation and management | Consent / contract | Email, name, phone, password hash |
| Customer support | Legitimate interest | Communication history, order data |
| Order status updates and transactional emails/SMS | Contract / legitimate interest | Email, phone, order number |
| Marketing emails and promotional offers | Consent (opt-in only) | Email, purchase history |
| Analytics and site improvement | Legitimate interest | Usage data, cookies |
| Fraud detection and security | Legal obligation / legitimate interest | IP address, device data, transaction patterns |
| Legal and regulatory compliance | Legal obligation | Transaction records, identity data |
We do not sell, rent, or trade your personal data. We share it only as described below:
We share data with trusted third parties who process it on our behalf and under strict confidentiality agreements:
We may disclose data when required by Indian law, court order, or government authority, including under the Information Technology Act, 2000 and its intermediary guidelines.
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. We will notify you via email and/or prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data (active) | Duration of account + 3 years after closure | Dispute resolution, legal compliance |
| Order and transaction records | 8 years from transaction date | Tax law (Income Tax Act), GST compliance |
| Payment records | 8 years | RBI regulations, audit requirements |
| Support communications | 3 years from last interaction | Dispute resolution |
| Analytics / usage data | 13 months (rolling) | Site improvement |
| Marketing consent records | Until consent is withdrawn + 2 years | Proof of consent (DPDP Act) |
After the applicable retention period, data is securely deleted or anonymised.
We implement technical and organisational measures appropriate to the risk, including:
In the event of a personal data breach affecting your rights or interests, we will notify the Data Protection Board of India as required under the DPDP Act, 2023 and notify affected users without undue delay.
Under India's Digital Personal Data Protection Act, 2023, you have the following rights:
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Receive a summary of personal data we hold about you and how it is processed | Email indiheritedge@gmail.com |
| Correction | Correct inaccurate or incomplete personal data | Account settings or email us |
| Erasure | Request deletion of your personal data when no longer necessary or when consent is withdrawn | Email indiheritedge@gmail.com |
| Grievance redressal | Raise a complaint about how your data is handled | Contact our Grievance Officer (below) |
| Nominate a representative | Nominate another individual to exercise rights on your behalf in the event of death or incapacity | Email indiheritedge@gmail.com |
We will respond to all requests within 30 days. In complex cases, we may extend this by an additional 30 days with notice.
Grievance Officer (as required under IT Act, 2000 Intermediary Guidelines):
Name: Privacy & Data Protection Officer
Organisation: indiHeritedge
Address: 176, Vrindavan Colony, Jhotwara, Jaipur, Rajasthan 302012
Email: indiheritedge@gmail.com
Response time: Within 30 days of receipt of complaint
We use cookies and similar technologies to operate and improve our platform. For full details on types of cookies, consent management, and how to opt out, please read our Cookie Policy.
Essential cookies (for login sessions and cart functionality) are necessary for the service to work and cannot be disabled. All other cookies require your consent.
Our platform is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. The DPDP Act, 2023 requires verifiable parental consent before processing data of children under 18.
If you believe a child has provided us with personal data, please contact us at indiheritedge@gmail.com and we will promptly delete that data.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Continued use of our services after the effective date of the revised policy constitutes your acceptance. If you disagree, you may close your account before the effective date.