PRIVACY POLICY

GRIMM DRIPPER — MASTER DIGITAL PRIVACY POLICY.

SECTION II : DIGITAL PRIVACY POLICY M/s GRIMM DRIPPER is highly committed to protecting the integrity, confidentiality, and security of all personal, transaction, and behavioral data collected from users. This Privacy Policy is formulated in precise structural harmony with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 of India.

  1. DATA STAKEHOLDER & MANAGEMENT.

    This document details how personal data is processed, indexed, and guarded by the Data Fiduciary: M/s GRIMM DRIPPER, operating out of Jaipur, Rajasthan, India. By accessing and sharing telemetry on our e-commerce layout, you acknowledge your personal data handling as described herein.

  2. SPECIFIC CATEGORIES OF DATA WE COLLECT.

    We process only the minimum necessary data parameters required to facilitate checkout and fulfill logistics:

    • Identity & Contact Information : Legal name, shipping destination, billing coordinate data, active mobile number, and verified email address.

    • Transaction Records : Items purchased, checkout values, cart abandonment sequences, and return history logs.

    • Technical Infrastructure Logs : IP addresses, device cookies, browser agents, and clicking pathways captured via secure tracking matrices.

    • Communications Data : Text logs from support conversations and authorized voice recordings captured through consent streams.

  3. LAWFUL PURPOSES OF DATA PROCESSING.

    Under the Digital Personal Data Protection Act, 2023, personal data is explicitly processed under lawful grounds for specified business mandates:

    • Order Execution : To accurately route and hand over clothing shipments to automated courier partners.

    • Financial Clearance : To clear invoices, check fraud telemetry, and prevent payment gateway errors.

    • Operational Notifications : To dispatch order status updates, RTO warnings, and tracking codes via automated communication channels.

    • Permitted Marketing : With your explicit opt-in choice, to transmit styling notifications, lookbook releases, and exclusive drop access alerts.

  4. DATA PROTECTION AND RETENTION PERIODS

    All data points are stored within secure, firewalled cloud databases employing Advanced Encryption Standard (AES-256) data encryption at rest and Transport Layer Security (TLS 1.3) encryption mechanisms during transit. We store customer records only for the duration required to satisfy statutory business operations, financial audits, tax obligations, and rules framed thereunder specifically under Indian law, or to resolve historical payment disputes. Once the retention horizon expires, data is scrubbed or completely anonymized via automated script routines.

  5. STRICT POLICIES ON THIRD-PARTY DISCLOSURES.

    GRIMM DRIPPER maintains a strict stance on customer privacy : We never sell, trade, lease, or commercially exploit your personal data to any third-party marketing brokers. Data sharing is limited strictly to trusted technical partners who operate under confidential data processing clauses, including payment gateways, logistics networks, and standard analytical tools used exclusively to trace loading latencies. We preserve the absolute right to disclose personal data matrices if mandated to do so by a formal court order, a police warrant, or authorized government 5. agencies exercising statutory investigative rights under the Information Technology Act, 2000.

  6. YOUR CONSTITUTIONAL RIGHTS AS A DATA PRINCIPAL

    Under the Digital Personal Data Protection Act, 2023, you possess explicit legal entitlements over your information, which can be exercised via written requests to our Grievance Officer:

    • Right to Summary Access : The right to receive a concise report detailing what personal data fields are actively held inside our infrastructure.

    • Right to Rectification : The right to enforce immediate corrections of outdated contact details or inaccurate shipping markers. Right to Erasure: The right to demand 6. complete erasure of your non-transactional personal records from our marketing servers. Right to Consent Withdrawal: The right to formally withdraw consent given for automated promotional messages at any specific instance.