Privacy Policy & Data Protection Notice
Welcome to SRI RAMA CYCLE AND AUTO SPARE PARTS. This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) of India, the Information Technology Act, 2000, and applicable e-commerce guidelines. It outlines how we, as a Data Fiduciary, collect, process, store, and safeguard your digital personal data when you visit our website, register an account, or purchase bicycles and auto spare parts.
Your Consent Matters: By accessing our website, creating an account, or placing an order, you confirm that you have read, understood, and consented to the collection and processing of your personal data as described in this notice. You reserve the right to withdraw your consent at any time.
1. Identity of the Data Fiduciary
Under the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for determining the purpose and means of processing your personal data is:
Business Name: SRI RAMA CYCLE AND AUTO SPARE PARTS
Proprietor: Ravula. Rakesh Kumar
Registered Address: SSS COMPLEX B-3, Mainroad, Kazipet, Hanumakonda (Dist) - 506003, Telangana, India
Support Email: sreeramacycle@gmail.com
Phone / Helpline: +91 95736 53194
2. Categories of Personal Data Collected
We collect only the minimum personal data necessary to provide our cycle store services, fulfill deliveries, and comply with statutory laws:
- Contact & Identity Data: Full name, telephone/mobile number, email address, and delivery/billing address.
- Account Authentication Data: Encrypted password hashes (using industry-standard bcrypt) and account preferences. We never store plain-text passwords.
- Order & Transactional Data: Cycles and spare parts purchased, order dates, payment statuses, GST invoice records, and delivery tracking details.
- Payment Information: Handled securely by RBI-authorized payment aggregator Razorpay. We do not collect or store credit/debit card numbers, CVVs, or UPI PINs on our servers.
- Technical & Usage Data: IP address, device type, browser information, and session cookies used for shopping cart maintenance and security.
3. Purposes for Processing Personal Data
In accordance with Section 4 and Section 6 of the DPDP Act 2023, your personal data is collected and processed solely for specified, explicit, and lawful purposes:
4. Third-Party Service Providers (Data Processors)
We do not sell, rent, or trade your personal information. We only share personal data with trusted third-party Data Processors bound by contractual privacy and security obligations:
5. Data Retention and Deletion Practices
Under Section 8(7) of the DPDP Act 2023, personal data will not be retained longer than necessary to fulfill the specified purpose for which it was collected, or as mandated by law:
- Order and Tax Records: Retained for a minimum of 7 years in accordance with Indian commercial tax, GST, and statutory accounting requirements.
- User Account Information: Maintained until the user requests account deletion, provided there are no active orders or outstanding liabilities.
- Inquiry & Contact Messages: Retained for up to 12 months from resolution to facilitate follow-up customer care.
6. Rights of Data Principals (Your Rights)
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following enforceable rights:
You may request a summary of the personal data processed by us and the identities of data processors involved.
You may request correction of inaccurate or incomplete personal data held in your account.
You may request deletion of personal data when the purpose is fulfilled and legal retention is no longer mandatory.
You have the right to withdraw your consent at any time. Withdrawal does not affect lawful processing conducted prior to withdrawal.
To exercise any of these rights, email your request to sreeramacycle@gmail.com with the subject line "DPDP Data Subject Request".
7. Protection of Children's Personal Data
In adherence to Section 9 of the DPDP Act 2023, we do not knowingly collect or process personal data of children under the age of 18 without verifiable parental or lawful guardian consent. While we sell junior and kids bicycles, all purchases must be made by an adult parent or guardian. We do not track or engage in targeted advertising directed at minors.
8. Technical & Organizational Security Measures
We implement comprehensive security measures in compliance with Section 8(5) of the DPDP Act 2023 to prevent personal data breaches:
9. Grievance Redressal Officer
Statutory requirement under Section 6(2)(c) & Section 13 of DPDP Act 2023
If you have any questions, complaints, or grievances regarding the processing of your personal data or this Privacy Policy, please contact our designated Grievance Officer:
Designated Officer: Ravula. Rakesh Kumar
Entity: SRI RAMA CYCLE AND AUTO SPARE PARTS
Office Address: SSS COMPLEX B-3, Mainroad, Kazipet, Hanumakonda (Dist) - 506003, Telangana, India
Email: sreeramacycle@gmail.com
Phone: +91 95736 53194
Resolution Timeline: Grievances will be acknowledged within 48 hours and resolved within 30 days as stipulated by law.
If you are not satisfied with the resolution provided by our Grievance Officer, you have the right under the DPDP Act, 2023 to appeal to the Data Protection Board of India (DPBI).
10. Changes and Updates to this Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory requirements. Any modifications will be posted on this page with an updated "Last Updated" date. Continued use of our store after changes constitutes acceptance of the updated terms.