Privacy Policy
Last updated
This Privacy Policy explains what personal data ANFRIC collects when you use our website or buy from us, how we use it, who we share it with and the choices you have. It is written with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 in mind.
Who we are
ANFRIC, 12, Snehmilan Society, Chikuwadi Nana Varachha Road Surat - 395006, is the data fiduciary responsible for your personal data. Contact us about privacy at [privacy email].
What we collect
Depending on how you use the site, we collect:
- Account details — name, email address and mobile number; and, only if you choose to share them, your date of birth (for a birthday offer) and gender (to personalise what we show you first).
- Order details — delivery address, items purchased, order history and communications about your order.
- Payment information — handled by our payment gateway partners; we receive a confirmation and reference, never your full card number.
- Device and usage data — IP address, browser, pages viewed and actions taken, collected via cookies and similar technologies.
- Messages you send us — through the contact form, email or chat.
How we use it
We use your data to:
- process and deliver your orders, and handle cancellations, returns and exchanges;
- create and secure your account and verify your identity;
- answer your questions and provide customer support;
- send order and service messages, and — with your consent — marketing you can opt out of at any time;
- send you a birthday offer if you have shared your date of birth;
- understand how the site is used so we can improve it;
- detect and prevent fraud, and meet our legal obligations.
How long we keep it
We keep account and order data for as long as you have an account and thereafter for as long as needed to meet tax, accounting and legal requirements. You can ask us to delete your account at any time; some records may be retained where the law requires.
Your rights
You have the right to:
- access a summary of the personal data we hold about you;
- correct, complete or update your data;
- request erasure of data we no longer need to keep;
- withdraw consent to marketing at any time;
- nominate someone to exercise these rights on your behalf;
- raise a grievance with us, and if unresolved, with the Data Protection Board of India.
Children
The site is not directed at children under 18. We do not knowingly collect their data without verifiable parental consent. If you believe a child has provided us data, contact us and we will remove it.
Security
We use reasonable technical and organisational measures — encryption in transit, access controls and monitoring — to protect your data. No system is completely secure, so please keep your device secure and never share a one-time code with anyone — we will never ask you for one.
Contact and grievances
For privacy questions or to exercise your rights, contact our Grievance Officer: [name], [grievance email], [phone]. We aim to respond within 30 days.
Changes to this policy
We may update this policy as our practices or the law change. Significant changes will be announced on the site. The date at the top shows the latest revision.