At E-COSMOS (ecosmos.co.in), we are committed to protecting your privacy and personal data. This Privacy Policy describes how E-COSMOS ("we," "us," or "our") collects, uses, processes, discloses, and protects your personal data when you visit and use our website, ecosmos.co.in, and interact with our services.

By accessing or using our Website, you signify your agreement to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our Website.

1. Data We Collect

We collect various types of information from and about users of our Website, including personal data, which means any data that relates to an identified or identifiable individual.

1.1. Information You Provide to Us:

• Account Registration Data: When you create an account, we collect your name, email address, phone number, and password.
• Order & Purchase Data: When you make a purchase, we collect your name, billing address, shipping address, phone number, email address, and payment information (e.g., credit/debit card details, UPI ID, net banking details). Please note that we do not store your full payment card details; they are securely processed by our third-party payment gateway partners.
• Communication Data: Information you provide when you contact our customer support (e.g., through email, chat, or phone), participate in surveys, or subscribe to our newsletters/marketing communications. This may include your queries, feedback, and communication history.
• User Generated Content: If you submit product reviews, ratings, or other content to the Website, this information will be collected.

1.2. Information We Collect Automatically:

• Device & Usage Data: We automatically collect certain information about your device and how you interact with our Website, including your IP address, browser type, operating system, unique device identifiers, referring URLs, pages viewed, time spent on pages, clickstream data, and dates/times of access.
• Location Data: We may collect general location information (e.g., city/state) based on your IP address for purposes like serviceability checks and personalized content.
• Cookies & Tracking Technologies: We use cookies and similar tracking technologies (like pixels and web beacons) to collect information about your Browse behavior and preferences. Please refer to Section 7 for more details.

2. Purpose and Lawful Basis for Data Collection

We collect and process your personal data for the following purposes and on the following lawful bases:

• To Provide and Manage Our Services (Contractual Obligation):

1. Processing your orders and transactions.
2. Shipping and delivering your products.
3. Managing your user account.
4. Providing customer support and responding to your inquiries.
5. Notifying you about your order status (dispatch, delivery updates).
   

• To Improve User Experience and Website Functionality (Legitimate Interest):
  

1. Personalizing your shopping experience (e.g., showing relevant products).
2. Analyzing Website usage and trends to enhance our services.
3. Troubleshooting and improving the performance and security of our Website.

• For Marketing and Promotional Communications (Consent):

1. Sending you newsletters, promotional offers, and updates about new products, discounts, and events. You can opt-out of these communications at any time.

• For Legal and Regulatory Compliance (Legal Obligation):

1. Complying with applicable Indian laws, regulations, and legal processes (e.g., Consumer Protection Act, IT Act, GST laws, DPDP Act).
2. Preventing and detecting fraud, unauthorized access, and other illegal activities.
3. Enforcing our Terms & Conditions and other policies.

• For Business Operations (Legitimate Interest):

1. Conducting internal audits and data analysis.
2. Managing and expanding our business operations.

3. Consent

By providing your personal data and using our Website, you explicitly consent to the collection, use, processing, storage, and disclosure of your personal data as described in this Privacy Policy, in accordance with the provisions of the Digital Personal Data Protection Act, 2023, and other applicable Indian laws.

You have the right to withdraw your consent at any time for certain data processing activities, particularly for marketing communications. To withdraw consent, please contact our Grievance Officer (details below) or use the unsubscribe option in our emails. Withdrawal of consent may affect your ability to use certain features of our Website or receive specific services.

4. Data Sharing and Disclosure

We may share your personal data with the following categories of third parties only to the extent necessary for the purposes outlined in this Privacy Policy:

• Service Providers: We engage trusted third-party service providers who perform functions on our behalf, such as:

1. Payment Gateways: For secure processing of your payments.
2. Shipping & Logistics Partners: For delivery of your orders (e.g., names, addresses, phone numbers).
3. Customer Support Providers: For managing customer inquiries and communication.
4. Marketing & Analytics Partners: For website analytics, targeted advertising, and marketing campaign management. These partners are typically provided with aggregated or anonymized data where possible.
5. IT & Cloud Hosting Providers: For website infrastructure and data storage.

• Legal Compliance & Protection: We may disclose your data if required by law, court order, or governmental regulation, or if we believe such action is necessary to:

1. Comply with a legal obligation.
2. Protect and defend the rights or property of E-COSMOS.
3. Prevent or investigate possible wrongdoing in connection with the Website.
4. Protect the personal safety of users of the Website or the public.
   

• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on our Website of any such change in ownership or control of your personal data.
• With Your Consent: We may share your information with other third parties with your explicit consent.

We do not sell, rent, or trade your personal data to third parties for their independent marketing purposes.

5. Data Security

We implement reasonable and appropriate technical, administrative, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: Using Secure Socket Layer (SSL) technology for data transmission on our Website.
• Access Controls: Restricting access to personal data to authorized employees and service providers on a need-to-know basis.
• Secure Payment Processing: Partnering with PCI DSS compliant payment gateways.
• Regular Security Audits: Conducting periodic reviews of our security practices.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

• Account Data: Retained as long as your account is active and for a reasonable period thereafter to facilitate re-activation or for legal obligations.
• Transaction Data: Retained for the period required by Indian tax and financial laws (e.g., GST records, typically 7 years).
• Marketing Data: Retained until you unsubscribe or withdraw your consent.
• Customer Service Records: Retained for a period to resolve disputes, provide historical service, and improve support.

When your personal data is no longer required, we will securely delete or anonymize it.

7. Cookies and Other Tracking Technologies

We use cookies and similar technologies (e.g., pixels, web beacons) to:

• Operate and secure our Website: Essential cookies enable core functionality.
• Improve your Browse experience: Remember your preferences, login details, and shopping cart items.
• Analyze Website traffic and usage: Understand how visitors interact with our Website to improve design and content.
• Deliver relevant advertisements: Show you products and offers tailored to your interests (if consented).

You can control the use of cookies through your browser settings. Most browsers allow you to block or delete cookies. However, if you disable cookies, some features of our Website may not function properly.

8. Your Rights as a Data Principal (under DPDP Act, 2023)

As a data principal, you have certain rights regarding your personal data held by E-COSMOS:

• Right to Access: You have the right to obtain confirmation from us as to whether or not your personal data is being processed, and to access such personal data and related information.
• Right to Correction/Erasure: You have the right to request the correction of inaccurate or incomplete personal data. You also have the right to request the erasure (deletion) of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (subject to legal obligations).
• Right to Grievance Redressal: You have the right to approach our Grievance Officer for any privacy-related concerns or complaints.
• Right to Nominate: You have the right to nominate another individual who shall exercise your rights under the DPDP Act in the event of your death or incapacity.

To exercise any of these rights, please contact our Grievance Officer using the contact details provided below. We will respond to your request within a reasonable timeframe and as required by law. We may require you to verify your identity before processing your request.

9. Children's Privacy

Our Website is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information as quickly as possible. If you believe we might have any information from or about a child, please contact us.

10. Links to Third-Party Websites

Our Website may contain links to third-party websites that are not operated by us. This Privacy Policy applies only to ecosmos.co.in. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

E-COSMOS reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Website after any changes to this Privacy Policy will constitute your acceptance of such changes.

12. Contact Information & Grievance Redressal

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, or if you wish to exercise your rights as a Data Principal, please contact our Grievance Officer:

Grievance Officer Name: Akshat Maniyar

Grievance Officer Email: grievance.officer@ecosmos.co.in

Postal Address: 1st floor,20, 7-A-1,, JAGMOHANDAS MANSION, AVANTIKABAI GOKHLE MARG, OPERA HOUSE, MUMBAI, Mumbai Suburban, Maharashtra, 400004

We are committed to resolving any complaints about our collection or use of your personal data. Please contact our Grievance Officer in the first instance to resolve your grievance.