Privacy Policy & Data Principal Rights
Plain-language disclosure explaining what personal data Anushree Sales & Services collects, why we collect it, how we secure it, and how you can exercise your rights or withdraw consent.
Effective & Reviewed: 12 November 2026 (aligned ahead of 13 May 2027 full DPDP Rules enforcement)
Data Fiduciary Identity & Grievance Contact
Anushree Sales & Services, Shop LG-13, B-Wing, B R Jindal Super Market, Bhagwan Mahavir Square, Alankar Road (M G Road), Jalna 431203, Maharashtra, India. Phone / WhatsApp Grievance Desk: +91 94202 24818.
Your Current Cookie & Pixel Consent
Itemized Personal Data & Retention Schedule (DPDP Rule 3)
| Website Touchpoint | Personal Data Collected | Specified Purpose | Retention & Lawful Basis |
|---|---|---|---|
| Account Sign-Up & Auth (/auth) | Full name, email, optional phone, encrypted password hash, role | User authentication, order history access, and admin authorization | Until account deletion request or inactivity purge; Consent |
| Repair & Contact Scheduler (/#booking) | Name, optional phone, device type, issue summary, preferred timeslot | Scheduling walk-in or onsite tech support & WhatsApp handover | 90 days post-service completion unless converted to invoice; Consent |
| E-Commerce Checkout (Cart & Orders) | Customer name, email, phone, ordered items, INR total, pickup/delivery mode | Order fulfillment, warranty tracking, and GST tax invoicing | 8 years for statutory GST/accounting records; Consent & Legal Obligation |
| Analytics & Ad Pixels (Optional) | Page views, device/browser headers, referral tags, ad conversion events | Measuring storefront usability and advertising campaign ROI | Disabled by default; activated only upon explicit opt-in & cleared on withdrawal |
1. Free, Specific, Unbundled Consent & Zero Dark Patterns
In compliance with Sections 5 and 6 of the Digital Personal Data Protection (DPDP) Act, 2023, Rule 3 of the DPDP Rules, 2025, and the Central Consumer Protection Authority (CCPA) Guidelines for Prevention and Regulation of Dark Patterns, 2023:
- No pre-ticked checkboxes: All consent boxes on Sign-Up, Contact, Checkout, and Cookie Preferences start unchecked.
- No bundled consent: Essential service delivery is separated from optional promotional WhatsApp/email updates and optional ad pixels.
- Equal-choice UI: Rejecting non-essential cookies and pixels is as prominent and one-click simple as accepting them—with zero confirmshaming or hidden menus.
- Effortless withdrawal: Under DPDP Section 6(4), withdrawing consent is as easy as giving it using the button above or the persistent Footer link.
2. Your Rights as a Data Principal (DPDP Act 2023)
Every customer and visitor has the following statutory rights regarding personal data held by Anushree Sales & Services:
- Right to Access Information (Section 11): Request a clear summary of your personal data, processing activities, and third-party processors.
- Right to Correction, Completion & Erasure (Section 12): Update inaccurate details or request deletion of your profile and inquiry data (except records we must retain for GST/tax or statutory compliance).
- Right of Grievance Redressal (Section 13): Submit any privacy complaint via our Grievance Desk below; if unresolved, you may escalate to the Data Protection Board of India (DPBI).
- Right to Nominate (Section 14): Nominate another individual to exercise your DPDP rights in the event of death or incapacity.
3. Security Safeguards, Processors & CERT-In Alignment
We implement reasonable technical and organizational safeguards aligned with DPDP Rule 6 and the Indian Computer Emergency Response Team (CERT-In) Directions:
- Infrastructure & Storage: Hosted on TLS-encrypted connections with Supabase Postgres, Auth, and Storage located in the ap-south-1 (Mumbai, India) region protected by Row Level Security (RLS).
- CERT-In Log & Incident Readiness: Relevant system, authentication, and security event logs are maintained securely for at least 180 days (in accordance with CERT-In Directions of 28 April 2022 where applicable), and any reportable cybersecurity or personal data breach is escalated promptly to CERT-In, the Data Protection Board of India, and affected users as mandated.
- Third-Party Transfers: When you click a 'Send on WhatsApp' button, your pre-filled inquiry transfers at your explicit direction to WhatsApp (+91 94202 24818). Embedded Google Maps on the Location section loads only on interaction/scroll.
4. Children's Personal Data (Under 18 Years)
Protecting minors online is mandatory under Section 9 of the DPDP Act, 2023:
- Online store accounts and e-commerce checkouts are intended for individuals aged 18 years or older.
- We do not knowingly engage in behavioral tracking, profiling, or targeted ad-pixel serving directed at minors.
- If a parent or guardian believes a minor has submitted personal data without verifiable parental consent, please submit an Erasure request below for prompt removal.
Exercise Data Principal Rights or File a Grievance
Use this form to request a data summary, update or delete your account, withdraw service consent, nominate a representative, or contact our Grievance Officer.