Introduction
Sri Ambal Fabrication ("we", "our", or "us") is committed to protecting the privacy and personal data of our customers. This Privacy Policy explains what information we collect, how we use it, where it is stored, your rights regarding your data, and how you can contact us.
This policy is in compliance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA) of India.
Information We Collect
We collect personal data only for lawful purposes. The information we collect includes:
- Identity data: Full name
- Contact data: Email address, phone number
- Delivery data: Postal address, city, state, pincode
- Transaction data: Orders placed, products purchased, payment status
- Communication data: Messages and inquiries sent via our contact form
- Account data: Login credentials (password stored as a secure hash — we never store your plain-text password)
We do not collect sensitive personal data such as financial card numbers, Aadhaar, PAN, or government IDs. Payment card data is handled entirely by Razorpay and never passes through our servers.
Where Your Data Is Stored
All personal data collected through this website is stored on secure cloud servers hosted by Contabo (contabo.com), a global cloud infrastructure provider. Our server is located in the United States. This means your personal data is stored outside India and is subject to US data protection laws in addition to Indian law. By using this website and placing orders, you consent to your personal data being transferred to and stored on servers outside India, as permitted under the Digital Personal Data Protection Act, 2023 (DPDPA).
Payment transaction data is processed and stored by Razorpay Software Private Limited, a PCI-DSS compliant Indian payment gateway regulated by the Reserve Bank of India (RBI). We store only the payment status and Razorpay transaction reference — not your card or UPI details.
How We Use Your Information
We use your personal data strictly for the following purposes:
- To process and fulfill your orders and communicate order updates
- To manage your customer account
- To respond to your inquiries and provide customer support
- To send transactional messages (order confirmations, shipping updates)
- To comply with legal and regulatory obligations
We do not use your data for automated profiling, sell it to third parties, or use it for unsolicited marketing without your explicit consent.
Data Sharing
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
- Payment processing: Order amount and contact details are shared with Razorpay solely to complete your payment.
- Logistics: Delivery address and contact number may be shared with our delivery partners to fulfil your order.
- Legal requirement: If required by a court order, government authority, or applicable Indian law.
Data Retention
We retain your personal data only for as long as necessary:
- Order records — retained for 7 years as required under Indian accounting and GST regulations.
- Customer account data — retained while your account is active. If you request account deletion, your profile data will be removed within 30 days (order records may be retained for legal compliance as above).
- Contact/inquiry messages — retained for 1 year, then deleted.
Your Rights (Under DPDPA 2023)
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to Access: Request a summary of the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete personal data. You can update most details directly from your account dashboard.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data. We will process your request within 30 days, subject to any legal retention obligations (e.g., GST records).
- Right to Grievance Redressal: Lodge a complaint if you believe your data rights have been violated.
How to Request Data Deletion
To request deletion of your personal data, send an email to:
Email: sriambalfab@gmail.com
Subject: Data Deletion Request — [Your Registered Email / Order Number]
Please include your registered email address and/or order number so we can identify your account. We will acknowledge your request within 3 business days and complete the deletion within 30 days. You will receive a confirmation once your data has been removed.
Note: Order records required under GST/tax law will be retained for the mandatory period but will not be used for any other purpose.
Security Measures
We implement the following security practices to protect your personal data:
- Passwords are stored as one-way bcrypt hashes — even we cannot read them.
- The website is served over HTTPS (SSL/TLS encryption) to protect data in transit.
- Admin access is protected with separate authentication and restricted to authorised personnel only.
- Payment data is handled by Razorpay under PCI-DSS Level 1 compliance.
Cookies
We use a session cookie to maintain your login state and shopping cart across pages. This cookie is temporary and is deleted when you close your browser or log out. We do not use advertising cookies or third-party tracking cookies.
Legal Compliance
This Privacy Policy is governed by and compliant with:
- Information Technology Act, 2000 (India)
- IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011
- Digital Personal Data Protection Act, 2023 (DPDPA)
- Consumer Protection (E-Commerce) Rules, 2020
Any disputes relating to this Privacy Policy shall be subject to the jurisdiction of courts in Coimbatore, Tamil Nadu, India.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy. For significant changes, we will notify registered customers by email.
Contact & Grievance Officer
For any privacy-related questions, requests, or complaints, please contact us:
Sri Ambal Fabrication
Shri Venkateswara Complex adjacent, 3/31-13, Near 4th Cross Road,
Athipalayam, Coimbatore - 641110, Tamil Nadu, India
Email: sriambalfab@gmail.com
Phone: +91 7397 358 910
Response time: Within 3 business days