Privacy Policy

1. Introduction

Welcome to Brandorithm ("Company", "we", "us", or "our"). We are committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website brandorithm.com or use our services.

This policy is compliant with the Information Technology Act, 2000 and the IT (Amendment) Act, 2008 of India, as well as internationally recognized best practices including the GDPR framework.

By using our website or purchasing our products/services, you consent to the terms of this Privacy Policy.

2. Information We Collect

We may collect the following categories of personal data:

• Identity Data: Full name, username, or similar identifiers provided during sign-up or checkout.
• Contact Data: Email address, phone number, billing address.
• Financial Data: Payment details processed securely through Razorpay. We do not store card numbers or CVVs on our servers.
• Technical Data: IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referring URLs.
• Account Data: Purchases, order history, download records, coupon usage, and communication preferences.
• Usage Data: Information about how you interact with our website, including search queries, clicks, and product views.
• Communications Data: Messages sent through our contact form, support tickets, or email correspondence.

3. How We Collect Your Data

• Direct Interactions: When you register an account, place an order, fill out a contact form, subscribe to newsletters, or communicate with us.
• Automated Technologies: As you navigate our website, we use cookies, server logs, and analytics tools (including Google Analytics and Firebase) to automatically collect technical and usage data.
• Third Parties: We may receive data about you from payment processors (Razorpay), authentication providers (Firebase/Google), and analytics platforms.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand user preferences.

• Essential Cookies: Required for the website to function properly (e.g., authentication tokens, session management).
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics, Firebase Analytics).
• Preference Cookies: Remember your settings and preferences to personalize your experience.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

5. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account and authenticate your identity.
• To process transactions and fulfil orders for digital products and services.
• To communicate with you about your orders, support requests, and account activity.
• To send promotional emails and newsletters (only with your explicit consent).
• To improve our website, products, and services through analytics and user feedback.
• To detect and prevent fraud, unauthorized access, and other illegal activities.
• To comply with legal obligations under Indian law and other applicable regulations.

6. Data Sharing & Third Parties

We do not sell, trade, or rent your personal data. We may share your information only with:

• Razorpay: For secure payment processing. Razorpay's Privacy Policy governs data shared with them.
• Google Firebase: For authentication, real-time database, and analytics services.
• Email Service Providers: To send transactional and marketing emails.
• Legal Authorities: When required by law, court order, or government regulation in India.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred to the acquiring entity.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law. Specifically:

• Account data is retained while your account is active and for up to 3 years after account deletion.
• Transaction and order records are retained for 7 years for financial and tax compliance purposes.
• Analytics data may be retained for up to 26 months in anonymized form.

8. Data Security

We implement industry-standard security measures to protect your personal data:

• All data transmission is encrypted using SSL/TLS (HTTPS).
• Passwords are stored using strong, one-way hashing algorithms (bcrypt).
• Access to personal data is restricted to authorized personnel only.
• Payment data is handled exclusively by PCI-DSS compliant partners (Razorpay).

Despite our best efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we promptly investigate and notify you of any data breaches that may affect your rights.

9. Your Rights

Under applicable law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Right to Opt-Out: Unsubscribe from marketing communications at any time via the unsubscribe link in emails.
• Right to Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, contact us at support@brandorithm.com. We will respond within 30 days.

10. Children's Privacy

Our services are not directed to children under the age of 13 years. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a prominent notice on our website or sending an email to registered users. Continued use of our services after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our Data Protection Officer:

• Email: support@brandorithm.com
• Address: Brandorithm, 123 Tech Park, Sector V, Salt Lake, Kolkata – 700091, West Bengal, India