Privacy Policy

1. Information We Collect

1.1 Personal Information

When you create an account or place an order, we collect:

• Identity Information: Full name, date of birth (if provided)
• Contact Information: Email address, phone number, billing address, shipping address
• Account Credentials: Username, password (encrypted)
• Payment Information: Credit/debit card details (processed securely through payment gateways), UPI ID, bank account details for refunds

1.2 Order Information

When you make a purchase, we collect:

• Products ordered and quantities
• Order history and preferences
• Delivery instructions and special requests
• Payment method and transaction details
• Invoice and receipt information

1.3 Automatically Collected Information

When you visit our website, we automatically collect:

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages viewed, time spent on pages, links clicked, products viewed
• Location Data: Approximate geographic location based on IP address
• Cookies and Tracking: Website preferences, shopping cart contents, session information

1.4 Communication Records

We maintain records of:

• Customer support interactions (email, phone, chat)
• Reviews and ratings you provide
• Survey responses and feedback
• Marketing preferences and communication history

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Personalization

We may use your information to:

• Recommend products based on your browsing and purchase history
• Customize content and offers to match your preferences
• Display relevant advertisements on our website and partner platforms
• Provide location-specific services and delivery options

3. Legal Basis for Processing (GDPR Compliance)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contract with you (order processing, delivery)
• Consent: You have given explicit consent for marketing communications or specific data processing
• Legitimate Interests: Processing necessary for our legitimate business interests (fraud prevention, service improvement)
• Legal Obligation: Processing required to comply with legal and regulatory requirements

4. Information Sharing & Disclosure

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers who help us operate our business:

• Payment Processors: To process your payments securely (Razorpay, PayU, etc.)
• Shipping Partners: To deliver your orders (courier companies, logistics providers)
• Cloud Storage Providers: To securely store data (AWS, Google Cloud, etc.)
• Marketing Platforms: To send emails and SMS (with your consent)
• Analytics Services: To understand website usage (Google Analytics, etc.)
• Customer Support Tools: To manage customer inquiries and support tickets

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the new entity. We will notify you of any such change and ensure your data remains protected.

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms and Conditions
• Protect our rights, property, or safety
• Investigate and prevent fraud or security threats
• Protect the rights and safety of our customers and the public

4.4 We Do NOT Sell Your Data

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your personal information:

• Encryption: SSL/TLS encryption for data transmission, encrypted storage for sensitive data
• Secure Servers: Data stored on secure servers with restricted access
• Access Controls: Role-based access, multi-factor authentication for admin accounts
• Regular Audits: Security assessments and vulnerability testing
• Firewall Protection: Advanced firewall systems to prevent unauthorized access
• Employee Training: Staff trained on data protection and security best practices

5.2 Payment Security

All payment transactions are processed through PCI-DSS compliant payment gateways. We do not store complete credit/debit card information on our servers. Payment data is encrypted and securely transmitted to our payment partners.

5.3 Your Role in Security

You can help protect your account by:

• Using a strong, unique password
• Not sharing your account credentials
• Logging out after each session, especially on shared devices
• Reporting suspicious activity immediately
• Keeping your contact information up to date

6. Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide a better user experience. We use cookies and similar tracking technologies to remember your preferences, analyze website usage, and deliver relevant content.

6.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (shopping cart, login sessions)
• Performance Cookies: Collect information about how you use our website (page views, load times)
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Track your browsing to show relevant advertisements (with your consent)

6.3 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality. Most browsers allow you to:

• View and delete cookies
• Block all cookies
• Allow only first-party cookies
• Get notifications when cookies are set

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 How to Exercise Your Rights

To exercise any of these rights, please contact us at newanbustoresgdy@gmail.com. We will respond to your request within 30 days and may require verification of your identity.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill transactions
• Comply with legal, accounting, or regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records for legitimate purposes

8.1 Retention Periods

After retention periods expire, we securely delete or anonymize your personal information.

9. Children's Privacy

Newanbustore does not knowingly collect personal information from children under the age of 18. Our website and services are intended for adults. If you are under 18, please do not provide any personal information without parental consent.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information immediately. Parents or guardians who believe their child has provided information to us should contact us at newanbustoresgdy@gmail.com.

10. Marketing Communications

10.1 Communication Preferences

With your consent, we may send you:

• Promotional offers and discounts
• New product announcements
• Newsletters and updates
• Personalized recommendations
• Special event notifications

10.2 Opting Out

You can unsubscribe from marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email
• Updating preferences in your account settings
• Replying "STOP" to marketing SMS messages
• Contacting our customer support

11. Third-Party Links

Our website may contain links to third-party websites, social media platforms, or payment gateways. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

When you use payment gateways or social media logins, you may be sharing information with those services according to their own privacy policies.

12. International Data Transfers

Currently, Newanbustore operates within India, and your data is stored on servers located in India. If we expand internationally in the future, we will ensure appropriate safeguards are in place to protect your data during international transfers, in compliance with applicable data protection laws.

13. Account Deletion

You have the right to request deletion of your account at any time. Upon receiving your request:

• We will deactivate your account immediately
• Personal information will be deleted within 30 days
• Some data may be retained for legal compliance (order history, payment records)
• Anonymized data may be retained for analytics purposes

To request account deletion, email us at newanbustoresgdy@gmail.com with "Account Deletion Request" in the subject line.

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or website notification
• Request your consent if required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes indicates acceptance of the updated policy.

15. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Investigate the breach immediately
• Notify affected users within 72 hours of discovery
• Inform relevant authorities as required by law
• Take immediate action to prevent further unauthorized access
• Provide guidance on steps you can take to protect yourself

16. Contact Information for Privacy Concerns

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us: