Last updated 5 October 2026
Privacy Policy
In short
- We collect only what we need to sell and deliver your order and to run your account.
- We never sell your personal data and we do not send marketing messages.
- We don't collect card, bank or Aadhaar details. Payments are Cash on Delivery.
- You can download your data or delete your account at any time from Account → Settings.
1. Who we are
GadgetAura Private Limited (CIN U47912JK2026PTC019519, GSTIN 01AANCG1977G1ZL), Door No. 30407, Ward No. 37, Street No. 208, Janipur, Jammu – 180007, Jammu & Kashmir, India, operates the GadgetAura website and is the Data Fiduciary for the personal data described here under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This policy also serves as our privacy policy under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Personal data we collect
| What | Data | Why |
|---|---|---|
| Account | Name, email address, password (stored only as a secure hash) | To let you sign in, see your orders and save addresses |
| Orders | Name, mobile number, email, delivery address, PIN code, items ordered | To process, invoice, deliver and support your order |
| Saved addresses | Addresses you choose to save | To speed up checkout |
| Reviews | Your rating, review text and account name | To publish your review of a product you received |
| Support | Messages and details you send us | To answer questions and resolve grievances |
| Technical | IP address, browser type, timestamps (server logs); cart and sign-in identifiers kept in your browser | To keep the site secure, prevent fraud and remember your cart |
We do not collect payment card, bank account, UPI PIN, Aadhaar or other government ID details. If a refund needs your bank or UPI details, we will ask for them only at that time, use them only for that refund, and never ask for an OTP, PIN or password.
3. Why we are allowed to use it
We process personal data either with your consent (for example, when you create an account or post a review) or for legitimate uses permitted by Section 7 of the DPDP Act — such as completing an order you have asked for, and complying with laws that require us to keep tax invoices and accounts (for example, the CGST Act, 2017 and the Companies Act, 2013).
You can withdraw consent at any time as easily as you gave it, by deleting your account or writing to us. Withdrawal does not affect processing already carried out, or records we must keep by law.
4. Children
Our services are meant for adults. We do not knowingly create accounts for, or process the personal data of, anyone under 18 without verifiable consent of a parent or lawful guardian, and we do not track, behaviourally monitor or target advertising at children.
6. How long we keep it
| Data | Kept for |
|---|---|
| Account and saved addresses | Until you delete your account |
| Orders and tax invoices | 8 years, as required for GST and company accounts (CGST Act s.36; Companies Act s.128) |
| Grievance and support records | 3 years after the matter is closed |
| Security logs | At least 1 year, as required under the DPDP Rules, 2025 |
When you delete your account, we erase your login and saved addresses and anonymise your reviews. Order and invoice records are detached from your account but retained for the legally required period, after which they are erased.
7. How we protect it
Passwords are stored only as salted bcrypt hashes. Data travels over encrypted HTTPS connections. Access to order data is limited to staff who need it to fulfil orders. Order look-ups require both the order number and the email used to place it.
If a personal data breach occurs, we will inform affected users and the Data Protection Board of India as required by the DPDP Act and Rules.
8. Your rights
- Access — download a summary of your personal data from Account → Settings → Download my data.
- Correction and updating — edit your name, email and addresses in your account, or write to us.
- Erasure — delete your account from Account → Settings (subject to the records we must keep by law).
- Grievance redressal — complain to our Grievance Officer (details below).
- Nomination — nominate another individual to exercise your rights in the event of your death or incapacity, by writing to us.
We respond to requests within one month. Please give accurate information and do not file false or frivolous complaints (DPDP Act, Section 15).
10. Contact and complaints
Grievance Officer: Adarsh Aman, Director & Grievance Officer, GadgetAura Private Limited, Door No. 30407, Ward No. 37, Street No. 208, Janipur, Jammu – 180007, Jammu & Kashmir, India. Email: [email protected]. Phone: +91 88996 22421.
If you are not satisfied with our response, you may complain to the Data Protection Board of India under the DPDP Act.
11. Changes
We will post any changes to this policy on this page with a new date, and tell you about significant changes on the website or by email.