Your Data Rights
This notice sets out your rights as a Data Principal under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (notified 14 November 2025), and how to exercise them. It supplements our Privacy Policy.
Ancord Corp is the Data Fiduciary for the personal data described below.
What we collect and why
We collect only what a specified, lawful purpose requires:
| Data | Purpose |
|---|---|
| Name, phone number, email, delivery address | Fulfilling and delivering your order, and contacting you about it |
| GSTIN and company name (optional) | Issuing a GST tax invoice you can claim input credit against |
| Order and payment records | Processing payments, refunds, returns and warranty claims |
| Serial numbers of equipment purchased | Verifying warranty cover |
| Device and usage data | Security, fraud prevention and keeping the site working |
| Marketing preferences | Sending updates only where you have consented |
Consent
Where we rely on your consent, that consent is free, specific, informed, unconditional and given by clear affirmative action. We will never bundle marketing consent into the act of placing an order, and refusing it will never prevent you from buying.
Your rights
- Right to access — obtain a summary of the personal data we process about you, the processing activities involved, and the identities of any other Data Fiduciaries and Data Processors we have shared it with.
- Right to correction, completion, updating and erasure — have inaccurate or misleading data corrected, incomplete data completed, and data erased where it is no longer needed for the purpose it was collected for and we are not legally required to keep it.
- Right to grievance redressal — have a complaint answered by us before approaching the Data Protection Board of India.
- Right to nominate — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent — withdraw consent at any time, and as easily as you gave it. Withdrawal does not affect processing already carried out lawfully before withdrawal, nor processing we are required by law to continue.
Retention and erasure
We keep personal data only as long as the purpose requires, or as long as a law requires us to. Where data becomes due for erasure and we hold an account for you, we will give you at least 48 hours' notice before erasing it, so you can prevent erasure simply by logging in or contacting us.
Some records cannot be erased on request: GST invoices and related transaction records are retained for the period prescribed by tax law, and warranty records for the duration of the applicable warranty.
If there is a data breach
If a personal data breach affects your data, we will notify the Data Protection Board of India as soon as we become aware of it, and notify you — describing the breach, its likely consequences, the measures we have taken, and what you can do to protect yourself — within 72 hours.
Children's data
Our store is not directed at children. We do not knowingly process the personal data of anyone under 18 without verifiable parental consent, and we do not undertake tracking, behavioural advertising or profiling directed at children.
How to exercise your rights
Write to privacy@ancordcorp.com from the email address registered on your account, or include enough detail for us to identify you. We will respond within the period prescribed under the DPDP Rules, 2025.
Who to contact
Person able to answer questions about the processing of your personal data: [[DPO_NAME]]
Email: privacy@ancordcorp.com
Address: [[REGISTERED_ADDRESS]]
Escalation
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Last reviewed: [[LAST_REVIEWED_DATE]]. The DPDP Rules, 2025 phase in over 18 months from notification, with full compliance required by 13 May 2027.