Your Data Rights
This notice sets out your rights as a Data Principal under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (notified 14 November 2025), and how to exercise them. It supplements our Privacy Policy.
Ancord Corp is the Data Fiduciary for this data.
Your rights
- Right to access — a summary of the personal data we process about you, the processing activities involved, and the identities of other Data Fiduciaries and Data Processors we have shared it with.
- Right to correction, completion, updating and erasure — inaccurate or misleading data corrected, incomplete data completed, and data erased where it is no longer needed and no law requires us to keep it.
- Right to grievance redressal — a complaint answered by us before you approach the Data Protection Board.
- Right to nominate — nominate someone to exercise your rights if you die or become incapacitated.
- Right to withdraw consent — at any time, as easily as you gave it. Withdrawal does not affect lawful processing already carried out, nor processing we must continue by law.
Consent
Where we rely on your consent it is free, specific, informed, unconditional and given by clear affirmative action. Marketing consent is never bundled into placing an order, and refusing it never prevents you buying.
Retention and erasure
We keep personal data only as long as the purpose requires or the law demands. Where data becomes due for erasure and you hold an account, we give at least 48 hours' notice first — you can prevent erasure simply by logging in or contacting us.
Some records cannot be erased on request: GST invoices and transaction records are retained for the period prescribed by tax law, and warranty records for the life of the warranty.
If there is a data breach
We notify the Data Protection Board of India as soon as we become aware, and notify you within 72 hours — describing the breach, its likely consequences, the measures taken, and what you can do to protect yourself.
Children's data
Our store is not directed at children. We do not knowingly process the personal data of anyone under 18 without verifiable parental consent, and we do not undertake tracking, behavioural advertising or profiling directed at children.
How to exercise your rights
Write to privacy@ancordcorp.com from the email registered on your account, or include enough detail for us to identify you. We respond within the period prescribed under the DPDP Rules, 2025.
Who to contact
Person able to answer questions about the processing of your personal data: Authorized Signatory
Email: privacy@ancordcorp.com
Address: Ground Floor, 242A, Tagore Town, Prayagraj, Uttar Pradesh 211002
Escalation
If our response does not satisfy you, complain to the Data Protection Board of India.
The DPDP Rules, 2025 phase in over 18 months from notification, with full compliance required by 13 May 2027.