Privacy Policy
This policy explains what personal data Ancord Corp collects, why, and what control you have over it. It is written to meet the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, and should be read with Your Data Rights and our Cookie Policy.
For this data, Ancord Corp is the Data Fiduciary and you are the Data Principal.
What we collect and why
| Data | Purpose | Basis |
|---|---|---|
| Name, phone, email, delivery address | Fulfilling and delivering your order, and contacting you about it | Necessary for the contract |
| GSTIN and company name (optional) | Issuing a tax invoice you can claim input credit against | Legal obligation |
| Order, payment and refund records | Payments, refunds, returns, warranty claims, statutory record-keeping | Legal obligation |
| Serial numbers of equipment purchased | Verifying warranty cover | Necessary for the contract |
| Device, browser and usage data | Security, fraud prevention, keeping the site working | Legitimate use |
| Marketing preferences | Product and offer updates | Consent only |
We collect only what the stated purpose requires. We do not collect more in the hope it becomes useful later.
Consent
Where we rely on consent, it is free, specific, informed, unconditional, and given by clear affirmative action. We will never bundle marketing consent into the act of placing an order, and refusing it will never stop you buying. You can withdraw consent at any time, as easily as you gave it.
Who we share data with
Only what a job requires, and only with processors bound to protect it:
- Delivery partners — name, address and phone, so the parcel arrives.
- Payment gateways — handled directly by the gateway. We never see or store your full card number, CVV, UPI PIN or net-banking credentials.
- Manufacturers — serial number and purchase date, where a warranty claim must be routed to them.
- Communication providers — email and SMS delivery for order updates.
- Government authorities — where we are legally required to disclose.
We do not sell your personal data. We do not share it with data brokers or advertising networks.
How long we keep it
Only as long as the purpose requires, or a law requires us to. GST invoices and transaction records are kept for the period prescribed by tax law; warranty records for the life of the warranty. When data becomes due for erasure and you hold an account, we give you at least 48 hours' notice first, so you can prevent erasure by logging in or contacting us.
How we protect it
Encryption in transit (HTTPS), access limited to staff whose role requires it, audit logging of administrative actions, and multi-factor authentication available on staff accounts. No system is perfectly secure, but these are the measures we consider reasonable for the data we hold.
If there is a breach
We notify the Data Protection Board of India as soon as we become aware, and tell affected users within 72 hours — what happened, the likely consequences, what we have done, and what you should do.
Children
Our store is not directed at children. We do not knowingly process data of anyone under 18 without verifiable parental consent, and we do not carry out tracking, behavioural advertising or profiling directed at children.
Your rights
You can access, correct, complete, update and erase your data, nominate someone to act for you, withdraw consent, and raise a grievance. Your Data Rights explains each and how to use it.
Contact
Privacy questions and data requests: privacy@ancordcorp.com. Unresolved complaints go to our Grievance Officer, and then to the Data Protection Board of India.