Template policy — review with your legal advisor before launch.
This policy explains how RenewByte ("we", "us", "our") handles personal data when you visit our website, create an account, place an order or contact us. We process personal data in accordance with applicable Indian law, including the Information Technology Act, 2000, its rules, and the Digital Personal Data Protection Act, 2023 as it comes into force.
Information we collect
Information you give us
- Account and order details: name, email address, phone number, billing and shipping addresses, and order history.
- Communications: messages you send through our contact form, email, phone or WhatsApp, and details you provide in trade-in or warranty requests.
- Newsletter: your email address if you subscribe.
- Reviews: any product review you choose to submit.
Information collected automatically
- Device and usage data: IP address, browser type, device type, pages visited, and referring website.
- Cookies and similar technologies: see Cookies below.
Payment information
Payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Your card, UPI, net banking or wallet details are entered on Razorpay's secure checkout and are not stored on our servers. We receive only limited information needed to confirm your payment, such as the transaction ID, payment status and payment method type. Razorpay's own privacy policy governs how it processes your payment data.
How we use your information
We use personal data to:
- Process and deliver your orders, including sharing your name, phone number and address with courier partners.
- Provide customer support, warranty service and returns.
- Send order confirmations, shipping updates and service messages.
- Send marketing emails, only if you've subscribed — you can unsubscribe at any time.
- Prevent fraud, abuse and security incidents, including rate-limiting and verifying payments.
- Understand how our website is used so we can improve it.
- Comply with legal, tax and accounting obligations.
Sharing your information
We do not sell your personal data. We share it only with:
- Payment processor (Razorpay) to take payments and issue refunds.
- Courier and logistics partners to deliver and collect orders.
- Service providers who help us run the business — for example hosting, email delivery and analytics — under contractual obligations to protect your data.
- Authorities, where required by law or to protect our rights, customers or the public.
Cookies
We use cookies and similar technologies to:
- Keep the site working — for example, remembering your cart and keeping you signed in. These are essential.
- Measure usage — analytics tools such as Google Analytics help us understand which pages are useful.
- Marketing — where enabled, advertising tools such as the Meta Pixel help us measure the effectiveness of ads.
You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site, such as the cart and checkout, from working.
Analytics
Analytics data is used in aggregate to understand how visitors use our site. We configure analytics tools to avoid collecting information that directly identifies you where possible.
Data retention
We keep personal data only as long as necessary:
- Order and invoice records: for the period required by tax and accounting law.
- Account data: while your account is active, and for a limited period afterwards.
- Support and warranty messages: for the length of the warranty and a reasonable period after.
- Newsletter: until you unsubscribe.
When data is no longer needed, we delete or anonymise it.
Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, restricted staff access and payment verification on our servers. No system is completely secure, so please use a strong, unique password and keep it private.
Your rights
Subject to applicable law, you can:
- Access the personal data we hold about you.
- Correct or update inaccurate data.
- Ask us to delete your data, subject to legal retention requirements.
- Withdraw consent for marketing at any time.
- Nominate another person to exercise your rights in case of death or incapacity, where the law provides for it.
- Raise a grievance with us, and escalate it to the relevant authority if it isn't resolved.
To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request.
Children
Our website is not intended for children under 18. Purchases by minors should be made by a parent or guardian.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page shows when it last changed.
Contact and grievance officer
For privacy questions, requests or complaints, please contact us through our contact page or at the support email listed there, with the subject "Privacy request". Our Grievance Officer will acknowledge your request and respond within the timelines required by law.