Privacy Policy

1. Who we are (the Data Fiduciary)

Super Shopy (“we”, “us”, “our”) operates this website and the Super Shopy home-textiles brand. For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary who determines the purpose and means of processing your personal data. You are the Data Principal.

• Business: Super Shopy
• Address: Delhi-NCR,India
• Email: sales@supershopy.in
• Phone / WhatsApp: +91 810014517

This policy applies to personal data in digital form that we collect through this website, our email address and our WhatsApp business number. It does not apply to third-party websites we may link to.

2. What personal data we collect, and why

We follow the data-minimisation principle in Section 6(1) of the DPDP Act — we ask only for the data we actually need to answer your enquiry. This is a static brochure website: there are no accounts, logins, payments or online checkout, and we do not build advertising profiles.

We do not knowingly collect sensitive information, and we ask you not to send financial details, government ID numbers, health information or passwords through the enquiry form.

3. Cookies, analytics and tracking

This website is fully static. We do not set advertising cookies, we do not run behavioural tracking or re-targeting pixels, and we do not sell or share data with data brokers. Fonts are served from our own build output.

Our hosting provider may keep short-lived technical server logs (such as IP address, browser type and the page requested) for security and reliability. These logs are not used to identify or profile you.

4. Your consent — and how to withdraw it

We process your personal data on the basis of your consent under Section 6 of the DPDP Act. Before you submit the enquiry form you must tick a consent box. That tick is your free, specific, informed, unconditional and unambiguous consent, given by a clear affirmative action and limited to the purposes described in this policy. The box is never pre-ticked, and the form will not submit without it.

Where you contact us first — by calling us or messaging our WhatsApp number — we may also process your data as a “certain legitimate use” under Section 7(a) of the DPDP Act, for the specified purpose for which you approached us.

You may withdraw your consent at any time, and withdrawing it is as easy as giving it: email sales@supershopy.in with the subject line “Withdraw Consent”. On withdrawal we will stop processing your data and erase it within a reasonable period, unless a law requires us to retain it. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

5. Who we share your data with (Data Processors)

We do not sell, rent or trade your personal data. We share it only with service providers who process it on our behalf, under contract and on our instructions, as permitted by Section 8(2) of the DPDP Act:

• Email delivery provider (EmailJS) — transmits your enquiry from the website form to our business inbox.
• Our email provider — stores and displays the enquiry we receive.
• WhatsApp (Meta) — only if you choose to start a WhatsApp chat using the links on this site. That conversation is governed by WhatsApp’s own privacy policy.
• Our static website hosting provider — serves the pages of this website.
• Professional advisers or authorities — only where disclosure is required by law, a court order or a lawful request from a government agency.

6. Transfer of data outside India

Some of the service providers listed above operate servers outside India. Where your personal data is transferred outside India, we do so in accordance with Section 16 of the DPDP Act, and we do not transfer data to any country or territory that the Central Government has restricted by notification.

7. How we protect your data

As required by Section 8(5) of the DPDP Act, we take reasonable security safeguards to prevent a personal data breach. These include serving this website over HTTPS, restricting access to enquiry data to the few staff who need it, using password-protected business accounts, and reviewing who has access.

If a personal data breach affecting your data occurs, we will notify you and the Data Protection Board of India in the form and manner prescribed under Section 8(6) of the DPDP Act.

8. Retention and erasure

We keep your personal data only for as long as it is needed for the purpose you gave it for. In line with Section 8(7) of the DPDP Act, we erase your personal data — and ask our processors to erase it — once you withdraw your consent, or once it is reasonable to assume the purpose is no longer being served, whichever is earlier, unless retention is necessary to comply with a law.

9. Your rights as a Data Principal

Chapter III of the DPDP Act gives you the following rights. You can exercise any of them free of charge by emailing sales@supershopy.in, and we will respond within 30 days.

• Right to access information (Section 11) — a summary of the personal data we hold about you, how we are processing it, and the identities of the other Data Fiduciaries and processors we have shared it with.
• Right to correction and erasure (Section 12) — have inaccurate or misleading data corrected, incomplete data completed, data updated, or your data erased where it is no longer needed for the purpose it was collected for.
• Right of grievance redressal (Section 13) — complain to us directly about how we handle your data or how we respond to your requests, before approaching the Data Protection Board.
• Right to nominate (Section 14) — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To protect your data we may need to verify your identity before acting on a request — for example, by confirming the phone number used in the original enquiry.

10. Your duties as a Data Principal

Section 15 of the DPDP Act also places duties on you. In summary: do not impersonate another person when giving personal data, do not suppress material information or supply false particulars, do not register a false or frivolous grievance or complaint, and furnish only authentic information when asking us to correct or erase data.

11. Children and persons with a guardian

Our website and enquiry form are meant for adults buying for a household or a business. We do not knowingly collect the personal data of a child (an individual under 18 years of age). As required by Section 9 of the DPDP Act, we do not undertake tracking, behavioural monitoring or targeted advertising directed at children, and we will not process a child’s data in a way likely to cause any detrimental effect on their well-being.

If a child wishes to enquire, a parent or lawful guardian must do so on their behalf, which constitutes the verifiable consent the law requires. The same applies to a person with a disability who has a lawful guardian. If you believe a child has given us personal data without such consent, write to sales@supershopy.in and we will erase it.

12. Grievance redressal and how to complain

If you have a question about this policy, want to exercise a right, or are unhappy with how we have handled your personal data, contact our Grievance Officer:

• Grievance Officer, Super Shopy
• Email: sales@supershopy.in
• Phone: +91 810014517
• Address: Delhi-NCR,India
• We aim to respond within 30 days.

If we do not resolve your grievance to your satisfaction, you have the right to complain to the Data Protection Board of India, established under the DPDP Act, in the manner it prescribes. Section 13(3) of the Act requires you to exhaust the grievance process with us first.

13. Language of this notice

This notice is published in English. As provided under Section 5(3) of the DPDP Act, you may request a copy in Hindi or in any other language listed in the Eighth Schedule to the Constitution of India by writing to sales@supershopy.in.

14. Changes to this policy

We may update this policy as our business or the law changes. The revised version will be posted on this page with a new “Last updated” date. Where a change materially affects how we use data you have already given us, we will ask for fresh consent.