Privacy Policy
Last Updated: March 29, 2025
At HEMKESH GROUP, we are committed to protecting your privacy and complying with the Digital Personal Data Protection (DPDP) Act, 2023.
1. Introduction
Welcome to HEMKESH GROUP ("we," "our," "us"). We are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a purchase, or interact with our services.
This Privacy Policy is designed to comply with the Digital Personal Data Protection (DPDP) Act, 2023 of India, as well as other applicable data protection laws. We encourage you to read this policy carefully to understand our practices regarding your personal data.
Legal Compliance: This policy is compliant with the DPDP Act, 2023, which establishes the framework for processing digital personal data in India, ensuring your rights as a data principal are protected.
2. Definitions
Data Principal:
The individual to whom the personal data relates.
Data Fiduciary:
HEMKESH GROUP - the entity that determines the purpose and means of processing personal data.
Personal Data:
Any information about an individual who can be identified directly or indirectly, including name, email, phone number, address, payment details, and browsing behavior.
Processing:
Any operation performed on personal data, including collection, storage, use, sharing, and deletion.
Consent:
A clear, affirmative action signifying agreement to the processing of personal data for specified purposes.
3. Personal Data We Collect
We collect the following categories of personal data:
Account Information
- Full name
- Email address
- Phone number
- Password (encrypted)
Order Information
- Shipping address
- Billing address
- Payment details (processed securely)
- Order history
Communication Data
- Contact form submissions
- Email correspondence
- Chat messages
- Customer support inquiries
Technical Data
- IP address
- Browser type and version
- Device information
- Cookies and usage data
4. Purpose of Collection
We collect and process your personal data for the following purposes:
- To process and fulfill your orders
- To manage your account and provide customer support
- To communicate with you about orders, products, and services
- To send marketing communications (with your consent)
- To improve our website, products, and services
- To detect and prevent fraud or security incidents
- To comply with legal obligations under Indian law, including the DPDP Act
- To enforce our terms of service and other policies
5. Legal Basis for Processing
Under the DPDP Act, 2023, we process your personal data based on:
- Consent: Where you have given explicit consent for specific purposes (e.g., marketing communications)
- Contractual Necessity: To fulfill our contract with you (e.g., processing orders)
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interests: For purposes such as fraud prevention, security, and improving our services
6. Consent Management
We obtain your consent before processing your personal data for purposes that require consent. You have the right to:
- Withdraw your consent at any time
- Refuse to provide consent without affecting the core services
- Receive clear information about the consequences of withdrawal
To withdraw consent, contact us at privacy@hemkeshgroup.in or use the unsubscribe link in marketing emails.
7. Data Sharing & Disclosure
We may share your personal data with:
- Service Providers: Payment processors, shipping partners, IT services, and marketing platforms
- Government Authorities: When required by law or to comply with legal obligations
- Business Transfers: In case of merger, acquisition, or sale of assets
We ensure that all third-party service providers comply with applicable data protection laws and enter into data processing agreements that protect your data.
8. Data Security Measures
We implement robust security measures to protect your personal data:
Encryption
SSL/TLS encryption for data in transit; encrypted storage for sensitive data
Access Controls
Strict role-based access to personal data
Regular Backups
Automated backups with disaster recovery protocols
Monitoring
24/7 security monitoring and regular audits
9. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy:
- Account data: Until account deletion or 3 years of inactivity
- Order data: 7 years (for tax and legal compliance)
- Marketing data: Until consent withdrawal or 2 years of inactivity
- Communication data: 3 years from last interaction
10. Your Rights Under DPDP Act
As a Data Principal under the DPDP Act, 2023, you have the following rights:
Right to Confirmation and Access
Request confirmation of whether we process your personal data and access to such data.
Right to Correction
Request correction of inaccurate or outdated personal data.
Right to Erasure
Request deletion of your personal data when no longer necessary or when consent is withdrawn.
Right to Portability
Request transfer of your personal data to another data fiduciary in a structured format.
Right to Withdraw Consent
Withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
Right to Grieve
Lodge a complaint with the Data Protection Board of India or our Grievance Officer.
To exercise these rights, submit a request to privacy@hemkeshgroup.in with the subject "Data Subject Request". We will respond within 30 days as required by the DPDP Act.
11. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately, and we will delete it.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these websites. We encourage you to read their privacy policies before providing any personal information.
14. Grievance Officer
In compliance with the DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns regarding data processing:
Mr. Randheer Singh
Grievance Officer
HEMKESH GROUP
Office No. 123, Business Tower, Andheri East, Mumbai - 400069
Email: grievance@hemkeshgroup.in
Phone: +91 8237155507
Response Time: Within 30 days of receiving the complaint
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.
16. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
HEMKESH GROUP
Office No. 123, Business Tower, Andheri East, Mumbai - 400069