Privacy Policy
How we collect, use, and protect your personal data in accordance with Indian data protection laws and the DPDP Act, 2023.
Introduction
This Privacy Policy is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 DPDP Act.
Ekjahan Enterprises Company, we, our, is committed to protecting the privacy of individuals who visit our website, register products, apply for careers, or engage with our services.
Applicability
This Policy applies to all personal data collected through our website, mobile applications, product registration forms, career portals, vendor onboarding forms, and customer support channels.
Definitions
Information We Collect
Identity & Contact
Full name, email, phone, postal address
Product Registration
Product model, serial number, invoice, purchase date
Career & Vendor Data
Resume, cover letter, business name, experience
Account & Orders
Account credentials (email, name, hashed password), saved addresses, cart contents, order and transaction history, and payment details processed via our payment provider when online payments are enabled (we do not store full card numbers).
Technical & Usage
IP address, browser type, device ID, cookies, session logs
Purpose of Collection
- Account management — creating and securing your login, authentication and email verification
- Order processing, fulfilment, delivery and customer support
- Payment processing via our payment provider (when online payments are enabled)
- Product registration and warranty activation
- Career application evaluation
- Vendor onboarding and communication
- Customer support and service improvement
- Legal compliance and regulatory reporting
- Marketing communications (with explicit consent)
Legal Basis for Processing
Consent
Explicit consent via forms and checkboxes
Contractual Necessity
For warranty, employment, or vendor agreements
Legal Obligation
Compliance with applicable laws
Legitimate Interest
Business analytics, fraud prevention
Disclosure of Information
We do not sell personal data. We may disclose it to:
- Third-party service providers (logistics, email, hosting, analytics)
- Government authorities (upon lawful request)
- Legal counsel or auditors (for compliance and dispute resolution)
All disclosures are made under confidentiality agreements and data protection safeguards.
Data Retention
We retain personal data only as long as necessary for the purpose for which it was collected, or as required under applicable law. Career and vendor data may be retained for up to 5 years for audit and compliance.
Security Practices
In compliance with Section 43A of the IT Act and SPDI Rules, we implement:
- SSL encryption
- Role-based access controls
- Secure servers and firewalls
- Regular vulnerability assessments
- Employee training on data handling
Rights of Data Principals
Under the DPDP Act, you have the right to:
- Access your personal data
- Correct inaccuracies
- Withdraw consent
- Request deletion (subject to legal exceptions)
- Nominate a representative to exercise rights on your behalf
Grievance Redressal
Grievance Officer
Email: contacts@ekjahan.com
Phone: +91 91111 98411
We aim to resolve grievances within 30 calendar days.
Updates to This Policy
We reserve the right to update this Privacy Policy. Changes will be posted on our website with the revised effective date.