Daril Lighting Pvt Ltd (referred to as "the Company," "we," "us," or "our") operates the www.darillighting.com (the “Website”) and is committed to protecting the privacy of its users. This Privacy Policy outlines our procedures for collecting, using, disclosing, and protecting the Digital Personal Data (DPD) and Sensitive Personal Data or Information (SPDI) you provide.
Last Updated: [20-11-2025]
Effective Date: [20-11-2025]
1. Legal Framework and Consent
This Privacy Policy is published in compliance with:
1.1 Consent: By using our Website, placing an order, or providing your information, you provide your free, specific, informed, unconditional, and unambiguous consent to the collection, storage, processing, and transfer of your personal data as described in this Policy.
2. Information Collected
We collect both Personal Data and Sensitive Personal Data or Information (SPDI), defined under the IT Act and DPDP Act, when you interact with us.
2.1 Personal Data (PD)
| Category | Data Elements Collected | Purpose |
|---|---|---|
| Identity & Contact | Name, Email Address, Mobile Number, Gender | Account creation, communication, marketing, and customer service |
| Shipping & Location | Delivery Address, Billing Address, Pincode, City | Order fulfillment, logistics, and delivery |
| Transaction & Usage | Products purchased, order history, returns/cancellations, product reviews | Transaction records, compliance, and product improvement |
| Website Usage | IP address, browser type, device ID, operating system, and pages viewed | Site optimization, analytics, and security |
2.2 Sensitive Personal Data or Information (SPDI)
We may collect the following SPDI:
3. Purpose of Processing (Purpose Limitation)
We will only collect and process your Personal Data for the following specified, lawful purposes (in compliance with Section 6 of the DPDP Act):
4. Disclosure and Sharing of Data
Your Personal Data is a crucial part of our business and we will not sell, rent, or trade your data to third parties for commercial gain. Disclosure is strictly limited to the following:
| Recipient | Purpose of Disclosure |
|---|---|
| Service Providers | Courier and logistics partners, payment processors, cloud storage providers, and IT support services. |
| Group Companies | Sharing with our affiliates/subsidiaries for internal administration and data analysis, subject to confidentiality agreements. |
| Legal Authorities | Disclosing information where required by law, court order, or when necessary to protect our rights, property, or safety, or that of our users. |
Prior Permission: We will obtain your prior written consent before disclosing your SPDI to any third party, unless mandated by law.
5. Your Rights as a Data Principal
Under the DPDP Act, you, as the Data Principal, have the following rights:
6. Data Security and Retention
6.1 Security Measures
We implement Reasonable Security Practices and Procedures as per the SPDI Rules and the DPDP Act to protect your data from unauthorized access, loss, misuse, or alteration. These measures include:
6.2 Data Retention and Erasure (Storage Limitation)
We will retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law.
Inactivity Rule (DPDP Act): If you remain inactive on our Website for a period of [e.g., three consecutive years] (or the period specified under the DPDP Rules), we will provide you with a 48-hour advance notice before deleting your Personal Data from our systems.
7. Grievance Redressal Mechanism
In compliance with the DPDP Act and the IT Rules, we have appointed a Grievance Officer to address your queries or complaints regarding the processing of your Personal Data.
Grievance Officer:
We are obligated to acknowledge receipt of your complaint and endeavour to resolve it within 30 days from the date of receipt.
8. Policy Updates
We reserve the right to change or update this Policy at any time. Any changes will be effective immediately upon being posted on the Website. We will also notify you of material changes via email or a prominent notice on the Website.
Please contact our Grievance Officer if you have any questions or wish to exercise your data rights.