Privacy policy

Last updated: [date]

In short

We collect only the data we need to sell, deliver and invoice your order and to answer you.
Card and UPI details are entered on Razorpay's page. We do not see or store them.
We do not sell your personal data. You can ask us to show, correct or delete it.

This Privacy Policy explains how Allam Falltechnology Pvt. Ltd. ("FallTech", "we", "us", "our") collects, uses, shares and protects your personal data when you use [website domain] (the "Website"), place an order, send an enquiry, or book a service with us.

We process personal data in line with the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it. Under the DPDP Act, FallTech is the Data Fiduciary and you are the Data Principal.

1. Who we are

Allam Falltechnology Pvt. Ltd.
Shop No. 4, Gat No. 59, Chintamani Bhalekar Dehu Alandi Village Road, Pimpri-Chinchwad, Pune 411062, Maharashtra, India
CIN: [CIN — to be added]
GSTIN: [GSTIN — to be added]
Phone: +91 99239 08505, +91 94217 05448
Email: allamfalltech@gmail.com

2. Personal data we collect

We collect only the data we need to sell products, deliver orders, provide services and respond to you.

Data you give us

Name, mobile number and email address
Billing and delivery addresses
Company name and GSTIN (for business customers who add them)
Account password (stored in encrypted form) or the mobile number used for OTP sign-in
Enquiries, bulk requirement forms, and files you upload, such as a BOQ, drawings or site details
Messages you send us by phone, email, WhatsApp or the Website

Data created when you use the Website or buy from us

Order history, invoices, returns and refund records
Payment status (for example, paid, failed or refunded) and the payment reference from Razorpay
Delivery and tracking details
Device and usage data collected through cookies, such as browser type, pages visited and approximate location derived from your IP address (see Section 9)

Payment details
Card, UPI, net banking and other payment details are entered on and processed by Razorpay, our payment gateway. We do not see or store your full card number, CVV, UPI PIN or net banking password.

3. Why we use your data

We use your personal data for these purposes:

Purpose	Data used
Creating and managing your account, including password and OTP sign-in	Name, mobile, email, password
Processing orders, payments, invoices and GST compliance	Name, contact details, addresses, company name, GSTIN, order and payment status
Delivering orders and sending tracking updates	Name, mobile, email, delivery address
Handling cancellations, returns, replacements and refunds	Order details, photos you send, bank or UPI details (for COD refunds, when COD is offered)
Responding to enquiries and preparing quotes for bulk orders and services	Contact details, company name, enquiry and BOQ files
Scheduling site surveys, installation, maintenance and training	Contact details, site address, requirement details
Sending order, delivery and account messages by SMS, WhatsApp and email	Mobile number, email
Sending offers and product updates, only if you have agreed	Mobile number, email
Keeping the Website secure, preventing fraud and fixing errors	Device and usage data, order and payment status
Understanding how the Website is used so we can improve it, only if you accept analytics cookies	Cookie and usage data
Meeting legal, tax and accounting obligations, and handling disputes	Invoices, order and payment records

We will not use your data for a purpose that is not listed here without telling you and, where required, asking for your consent.

We process your personal data on one of these grounds under the DPDP Act:

Consent. For example, when you agree to receive promotional messages or accept analytics cookies. Consent is asked for clearly, for a stated purpose, and you can withdraw it at any time (see Section 7).
Legitimate uses permitted by Section 7 of the DPDP Act. This includes data you give us voluntarily for a specific purpose, such as placing an order or sending an enquiry, and processing we must do to comply with law, such as keeping GST invoices.

We do not sell your personal data. We share it only with the service providers we need to run our business, and only the data each one needs for its task. These providers process data on our behalf and under our instructions.

Razorpay Software Pvt. Ltd. – to process payments and refunds.
Shiprocket and its courier partners – to pick up, ship and deliver orders and returns, and to send tracking updates. They receive your name, phone number, delivery address and order details.
SMS provider ([SMS provider]) – to send OTPs, order and delivery messages.
WhatsApp messaging provider ([WhatsApp provider]) – to send order updates and replies to your queries on WhatsApp.
Email provider ([email provider]) – to send order confirmations, invoices and account emails.
Analytics provider ([analytics provider, e.g. Google Analytics]) – to measure Website usage, only if you accept analytics cookies.
Hosting and IT service providers ([hosting provider]) – to host the Website and store data.

We may also share data:

with government authorities, courts or law enforcement when the law requires it;
with our professional advisers, such as our chartered accountant and lawyers, for accounting, audit and legal purposes;
with a buyer or successor if our business is merged, acquired or restructured, subject to the same protections.

Some of our service providers may process data on servers outside India. Where this happens, we transfer data only as permitted under Section 16 of the DPDP Act.

6. How long we keep your data

We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires.

Account data: while your account is active. If your account is inactive for [inactive account period], or you ask us to delete it, we delete or anonymise it, except for data we must keep by law.
Orders, invoices and payment records: for the period required under GST and other tax and accounting laws.
Enquiries, quotes and BOQ files: for [enquiry file retention period] after the enquiry is closed, unless they become part of an order.
Analytics data: for [analytics retention period].

When the retention period ends, we delete the data or anonymise it so it can no longer identify you.

7. Your rights

As a Data Principal, you have the right to:

Access: ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with.
Correction and updating: ask us to correct inaccurate data, complete incomplete data, or update it. You can also edit your name, addresses and GSTIN in your account.
Erasure: ask us to delete your personal data when it is no longer needed for the purpose it was collected for. We will keep data we are required by law to retain, such as tax invoices, and tell you what we have kept.
Withdraw consent: where we rely on your consent, you can withdraw it at any time, as easily as you gave it. You can unsubscribe from promotional emails using the link in the email, reply STOP to promotional SMS or WhatsApp messages, change your cookie choices from the cookie settings link on the Website, or write to us. Withdrawal does not affect processing done before it. If you withdraw consent needed for an active order, we may not be able to complete that order.
Grievance redressal: raise a complaint with our Grievance Officer about how we handle your data (see Section 11).
Nominate: nominate another person to exercise your rights if you die or become unable to do so.

To use any of these rights, email [grievance email] or allamfalltech@gmail.com from your registered email address, or call us. We may ask you to verify your identity before acting on the request.

You also have duties under the DPDP Act, including giving us accurate information and not filing false or frivolous complaints.

8. How we protect your data

We use reasonable security safeguards to protect personal data from unauthorised access, loss or misuse, including:

encrypted (HTTPS) connections on the Website;
encrypted storage of passwords;
access to customer data limited to staff who need it for their work;
payment processing handled by Razorpay, so card and UPI details do not pass through our systems;
contracts requiring our service providers to protect the data they handle for us.

No system is fully secure. If a personal data breach occurs, we will inform affected customers and the Data Protection Board of India as the DPDP Act requires.

9. Cookies

Cookies are small files stored in your browser. We use:

Essential cookies: to keep you signed in, remember your cart and keep the Website secure. The Website will not work properly without them, so they cannot be switched off.
Analytics cookies: to understand which pages are visited and how the Website is used. These are set only if you accept them in the cookie banner.

When you first visit the Website, a cookie banner lets you accept or reject analytics cookies. You can change your choice at any time from the cookie settings link in the Website footer, or by clearing cookies in your browser.

10. Children

Our products and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has given us personal data, contact us and we will delete it.

11. Grievance Officer

If you have a question or complaint about how we handle your personal data, contact our Grievance Officer:

[Grievance Officer name]
Grievance Officer, Allam Falltechnology Pvt. Ltd.
Shop No. 4, Gat No. 59, Chintamani Bhalekar Dehu Alandi Village Road, Pimpri-Chinchwad, Pune 411062, Maharashtra, India
Email: [grievance email]
Phone: +91 99239 08505

We will acknowledge your complaint within 48 hours and aim to resolve it within one month of receiving it.

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India once its complaint process is available to you under the DPDP Act.

12. Changes to this policy

We may update this Privacy Policy when our services, service providers or the law change. The updated version will be posted on this page with a new "Last updated" date. If a change materially affects how we use your data, we will also inform you by email or a notice on the Website.

13. Contact

For any question about this policy, write to allamfalltech@gmail.com or call +91 99239 08505 or +91 94217 05448.