Last Updated: 11..08.2026 Governing Framework: Information Technology Act, 2000; Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011; Digital Personal Data Protection Act, 2023; Consumer Protection Act, 2019; and the Consumer Protection (E-Commerce) Rules, 2020, each as amended from time to time.
1. Introduction
Panjabipassions (“Company”, “we”, “our”, “us”, or “Data Fiduciary”) respects your privacy and is committed to protecting your personal data in accordance with applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and the Digital Personal Data Protection Act, 2023 (“DPDP Act”). This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you visit our website, place an order, or interact with us through WhatsApp, social media, email, telephone, or any other official communication channel.
For the purposes of this Policy, “you”, “your”, “Data Principal” or “User” means an individual to whom the personal data relates. By using our services or providing your personal data, you consent to its collection, processing, and use as described in this Privacy Policy, in accordance with Section 6 of the DPDP Act.
2. Personal Data We Collect
We may collect the following categories of personal data:
Identity and Contact Data
- Full name
- Mobile number
- Email address
- Billing address, shipping address, PIN code, city, state and country
Order and Transaction Data
- Products purchased and order history
- Payment status (not payment credentials)
- Delivery information
- Returns and exchanges
Technical and Usage Data
- IP address
- Browser type and device information
- Operating system
- Website usage data, cookies and similar technologies
Communication Data
- WhatsApp messages and emails
- Customer support conversations
- Product reviews, feedback and survey responses
We do not knowingly collect Sensitive Personal Data or Information (as defined under the SPDI Rules), such as financial account details, biometric data, or health data. Payment credentials (card numbers, UPI PIN, CVV, net- banking passwords) are collected and processed solely by our RBI-authorised third-party payment gateway partners and are never received or stored by us.
3. Purpose and Lawful Basis of Processing
In accordance with Section 4 and Section 6 of the DPDP Act, we process your personal data only for specified, lawful purposes for which you have given consent, or as otherwise permitted by law. Your personal data is used to:
- Process and fulfil orders and deliver products
- Provide customer support and respond to enquiries
- Verify payments and prevent fraud or unauthorised transactions
- Send order confirmations, invoices and shipping updates
- Improve our website and services
- Comply with legal, tax and regulatory obligations, including under the Consumer Protection Act, 2019
and Goods and Services Tax laws
- Inform you about offers, discounts, or new product launches, where you have given consent or as
otherwise permitted by law We do not process your personal data for any purpose beyond what you have been notified of, except where required or permitted by applicable law.
4. Payment Information
Payments are processed through secure, RBI-authorised third-party payment gateways in compliance with applicable Reserve Bank of India guidelines and PCI-DSS standards. Panjabipassions does not store your debit card, credit card, UPI PIN, CVV, internet banking credentials, or other sensitive financial information on its own systems or servers.
5. Cookies
Our website may use cookies and similar technologies to remember your preferences, improve website functionality, analyse website traffic, and enhance your shopping experience. Non-essential cookies are used only with your consent, where required by law. You may disable cookies through your browser settings; however, some features of the website may not function properly as a result.
6. Disclosure and Sharing of Personal Data
We do not sell or rent your personal data. We may share personal data only with:
- Courier and logistics partners, for delivery of orders
- Payment gateway providers, for processing payments
- IT service providers who support our website and systems
- Government authorities, regulators, courts, or law enforcement agencies, where required under applicable
law
- Professional advisers, such as auditors or legal counsel, where necessary
All such parties are bound by contract or law to maintain appropriate confidentiality and security standards. We do not knowingly transfer personal data outside India except in a manner consistent with Section 16 of the DPDP Act and any restrictions notified by the Central Government from time to time.
7. Data Security
We implement reasonable security practices and procedures, in line with the SPDI Rules and Section 8(5) of the DPDP Act, to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. While we strive to protect your data, no method of electronic transmission or storage is completely secure and we cannot guarantee absolute security. In the event of a personal data breach, we shall take reasonable steps to notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Act.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including to complete orders, provide customer support, resolve disputes, and enforce our agreements, or for such longer period as may be required to meet our obligations under applicable law, including the Income Tax Act, 1961, the Companies Act, 2013, the Consumer Protection Act, 2019, and other statutory, accounting or audit requirements.
9. Your Rights as a Data Principal
Subject to applicable law, including the DPDP Act, you have the right to:
- Obtain a summary of the personal data we hold about you and the processing activities undertaken
- Request correction, completion, or updating of your personal data
- Request erasure of personal data that is no longer necessary for the purpose for which it was collected,
subject to any legal retention requirement
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to
withdrawal (note that withdrawal may affect our ability to provide certain services)
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
- Register a grievance in respect of the processing of your personal data
To exercise these rights, please contact our Grievance Officer using the details in Section 13 below. We will endeavour to respond within the timelines prescribed under applicable law.
10. Children’s Data
Consistent with the definition of “child” under the DPDP Act (an individual who has not completed the age of 18 years), our website and services are intended for use by persons who are 18 years of age or older. We do not knowingly collect personal data of children without verifiable consent of a parent or lawful guardian. If we become aware that such data has been collected without appropriate consent, we will take reasonable steps to delete it without delay.
11. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or policies of those third parties. Users should review the privacy policies of any external websites they visit.
12. Marketing Communications
With your consent, or where otherwise permitted by law, we may send promotional emails, SMS messages, or WhatsApp communications regarding our products, services, offers, and events, in accordance with the Telecom Commercial Communications Customer Preference Regulations, 2018 (TCCCPR) and applicable Telecom Regulatory Authority of India (TRAI) guidelines. You may opt out of receiving such communications at any time by following the unsubscribe instructions provided or by contacting us.
13. Grievance Officer and Grievance Redressal
In accordance with Section 13(4) of the SPDI Rules, Section 13 of the DPDP Act, and Rule 5(3) of the Consumer Protection (E-Commerce) Rules, 2020, the following Grievance Officer has been appointed to address complaints relating to this Privacy Policy or the handling of your personal data:
Grievance Officer Registered Address: 150, Haltu School Lane, Kolkata – 700078, West Bengal, India Email: support@panjabipassions.com Business Hours: 8 am – 8 pm We shall acknowledge your grievance within forty-eight (48) hours of receipt and shall endeavour to redress it within one (1) month from the date of receipt, in accordance with applicable law.
14. Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of India. Subject to applicable consumer protection law, the courts at Kolkata, West Bengal shall have exclusive jurisdiction over any disputes arising from this Policy. This is without prejudice to your right, as a consumer, to approach the District, State, or National Consumer Disputes Redressal Commission having jurisdiction over the place of your residence or where you personally work for gain, under Section 34(2) of the Consumer Protection Act, 2019.
15. Changes to this Privacy Policy
Panjabipassions reserves the right to update or modify this Privacy Policy at any time to reflect changes in law or our practices. The revised version will be posted on our website with an updated “Last Updated” date. Continued use of our services after such changes constitutes acceptance of the revised Privacy Policy.
16. Contact Us
For any questions, complaints, or requests relating to this Privacy Policy or the handling of your personal data, please contact the Grievance Officer at the details set out in Section 13 above.