Privacy Policy
Dinanath & Sons • 1914, Chatta Madan Gopal, Maliwara, Chandni Chowk, Delhi - 110006, India
Effective Date: October 2026 • Compliant with Indian IT Act 2000 & DPDP Act 2023
Commitment to Customer & Commercial Partner Privacy:
At Dinanath & Sons (operating as dinanathandsons.com), we recognize the paramount importance of data confidentiality and customer trust. This Privacy Policy sets out the principles and practices governing our collection, storage, processing, and disclosure of personal and commercial data obtained through our website, mobile interface, and direct wholesale interactions.
1Information We Collect
When you browse our storefront, register an account, place an order, or submit an inquiry for industrial machinery, we collect relevant information necessary to deliver our services:
- Personal & Business Identification: Full name, company / workshop name, contact telephone number, mobile number, and email address.
- GST & Tax Invoicing Data: Goods and Services Tax Identification Number (GSTIN), business legal entity name, and billing address for issuing official GST tax invoices.
- Shipping & Delivery Details: Physical workshop or residential delivery address, landmark, PIN code, and recipient contact credentials.
- Order & Transaction Records: Purchased item IDs, quantities, order date, total transaction value, and payment method selected.
- Technical & Browsing Data: Internet Protocol (IP) address, browser type, operating system, device identifiers, and browsing activity collected via session cookies.
2Payment Gateway & Financial Security (Razorpay)
Zero Storage of Sensitive Card Credentials: Dinanath & Sons strictly adheres to Reserve Bank of India (RBI) directives on digital payment processing and card data tokenization. We do not capture, record, or store any sensitive banking credentials, including credit/debit card numbers, CVVs, expiration dates, UPI PINs, or net-banking login passwords on our servers.
PCI-DSS Compliant Processing: All electronic transactions are executed via encrypted channels through our RBI-licensed payment gateway partner, Razorpay Software Private Limited. Razorpay maintains PCI-DSS Level 1 certification (Payment Card Industry Data Security Standard). During payment, your financial details are securely transmitted directly to the gateway under 256-bit SSL encryption.
3How We Utilize Your Information
The information gathered is utilized exclusively for legitimate business purposes:
- Fulfilling, processing, and dispatching orders placed through the website.
- Generating statutory GST Tax Invoices and maintaining commercial accounting records in compliance with Indian tax laws.
- Transmitting order updates, live Air Waybill (AWB) courier tracking details, and dispatch confirmations via SMS, WhatsApp, and Email.
- Providing technical customer support, machine installation consultation, and defect resolution.
- Preventing fraudulent transactions and ensuring overall website security.
4Data Sharing with Third-Party Service Providers
We do not sell, rent, or lease your personal data to advertisers or commercial brokers. We share strictly limited, necessary information with authorized third parties solely to complete our operational contracts:
- Logistics & Freight Partners: We share recipient name, contact phone number, and physical shipping address with logistics partners (e.g., Shiprocket, Bluedart, Delhivery, V-Trans, TCI Freight, Safexpress) solely for physical package dispatch, customs transit compliance, and delivery coordination.
- Cloud Infrastructure & Database Hosts: Secure databases hosted via Supabase and AWS with enterprise-grade encryption at rest and in transit.
- Legal & Law Enforcement Bodies: We may disclose data when required to do so by applicable Indian legislation, court summons, or regulatory authorities under the Information Technology Act, 2000.
5Cookies & Web Tracking Technologies
Our website employs cookies—small alphanumeric files stored in your web browser—to optimize your user experience:
- Essential Cookies: Required to maintain user authentication sessions, keep items in your shopping cart, and preserve security parameters.
- Preference Cookies: Store your preferred language (English, Hindi, etc.) and currency preferences (INR).
- Analytics Cookies: Help us anonymously evaluate storefront performance, page load velocities, and technical search effectiveness.
You may configure your browser settings to reject cookies; however, certain interactive functionalities (such as the persistent cart and account dashboard) may be impaired.
6Data Retention & Security Measures
We retain transaction and billing records for the period mandated under the Companies Act, 2013 and the Central Goods and Services Tax Act, 2017 (statutorily up to 8 financial years for GST audits). All data repositories are protected using modern firewall architectures, restricted administrative credentials, encrypted session tokens, and encrypted database instances to safeguard against unauthorized access or disclosure.
7Your Legal Rights (DPDP Act 2023)
Under applicable Indian data protection frameworks, including the Digital Personal Data Protection (DPDP) Act, 2023, you have the right to request access to your personal data, request correction of inaccurate records, or request deletion of personal information where statutory retention periods do not apply. You can also opt out of promotional communications at any time.
8Data Protection & Grievance Officer
Pursuant to Section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, contact our designated Grievance Officer for privacy concerns: