What we collect, why we collect it, and how to make us delete it. Written to be read, not to be survived.
DRAFT STRUCTURE · NOT LEGAL ADVICE. This page carries the sections an Indian D2C store needs (DPDP Act 2023, Consumer Protection E-Commerce Rules 2020). Every bracketed value and the final wording must be settled by your lawyer before launch.
SKELMET is operated by Gee Star Spinning Solutions, registered at B-121, B Block, Udyog Marg, Sector 6, Noida, Gautam Buddha Nagar, Uttar Pradesh 201301, GSTIN 09AOIPJ0692M1ZG. In this policy “we”, “us” and “our” mean that company; “you” means anyone who visits skelmet.in or buys from us.
We are the data fiduciary for the personal data described below, in the sense the Digital Personal Data Protection Act 2023 uses that term.
Most of it you give us directly: at checkout, when you create an account, when you write to us or post a review. Technical data is collected automatically by our servers and by the cookies described in section 06. We do not buy personal data from third parties or scrape it.
Payments are processed by Razorpay. Your card, netbanking or UPI credentials go directly to them over an encrypted connection and never touch our servers. We receive only a transaction id, the amount, the method and whether it succeeded, enough to reconcile your order and issue a refund.
We use three kinds, and you can refuse all but the first:
You can change your choice at any time from the cookie settings link in the footer, or block cookies in your browser.
We do not sell your personal data. We share the minimum necessary with the processors in section 08, and we disclose data where the law requires it, a court order, a tax authority, or a genuine law-enforcement request we are satisfied is valid.
If the business is ever sold or merged, your data may transfer to the buyer under the same commitments; we will tell you before that happens.
Under the DPDP Act 2023 you can ask us to:
Write to the grievance officer in the last section. We will respond within [30] days. If you are not satisfied you may complain to the Data Protection Board of India.
We only email you about new drops if you asked us to. Every one of those emails has a one-click unsubscribe, and unsubscribing does not affect the transactional emails about an order you have placed. We do not send marketing over WhatsApp unless you have separately opted in.
The site runs over TLS. Passwords are stored hashed, never in plain text. Access to customer data inside the company is limited to the people who need it and is logged. Payment credentials never reach us at all.
No system is perfect. If a breach affects your data we will notify you and the Data Protection Board as the DPDP Act requires.
If we change anything that materially affects you, we will update the date at the top and email anyone with an account at least [14] days before the change takes effect. Older versions are kept and can be requested.
As required by the DPDP Act 2023 and the Consumer Protection (E-Commerce) Rules 2020:
A human reads every message. Anything about your data goes straight to the grievance officer.
Contact us