Privacy Policy
What we collect, why we collect it, and what you can ask us to do about it. Written in plain language, because a policy nobody reads protects nobody.
Last updated · 12 July 2026
Who we are
Rupali Printers is a hand block-printing unit registered in Bagru, Jaipur district, Rajasthan (GSTIN 08AAXCR1234K1ZP). We operate rupaliprinters.in and are the data fiduciary for the information described below.
This policy is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices) Rules, 2011.
What we collect
- Identity and contact details you give us: name, email address, mobile number, shipping and billing addresses.
- Order information: what you bought, when, the value, and the delivery outcome.
- Payment metadata only — the last four digits of a card, the payment method and the gateway reference. We never receive or store full card numbers, CVVs or UPI PINs.
- Technical data: IP address, browser and device type, and the pages you viewed on our site.
- Anything you volunteer in a support ticket, review or contact form.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Sending dispatch and delivery updates | Performance of a contract |
| Issuing GST invoices and retaining them | Legal obligation |
| Answering support tickets | Legitimate interest |
| Marketing emails and offers | Your consent — withdrawable at any time |
| Fraud prevention and site security | Legitimate interest |
How long we keep it
- Order records and GST invoices: eight years, as required by Indian tax law.
- Account profile data: until you ask us to close the account.
- Support tickets: three years from resolution.
- Marketing consent records: until you withdraw, plus two years as proof of consent.
Your rights
Under the DPDP Act you may ask us for a copy of your data, ask us to correct it, ask us to erase it where we are not legally required to keep it, or withdraw consent for marketing.
Write to hello@rupaliprinters.in with the subject line 'Data request'. We respond within thirty days and there is no charge.
If you are not satisfied with our response you may complain to the Data Protection Board of India.
Security
The site runs entirely over TLS. Passwords are hashed, never stored in readable form. Card details are tokenised by our PCI-DSS compliant gateway and never touch our servers.
Access to customer records inside the unit is limited to the order desk and the founder, and is logged.
Children
Our site is not directed at anyone under eighteen and we do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
Changes and contact
If we change this policy materially we will email registered customers and place a notice on the site for thirty days.
Questions go to hello@rupaliprinters.in, or by post to Batik House, Sanganer Road, Bagru, Jaipur, Rajasthan 303007.
Related policies