Privacy Policy

Last Updated: January 2025
Effective Date: January 2025

1. Introduction

At Premio Living, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make purchases from our e-commerce platform. This policy complies with the Information Technology Act, 2000, IT Rules 2011, Consumer Protection (E-commerce) Rules 2020, and the Digital Personal Data Protection Act, 2023.

2. Data Controller

3. Data We Collect

Personal Information:

• Name, email address, phone number, delivery address
• Billing information and shipping details

Payment Information:

• Payment details are processed through secure third-party payment gateways
• We do not store complete card details on our servers
• Only tokenized payment information is retained for order processing

Usage Data:

• IP address, browser type, device information
• Pages visited, time spent on site, browsing patterns
• Cookies and similar tracking technologies

4. Purpose of Data Collection

• Order Processing & Fulfillment: To process your orders and arrange delivery
• Payment Processing: To complete secure transactions
• Customer Support: To respond to your inquiries and provide assistance
• Marketing Communications: To send promotional offers (with explicit consent)
• Fraud Prevention: To detect and prevent fraudulent activities
• Legal Compliance: To comply with applicable laws and regulations

5. Legal Basis for Processing

• Your explicit consent for specific purposes
• Performance of contract (order fulfillment)
• Legal obligations under Indian law
• Legitimate business interests (fraud prevention, service improvement)

6. Data Retention

• Active Accounts: Data retained for the duration of your account plus 3 years from last interaction
• Transaction Records: Retained for 7 years as per Indian tax and accounting requirements
• Marketing Data: Retained until consent is withdrawn
• Inactive Accounts: Deleted after 3 years of inactivity unless legally required to retain

7. Your Rights

Under Indian data protection laws, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Correction: Request correction of inaccurate information
• Right to Deletion: Request deletion of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Lodge Complaint: File a complaint with the Data Protection Board of India

To exercise these rights, contact our Grievance Officer at sales@premioliving.in

8. Data Security

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for all data transmission
• Secure payment gateways compliant with PCI-DSS standards
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Employee training on data protection practices

9. Third-Party Sharing

We may share your data with the following third parties:

• Payment Processors: For secure payment processing
• Logistics Partners: For order delivery and fulfillment
• Analytics Providers: For website performance analysis (anonymized data)
• Marketing Platforms: For email communications (with consent)

Important: We never sell your personal data to third parties for marketing purposes.

10. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. For detailed information, please refer to our Cookie Policy.

11. Children's Privacy

We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor without parental consent, we will take immediate steps to delete such information. If you believe your child has provided us with personal information, please contact us at sales@premioliving.in.

12. Cross-Border Data Transfers

Your data may be stored and processed in servers located in India and other countries where our service providers operate. We ensure adequate safeguards are in place for international data transfers, including data processing agreements and compliance with applicable data protection standards.

13. Data Breach Notification

In the event of a data breach that may compromise your personal information, we will notify the Data Protection Board of India and affected users within 72 hours. We will provide details about the breach, potential impact, and remedial measures being taken.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through email or a prominent notice on our website. The "Last Updated" date at the top of this policy indicates when it was last revised.

15. Contact & Grievances