Data Retention and Deletion Policy

Purpose

This Data Retention and Deletion Policy outlines how Instru India Techsys LLP ("we," "us," "our") manages the retention and deletion of personal data collected from customers and users of our online store, instruindia.com ("Website").

Data Retention

  1. General Retention Periods
    • Personal Identification Information: Retained for as long as the user maintains an account with us. If the account is inactive for a continuous period of 24 months, the data will be anonymized or deleted, unless required otherwise by law.
    • Purchase History and Transaction Data: Retained for a period of 7 years for compliance with tax and accounting regulations.
    • Payment Information: Credit/debit card details are not stored by us directly but are processed through secure third-party payment processors. Any residual data is retained for up to 7 years for financial compliance purposes.
    • Technical Data (e.g., IP addresses, browser types): Retained for 12 months for analytical purposes and to enhance user experience on our Website.
  2. Retention for Legal Compliance
    • We may retain personal data beyond the periods specified above to comply with legal obligations, including financial regulations, auditing requirements, or any other legal claims or proceedings.

Data Deletion

  1. User Requests for Data Deletion
    • Users have the right to request the deletion of their personal data. Upon receiving such a request, we will delete the user's personal data within 30 days, except where retention is required by law.
    • If the user withdraws consent for data processing, we will cease processing their data and delete or anonymize it within 30 days, except where retention is required for legal compliance or contractual obligations.
  2. Automatic Deletion
    • Personal data will be automatically deleted or anonymized when it is reasonable to assume that the specified purpose for which the data was collected is no longer being served or after the end of the retention period specified above, whichever is earlier.
  3. Data Processors
    • We ensure that any third-party data processors engaged by us comply with our data retention and deletion policies and delete or anonymize personal data as instructed by us.

Data Security

  1. Technical and Organizational Measures
    • We employ appropriate technical and organizational measures to ensure the security of personal data, including encryption, access controls, and secure storage systems.
  2. Breach Notification
    • In the event of a personal data breach, we will notify the relevant authorities and affected data principals within the time frame prescribed by applicable data protection laws.

User Rights

  1. Access and Correction
    • Users have the right to access their personal data held by us and request corrections to any inaccuracies.
  2. Right to Object
    • Users have the right to object to the processing of their personal data for certain purposes, including direct marketing.
  3. Grievance Redressal
    • Users can contact our Data Protection Officer to raise any concerns or complaints regarding the processing of their personal data.

Contact Information

If you have any questions about this Data Retention and Deletion Policy or our data protection practices, please contact us at:

Data Protection Officer: Anu Bajaj  

Email: info@instruindia.com

Changes to This Policy

We reserve the right to update this policy from time to time to reflect changes in legal or regulatory requirements or our data processing practices. Any changes will be posted on our Website with an updated effective date.

Effective Date: 13.06.2024