Privacy Policy
Privacy Policy
How XaraPrint collects, uses, stores, and protects your personal data — in compliance with India's DPDP Act 2023, EU/UK GDPR, and California CCPA.
1. Who We Are
This Privacy Policy applies to xaraprint.com (“XaraPrint”, “we”, “us”, “our”), a brand operated by Harimurti Technologies (“the Company”), having its registered office at Surat, Gujarat, India.
We act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and as the Data Controller under EU/UK GDPR for applicable users.
2. Scope
This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we retain it, and the rights you have regarding your data.
3. Personal Data We Collect
A. Information You Provide
- Name, email address, and phone number
- Billing and shipping address
- Tax / VAT ID (optional)
- Account credentials
- Order details and uploaded artwork
- Communications via email, chat, forms, or WhatsApp
B. Information Collected Automatically
- IP address and device information
- Browser, OS, and screen size
- Pages visited and browsing behavior
- Referring URLs and analytics data
- Cookie and tracking data
C. Information from Third Parties
- Payment confirmations from CCAvenue
- Shipping and customs tracking from FedEx
- Social login information from Google or other providers
4. Why We Collect Your Data
- Create and manage your account
- Process payments, exports, and deliveries
- Provide customer support
- Send order updates and invoices
- Send marketing communications with consent
- Prevent fraud and security threats
- Comply with legal and tax obligations
- Improve products and website performance
We never sell your personal data to third parties.
5. Legal Basis for Processing
- Your consent
- Performance of a contract
- Legal obligations
- Legitimate business interests
7. International Data Transfers
Your data may be processed or stored in India and other countries where our service providers operate.
Where required, we use Standard Contractual Clauses (SCCs), service-provider safeguards, and DPDP-compliant protections.
9. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account Information | While active + 8 years |
| Orders & Shipping Records | 8 years |
| Artwork Files | 12 months |
| Marketing Data | Until consent withdrawn |
| Analytics & Logs | Up to 24 months |
10. Your Rights
Indian Residents (DPDP Act)
- Access personal data
- Correct inaccurate information
- Request deletion
- Withdraw consent
- Nominate a representative
EU/UK Residents (GDPR)
- Restrict processing
- Request data portability
- Object to processing
- Lodge complaints with authorities
California Residents (CCPA)
- Request disclosure of collected data
- Request deletion
- Opt out of sale of personal data
- Exercise rights without discrimination
11. Children
XaraPrint is not intended for users under 18 years of age. We do not knowingly collect personal information from minors.
12. Data Security
- SSL/TLS encryption
- Secure password hashing
- Access controls and restricted permissions
- Infrastructure and server security monitoring
- Periodic security reviews
13. Grievance Officer
As required under India's DPDP Act 2023 and the IT Act 2000:
Name: [GRIEVANCE OFFICER NAME]
Email: grievance@xaraprint.com
Phone: +91-XXXXXXXXXX
Hours: Mon–Sat, 10:00 AM – 7:00 PM IST
14. Updates
We may update this Privacy Policy from time to time to reflect changes in law, technology, or business operations.
Material changes may be communicated through email notifications or website banners.
Contact Us
For privacy-related questions, requests, or concerns:
- Email: support@xaraprint.com
- Phone: +1 929-515-2535
