Privacy Policy

This Policy applies primarily to personal data relating to individuals. It does not generally apply to information that does not identify or relate to an identifiable individual. This Policy applies to personal data collected or processed by the Company through:

• our Website;
• online product enquiries;
• customer registration/account creation;
• orders and purchases;
• customer service and support interactions;
• contact-us forms;
• subscription to newsletters, offers and promotional communications;
• contests, campaigns and promotional activities;
• surveys and feedback forms;
• warranty, return, exchange and complaint processes;
• communications through e-mail, telephone, SMS, WhatsApp or other communication channels;
• recruitment/career pages, where applicable;
• interactions with our social-media pages;
• business-to-business/customer/vendor interactions; and
• other lawful interactions between you and the Company.

For purposes of applicable data-protection law, the Company may act as the Data Fiduciary in respect of personal data that it determines the purpose and means of processing. Where another organisation determines the purposes and means of processing independently, that organisation may act as a separate Data Fiduciary. Where service providers process personal data solely on behalf of the Company, they may act as Data Processors, subject to applicable contractual and legal requirements.

Depending on how you interact with us, we may collect the following categories of personal data.

Identity and Contact Information

This may include:

• name;
• gender, where voluntarily provided and relevant;
• e-mail address;
• mobile/telephone number;
• billing address;
• shipping/delivery address;
• correspondence address;
• city, State and PIN code; and
• other contact information provided by you.

Account Information

Where account functionality is available, we may collect:

• username;
• login credentials;
• account information;
• order history;
• preferences;
• saved addresses; and
• account-related communications.

The same shall be stored using appropriate security mechanisms and should not be retained by us in readable/plain-text form.

Transaction Information

For purchases and transactions, we may process:

• products purchased;
• quantity;
• order number;
• order date;
• billing information;
• shipping information;
• transaction status;
• payment status;
• refund information;
• returns and exchanges;
• invoices; and
• related customer-service records.

Payment card, banking or other payment credentials may be processed directly by third-party payment service providers. We generally do not intend to store complete payment-card information on our own systems unless specifically required and lawfully permitted.

Communication Information

Where you communicate with us, we may collect:

• e-mails;
• telephone communications;
• customer-service interactions;
• complaints;
• feedback;
• reviews;
• enquiries;
• photographs/documents voluntarily submitted by you; and
• records necessary to resolve your request.

Technical and Device Information

When you access our Website, certain technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• device identifiers;
• language preferences;
• approximate location derived from technical information;
• pages visited;
• referring website;
• date and time of access;
• session information;
• website interaction information; and
• diagnostic/security logs.

Cookies and Similar Technologies

We may use cookies, pixels, tags, SDKs and similar technologies to:

• operate the Website;
• remember preferences;
• maintain sessions;
• understand Website usage;
• improve Website functionality;
• measure advertising effectiveness;
• personalise content, where permitted; and
• detect fraud or security incidents.

Unless specifically required for a lawful purpose, the Company does not intentionally seek to collect highly sensitive or unnecessary personal information. You should not submit through the Website any information that is not necessary for the relevant transaction, enquiry or service. If you voluntarily provide additional information, such information may nevertheless be processed where necessary for the purpose for which you provided it or where otherwise permitted by applicable law.

We may collect personal data:

• directly from you;
• when you create an account;
• when you place an order;
• when you submit an enquiry;
• when you contact customer service;
• when you subscribe to our newsletter;
• when you participate in a campaign or contest;
• when you submit feedback/reviews;
• automatically through cookies and similar technologies;
• from service providers assisting us with business operations;
• from e-commerce/marketplace platforms, where applicable;
• from logistics and delivery partners, where applicable;
• from publicly available sources, where legally permitted; and
• from other lawful sources.

We may process personal data for the following purposes:

Providing Products and Services

including – processing orders, fulfilling purchases, arranging delivery, processing returns and exchanges, processing refunds, providing customer support, handling complaints and administering warranties or after-sales services.

Account Management

including – creating and maintaining customer accounts, authenticating users, managing preferences and maintaining order history.

Business Communications

We may use your contact details to communicate regarding: orders, payments, delivery, returns, refunds, service requests, security matters, policy changes and other transactional matters.

Marketing and Promotions

Subject to applicable law and your choices, we may process personal data for: newsletters, product launches, offers, discounts, promotional campaigns, loyalty programmes, events and personalised marketing. You may opt out of promotional communications at any time.

Fraud and Security

We may process personal data to – prevent fraudulent transactions, detect suspicious activity, protect our Website, protect customers and employees, investigate security incidents and enforce our Terms and Conditions.

Where processing is based on consent, you may withdraw your consent by contacting us through the details provided in this Policy or by using the applicable unsubscribe/withdrawal mechanism. Withdrawal of consent will not affect the lawfulness of processing undertaken before withdrawal. Please note that withdrawal of consent may affect our ability to provide certain services where the processing is necessary for such service. The Company may continue processing personal data where such processing is otherwise permitted or required under applicable law.

Our Website is not intended to knowingly solicit unnecessary personal data from children.

We may share personal data only where necessary and appropriate for legitimate business purposes, contractual performance, legal compliance or other lawful purposes. Recipients may include:

Service Providers

including: hosting providers, cloud service providers, IT service providers, CRM providers, payment processors, logistics providers, delivery partners, customer-support providers, marketing/communication service providers, analytics providers, cybersecurity providers and professional advisers.

Business Partners

Where necessary to fulfil orders, provide services or conduct legitimate business activities.

E-Commerce Platforms

Where products are sold through third-party marketplaces or e-commerce platforms, personal data may be shared with the relevant platform to the extent necessary for order fulfilment, customer support, payments, delivery, returns and related activities.

Government and Regulatory Authorities

We may disclose personal data where required or permitted by law, including to courts, government departments, law-enforcement agencies, regulators, tax authorities and other statutory authorities.

Where third-party service providers process personal data on behalf of the Company, we will seek to ensure that appropriate contractual, technical and organisational measures are implemented. Such service providers may be required to:

• process data only for authorised purposes;
• maintain confidentiality;
• implement reasonable security safeguards;
• restrict unauthorised access;
• assist with applicable data-protection obligations; and
• delete or return personal data where required.

We take reasonable security measures designed to protect personal data against – unauthorised access, accidental loss, destruction, alteration, disclosure, misuse and other unlawful processing.

Depending on the nature and risk associated with the processing, safeguards may include: access controls, authentication mechanisms, encryption or equivalent protection where appropriate, secure hosting, logging and monitoring, network security, vulnerability management, backups, employee confidentiality obligations, vendor controls, incident response procedures and periodic review of security measures.

No electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect personal data, we cannot guarantee absolute security.

We retain personal data only for as long as reasonably necessary for – the purpose for which it was collected, providing products/services, maintaining business and transaction records, resolving disputes, enforcing agreements, complying with legal obligations, taxation and accounting, fraud prevention, cybersecurity and establishing, exercising or defending legal claims. When personal data is no longer required, it may be deleted, anonymised or otherwise securely disposed of, subject to applicable legal and regulatory retention requirements.

Subject to applicable law, individuals may have rights in relation to their personal data, including rights relating to:

Access

You may request information regarding personal data processed by us, subject to applicable legal limitations.

Correction

You may request correction of inaccurate or incomplete personal data.

Erasure

You may request deletion of personal data where applicable under law and subject to lawful retention requirements.

Withdrawal of Consent

Where processing is based on consent, you may withdraw such consent.

Nomination

Where applicable under the DPDP Act, you may exercise the right to nominate another individual to exercise rights in accordance with applicable law. The DPDP Act expressly provides Data Principals with rights concerning access to information about processing and sharing of personal data, subject to the statutory framework.

If you have any complaint, concern or grievance regarding the collection, use, disclosure or processing of your personal data, you may contact our Company Officials through email: support@indianterrain.com. We shall review and address grievances in accordance with applicable law and our internal grievance-redressal procedures.

Our Website may use cookies and similar technologies. Cookies may be categorised as:

Essential Cookies

Required for Website operation, security, login, shopping cart, checkout and other essential functions.

Functional Cookies

Used to remember preferences and improve functionality.

Analytics Cookies

Used to understand Website traffic, user behaviour, page performance and Website usage patterns.

Advertising/Marketing Cookies

Where applicable, these may be used to measure advertising, deliver relevant marketing, understand campaign performance and manage digital advertising. Where required by law, non-essential cookies will be deployed only after obtaining the appropriate user choice/consent.

Our Website may contain links to third-party websites, applications, social-media platforms or services. Such third parties may have their own privacy policies. The Company does not control and is not responsible for the privacy practices, security or content of third-party websites. You should review the privacy policies of such third parties before providing personal data.

We may maintain accounts/pages on platforms such as – Instagram, Facebook, LinkedIn, YouTube, X, WhatsApp and other platforms. Interactions with such platforms are subject to the respective platform's privacy policies and terms. The Company may receive information made available to us through such platforms, subject to your privacy settings and applicable law.

We may send promotional e-mails, SMS, WhatsApp messages, push notifications, product announcements, promotional offers, event invitations; and other marketing communications. You may unsubscribe from marketing communications by clicking the unsubscribe option in an e-mail, using the relevant preference mechanism, contacting us or using any other mechanism provided by us. Even if you opt out of marketing communications, we may continue sending essential transactional or service-related communications.

Where individuals interact with the Company in their professional capacity, such as: vendors, distributors, franchisees, retailers, agents, service providers, business customers or other commercial partners, the Company may process professional contact information including name, designation, business e-mail, telephone number and business correspondence information for legitimate business purposes.

If you submit reviews, photographs, comments, testimonials, feedback or other content, you should ensure that such content does not contain unnecessary personal data of yourself or another individual. Where you voluntarily submit content for publication, such content may be displayed publicly depending on the functionality through which it was submitted and applicable terms.

You are responsible for providing accurate, complete and up-to-date personal data. You should promptly notify us if any information requires correction or updating. The Company may rely on the information provided by you unless there is reason to believe that it is inaccurate or incomplete.

We may amend or update this Policy from time to time due to: changes in law, regulatory developments, changes to our business, changes to our Website, introduction of new technologies, introduction of new products/services, changes in data-processing practices.

This Policy shall be governed by and construed in accordance with the laws of India.

By using the Website, submitting information through the Website, creating an account, placing an order or otherwise interacting with the Company, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires consent for a particular processing activity, the Company will obtain such consent through an appropriate mechanism.

Your continued use of the Website does not, by itself, constitute consent where applicable law requires a specific consent mechanism.