Privacy Policy

§ 1.What we collect

There are five ways personal data reaches us. Each subsection below states exactly what is collected in that channel, and nothing that is not.

§ 2.What we do not do

The following commitments are absolute. If any one of them changes, this page is updated on the same day.

• We do not sell your personal data to any party, for any purpose.
• We do not run auto-dial telemarketing or bulk-SMS marketing lists using the data you submit through this website.
• We do not use the mobile number you provide for any purpose other than replying to the enquiry you sent.
• We do not share the contents of your form submissions with brands, distributors, or any third party other than the processors listed in Section 3.
• We do not ask for your Aadhaar, PAN, bank details, or any government-issued ID anywhere on this website. Those documents are collected only at the shop's physical counter for EMI purchases, and even then are shared directly with the finance partner, not stored by the shop.

§ 3.Third parties and processors

The following external service providers process data on our behalf. Each one is named below with a description of what it sees and why. Opt-out routes for the tracking-related processors are in Section 5.

Website hosting

Vercel (vercel.com) hosts this website and processes the server access logs described in Section 1. Data is stored in Vercel's regional infrastructure per their own terms.

Resend: transactional email delivery

When you submit a form, Resend (resend.com) delivers the notification email to our lead inbox. Resend sees the field contents in transit to route the email, and does not use that data for its own marketing purposes.

Google: Google Analytics 4

Google processes the analytics events described in Section 1 per Google's own privacy terms. See Section 5 for cookies and opt-out.

Meta Platforms: Facebook Pixel

Meta processes the advertising-measurement events described in Section 1 per Meta's own privacy terms. See Section 5 for cookies and opt-out.

§ 4.Retention and security

Personal data is retained only for as long as it is needed for the purpose for which it was collected. If you wish to have your data deleted sooner, contact us using Section 8 and reference your right to erasure in Section 6.

How long we keep data

• Sell-your-phone form submissions: deleted 30 days after the enquiry is closed.
• Wholesale enquiry submissions: deleted 90 days after our last correspondence with you.
• WhatsApp chat history: retained subject to WhatsApp's own retention behaviour and any copies kept on the shop's devices for reference.
• Website analytics data: 2 months as configured in Google Analytics 4, and per Meta's default event-data retention in the Meta Ads Manager.
• Server access logs: 30-day rolling window at the hosting provider.

How data is kept secure

• The website is served over HTTPS end-to-end; traffic between your device and our servers is encrypted in transit.
• Form submissions are transmitted server-to-server via Resend; no third-party client-side script has access to their contents.
• Access to the lead-notification inbox is limited to named individuals at the shop.
• The shop does not store personal data on Instagram, does not archive WhatsApp chats beyond what the platform retains and what is saved on the shop's own device, and does not export data to any system outside those disclosed in Section 3.

§ 5.Cookies and tracking

The site uses two categories of cookies. You control both: through the consent banner shown on your first visit, and through your browser settings at any time thereafter.

Strictly necessary cookies

A small number of cookies keep the site running (for example, remembering your consent choice on the banner). These cannot be disabled without breaking core functionality.

Analytics cookies: Google Analytics 4

Cookies set by Google to count sessions, page visits, and referrers. You can decline these from the consent banner on your first visit, block them from your browser's cookie settings, or install Google's own opt-out browser add-on.

Advertising cookies: Meta Pixel

Cookies set by Meta for advertising measurement and audience building. You can decline these from the consent banner, block them from your browser, or manage them from your Facebook and Instagram ad-preference settings.

A cookie-consent banner is shown on your first visit. It offers three equally prominent choices (Accept all, Reject all, or Customise per category), with Analytics and Advertising both off by default. Your choice is stored in this browser only, and can be changed or fully withdrawn at any time from the "Cookie preferences" link in the site footer. Until you affirmatively opt in, the analytics and advertising cookies described above are not set on your device.

§ 6.Your rights under DPDPA 2023

Under India's Digital Personal Data Protection Act, 2023 you have the following rights in relation to the personal data we hold about you. To exercise any of them, email the address in Section 8. We will acknowledge your request within 7 days.

1. 6.1Right to access

   You may request a summary of the personal data we hold about you and the purposes for which it has been used.

2. 6.2Right to correction

   You may request that we correct personal data about you that is inaccurate, incomplete, or misleading.

3. 6.3Right to erasure

   You may request that we delete your personal data. We will comply, except where retention is required by law (for example, invoicing records associated with a completed sale).

4. 6.4Right to withdraw consent

   Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. 6.5Right to nominate

   You may nominate another individual to exercise these rights on your behalf in the event that you become incapacitated or deceased.

6. 6.6Right to grievance redressal

   If you are dissatisfied with our response to any of the above, you may contact our Grievance Officer (Section 7). If the matter remains unresolved, you may escalate to the Data Protection Board of India.

§ 7.Grievance Officer

The Grievance Officer designated by Shri Sai Mobile for the purposes of the DPDPA 2023 is Ashish Soni. Grievances may be sent by email to privacy@2ndhandwala.com with the subject line "Grievance: Privacy". We will acknowledge every grievance within 7 days and provide a substantive response as promptly as reasonably practicable.

§ 8.Contact and changes

Any question about this Privacy Policy, any request to exercise the rights described in Section 6, or any concern about how personal data has been handled should be sent by email to privacy@2ndhandwala.com. This inbox is monitored by Mr. Ashish Soni at the shop.

Changes to this Policy

This Policy is updated whenever the way we collect or handle personal data changes in a material way. When we make such a change, we update the Effective Date shown at the top of this page and, for significant changes, mention it the next time we correspond with you.