Privacy Policy
Effective Date: 12-05-2024
Last Updated: 12-05-2024
Quotopia Solutions Private Limited (“Quotopia,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect on books.Quotopia.in (the “Website”), why we collect it, how we use and share it, the rights you have, and how to contact us. This Policy is written in clear, professional language and is intended to be suitable for users in India and internationally.
1. Scope & Who We Are
1.1 Controller. The data controller for personal data collected via the Website is:
Quotopia Solutions Private Limited (registered in India).
1.2 This Policy applies to personal data collected when you visit, register, purchase, or otherwise interact with the Website and our services (digital products, future physical products, emails, support, etc.).
2. What Personal Data We Collect
We collect only the personal data necessary to provide our services. This may include:
a. Account & Order Information
- Full name, email address, phone number, postal address (when supplied), username, and password (securely stored).
b. Transaction & Payment Information
- Order details and payment confirmation. We do not store your full payment card data — payments are processed by secure third-party payment gateways. We may retain transaction identifiers and receipts for our records.
c. Technical & Usage Data
- IP address, device information, browser type and version, operating system, pages visited, referral source, cookies, timestamps, and analytics data.
d. Communications
- Customer support queries, emails, chat transcripts, feedback, and any content you voluntarily provide (including reviews or attachments).
e. Optional / Sensitive Data
- If you voluntarily provide health-related information (for example, when purchasing health-related products such as medication), we will treat it as sensitive personal data and process it only with your explicit consent and in accordance with applicable law.
3. How We Use Your Personal Data (Purposes)
We use personal data for the following lawful purposes:
- Service delivery & order fulfilment: Process purchases, deliver digital download links (via email/login), and ship physical products (if applicable).
- Account management: Create and manage your account, authentication, and support.
- Communications: Send order confirmations, transactional messages, product updates, security alerts, and promotional messages (where you consent).
- Customer support: Respond to requests, resolve disputes, and provide assistance.
- Fraud prevention & security: Detect and prevent fraudulent or illegal activity.
- Analytics & product improvement: Understand usage, improve offerings, and perform aggregated analysis.
- Legal compliance: Comply with legal obligations, tax and accounting, and enforce our Terms of Service.
We rely on a combination of legal bases to process data (contractual necessity, legitimate interests, consent where required, and compliance with legal obligations).
4. Cookies & Tracking Technologies
We and our third-party partners use cookies and similar technologies to personalize your experience and collect analytics. Types:
- Essential cookies: Required for site functionality (e.g., login, shopping cart).
- Analytical cookies: Help us understand use (e.g., Google Analytics).
- Marketing cookies: For personalized ads and marketing (used only with consent where required).
You can manage cookie preferences via the cookie banner on the Website or through your browser settings. Disabling certain cookies may affect site functionality.
5. Sharing Data with Third Parties
We may share personal data with:
- Service providers (payment gateways, hosting providers, email delivery services, analytics providers, customer support platforms) to support operations.
- Professional advisors (lawyers, auditors) when necessary.
- Affiliated companies where required for operations.
- Authorities where required by law, court order, or to prevent fraud and illegal activities.
We require third parties to protect your data and process it only for specified purposes. When payments are processed, card and sensitive payment details are handled by the payment gateway — not stored on our servers.
6. International Transfers
As a global-facing site, your data may be transferred to, stored in, or processed in countries other than your country of residence. Where transfers occur, we take appropriate measures (e.g., contractual safeguards, approved transfer mechanisms) to protect your data in accordance with applicable law.
7. Data Retention
We retain personal data only for as long as necessary:
- Order & transaction records: retained for statutory/tax compliance and accounting — typically up to 7 years.
- Account data: retained until you delete your account, plus a retention period of up to 7 years for legal or legitimate purposes.
- Support and communications: retained for as long as needed to resolve issues and comply with legal obligations.
- Logs & analytics: retained for a limited period (e.g., 12–24 months) for operational and analytical needs.
If you request deletion, we will remove data that we are not legally required to keep; however, transactional records required for tax/accounting may be retained.
8. Your Rights
Depending on your jurisdiction, you may have rights including:
- Right to access the personal data we hold about you.
- Right to rectification if data is inaccurate or incomplete.
- Right to deletion (subject to legal retention obligations).
- Right to restriction or objection to processing (including direct marketing).
- Right to data portability for information you provided in structured, commonly used formats.
- Right to withdraw consent where processing is based on consent.
How to exercise your rights: Email us at [Insert Privacy Contact Email] with the subject line “Data Subject Request” and a description of your request. To protect privacy, we may need to verify your identity. We will respond within a reasonable time (no more than 30 days, or longer if permitted by law) and inform you of any extension.
9. Marketing & Promotional Communications
We may use your contact details to send promotional materials if you opt in. You can opt out at any time by clicking “unsubscribe” in marketing emails or by contacting us at [Insert Privacy Contact Email]. Transactional emails (order confirmations, security alerts) are not optional.
10. Children’s Privacy
The Website is not intended for persons under 18 years. We do not knowingly collect personal data from children under 18. If we learn we have collected such data without parental consent, we will delete it. If you believe we may have collected information from a child, contact us immediately.
11. Security
We implement reasonable technical and organisational measures to protect personal data (encryption at rest/in transit, access controls, secure hosting, regular security reviews). No internet transmission or storage is 100% secure; while we strive to protect your data, we cannot guarantee absolute security.
In the event of a data breach that poses a risk to your rights, we will notify affected individuals and regulators as required by applicable law.
12. Sensitive Personal Data & Health-Related Data
If you provide health-related information (e.g., when purchasing medication or health products), we will only process such data with your explicit consent and for the limited purposes necessary to fulfill your order or provide the service. We will take extra precautions to handle sensitive data securely.
13. Third-Party Links & Embedded Content
The Website may contain links to third-party sites or embedded content (e.g., video, social media). This Policy does not apply to those third parties. Please review their privacy policies before providing personal data.
14. Changes to this Policy
We may update this Policy periodically. We will post the updated Policy on the Website with a revised Last Updated date. Material changes will be communicated where required by law (e.g., by email to users).
15. Governing Law & Dispute Resolution
This Policy and our processing of personal data are governed by the laws of India. Any disputes will be subject to the jurisdiction of courts in [Insert Your City, Maharashtra].
16. Contact Information (Data Protection Contact)
For questions, privacy requests, or complaints, contact:
Data Protection Officer / Privacy Contact
Email: Support@quotopia.in