Privacy & Security Policy

1. Information We Collect

1.1 Information You Provide to Us

We collect personal information that you voluntarily provide when you:

• Create an account or register: Name, address, telephone/mobile number, email address
• Make a purchase: Billing and shipping addresses, payment information (credit/debit card details, UPI information, net banking details)
• Contact customer service: Communication preferences, feedback, reviews, and correspondence

1.2 Information Automatically Collected

When you access our Platform, we automatically collect:

• Usage Information: Pages visited, time spent on pages, links clicked, search queries, referring/exit pages
• Location Information: Approximate geographic location based on IP address or precise location if you grant permission
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, pixels, and similar technologies (see our Cookie Policy below)

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions: Transaction verification and fraud prevention data
• Logistics partners: Delivery status and tracking information
• Social media platforms: If you connect your social media accounts or interact with our social media presence
• Marketing partners: Demographic and interest data for targeted advertising
• Publicly available sources: Information from public records and databases for verification purposes

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Service Delivery

• Process and fulfill your orders
• Manage your account and provide customer support
• Communicate order status, shipping updates, and delivery information
• Process payments and prevent fraudulent transactions

2.2 Platform Improvement

• Personalize your shopping experience and provide relevant product recommendations
• Analyze usage patterns to improve Platform functionality and user experience
• Conduct research, analytics, and data analysis to enhance our services
• Test new features and optimize Platform performance

2.3 Marketing and Communication

• Send promotional offers, newsletters, and marketing communications (you may opt-out at any time)
• Inform you about new products, services, features, and updates
• Conduct surveys and request feedback
• Display targeted advertisements based on your interests and browsing behavior

2.4 Legal and Security

• Comply with legal obligations and respond to lawful requests from authorities
• Enforce our Terms of Use and other policies
• Detect, prevent, and investigate fraud, security breaches, and prohibited activities
• Protect the rights, property, and safety of New Era, our users, and the public

2.5 Business Operations

• Manage vendor and seller relationships
• Process returns, refunds, and exchanges
• Maintain business records and conduct audits
• Facilitate business transfers such as mergers or acquisitions

3. Legal Basis for Processing (for applicable jurisdictions)

We process your personal data based on:

• Consent: When you have given explicit consent for specific processing activities
• Contract Performance: To fulfill our contractual obligations to you
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: For our business operations, fraud prevention, and improving our services, provided your rights do not override these interests

4. How We Share Your Information

We may share your personal information with:

4.1 Internal Sharing

• Our group entities, subsidiaries, and affiliates for business operations and providing integrated services

4.2 Service Providers

• Payment processors: To process transactions securely
• Logistics partners: For order fulfillment and delivery
• Technology service providers: For Platform hosting, maintenance, and data storage
• Marketing agencies: For advertising and promotional campaigns
• Customer service providers: For support and communication services
• Analytics providers: For data analysis and Platform improvement

4.3 Legal and Compliance

• Government agencies, law enforcement, and regulatory authorities when required by law
• Legal counsel and auditors for compliance and dispute resolution
• In response to subpoenas, court orders, or legal processes

4.4 Business Transfers

• In connection with mergers, acquisitions, asset sales, or corporate restructuring (users will be notified of any such changes)

4.5 With Your Consent

• Any other third parties when you provide explicit consent

5. Data Security

We implement industry-standard security measures to protect your personal information:

5.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• Secure server infrastructure with firewalls and intrusion detection systems
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Data encryption at rest for sensitive information

5.2 Organizational Safeguards

• Employee training on data protection and privacy
• Confidentiality agreements with employees and contractors
• Limited access to personal data on a need-to-know basis
• Incident response procedures for data breaches

5.3 Your Responsibility

• Keep your account credentials confidential
• Use strong, unique passwords
• Log out after using shared devices
• Monitor your account for unauthorized activity
• Report suspicious communications claiming to be from New Era

6. Cookies and Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services.

6.2 Types of Cookies We Use

• Essential Cookies: Required for Platform functionality (login, shopping cart, payment processing)
• Performance Cookies: Collect information about Platform usage to improve performance
• Functionality Cookies: Remember your preferences and settings

6.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. For more details, refer to our separate Cookie Policy or adjust your preferences in the Cookie Settings section of the Platform.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Correction

• Access your personal data through your account settings
• Update or correct inaccurate information
• Request a copy of your personal data in a portable format

7.2 Deletion

• Delete your account through Profile Settings
• Request deletion of specific personal information (subject to legal retention requirements)
• Note: Account deletion results in loss of all account-related information

7.3 Consent Withdrawal

• Opt-out of marketing communications via unsubscribe links or account settings
• Withdraw consent for optional data processing activities
• Note: Withdrawal of consent is not retrospective and may affect service availability

7.4 Objection and Restriction

• Object to processing based on legitimate interests
• Request restriction of processing in certain circumstances

7.5 Complaint

• Lodge a complaint with our Grievance Officer (details below)
• Contact relevant data protection authorities if you believe your rights have been violated

To exercise your rights: Contact our Grievance Officer using the details provided in Section 11 or use the privacy controls available in your account settings.

8. Data Retention

8.1 Retention Period

We retain your personal information for as long as necessary to:

• Provide you with services
• Comply with legal, regulatory, tax, or accounting requirements
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse

8.2 Retention Criteria

Specific retention periods depend on:

• The nature of the information
• Purpose for which it was collected
• Legal and regulatory requirements
• Legitimate business needs

8.3 Post-Deletion

After account deletion or expiry of retention periods:

• Personal data is securely deleted or anonymized
• Anonymized data may be retained for analytics and research
• Some data may be retained in backup systems for a limited period

8.4 Exceptions

We may retain data longer if:

• Required by law or legal proceedings
• Necessary to prevent fraud or future abuse
• For legitimate business purposes (e.g., pending transactions, disputes)

9. Children's Privacy

Our Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. Third-Party Links and Services

Our Platform may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information. This Privacy Policy applies only to information collected by New Era through our Platform.

11. Grievance Redressal

How to Contact Us

For privacy-related queries, complaints, or to exercise your rights:

• Email the Grievance Officer at the address above
• Use the "Contact Us" form on our Platform
• Write to us at the registered address

We will acknowledge your complaint within 48 hours and strive to resolve it within 30 days.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our data practices
• New legal or regulatory requirements
• Platform enhancements or new features
• Feedback from users and stakeholders

How We Notify You

• Significant changes will be notified via email or prominent Platform notice
• Continued use of the Platform after changes constitutes acceptance
• We recommend reviewing this policy periodically

Last Updated: [Insert Date]
Effective Date: [Insert Date]

13. Specific Disclosures for Marketing Communications

Email Marketing

• We send promotional emails only to users who have opted in
• Every marketing email includes an unsubscribe option
• We honor opt-out requests within 10 business days

SMS Marketing

• We send SMS only with explicit consent
• Reply "STOP" to opt-out of future messages
• We do not send unsolicited promotional SMS

Phone Calls

• We may call you regarding orders, account issues, or with your consent for promotional purposes
• You may request to be added to our Do Not Call list

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights and interests:

• We will notify affected users within 72 hours of discovery
• Notification will include the nature of the breach, data affected, and remedial measures
• We will report to relevant authorities as required by law

15. Your California Privacy Rights (If Applicable)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). [Include relevant CCPA disclosures if you serve California customers]

16. Consent

By using our Platform, you consent to:

• Collection, use, and processing of your information as described in this Privacy Policy
• Transfer of your information to service providers and partners
• Receiving communications from us (with opt-out rights)
• Cookies and tracking technologies as described