Privacy Policy

1. Introduction

This Privacy Policy describes how SignalBox Solutions Pvt. Ltd. ("we", "us", "our"), operating signalbox.store, collects, uses, stores, and protects your personal information. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

2. Information We Collect

We collect the following categories of personal data:

• Identity Data: Name, email address, phone number
• Address Data: Shipping address, city, state, PIN code
• Transaction Data: Order details, payment method (UPI/COD), order history
• Technical Data: IP address, browser type, device information, cookies
• Communication Data: Contact form messages, support correspondence

3. Purpose of Data Collection

We collect and process your data for:

• Processing and fulfilling your orders
• Sending order confirmations and shipping updates via email
• Providing customer support and resolving grievances
• Improving our website functionality and user experience
• Complying with legal and regulatory obligations
• Analytics (via Google Analytics GA4) to understand usage patterns

4. Consent

By using our website and providing your personal information, you consent to the collection and use of your data as described in this policy. You may withdraw consent at any time by contacting us, though this may affect our ability to provide services to you.

5. Data Storage & Security

Your data is stored on secure servers. We implement industry-standard security measures including SSL/HTTPS encryption, secure database access controls, and regular security audits. We do not store payment card data in compliance with RBI tokenisation guidelines. UPI payments are processed through our PCI-compliant payment gateway partner.

6. Data Retention

We retain personal data only as long as necessary: order data is retained for 3 years for legal and tax compliance, communication data for 1 year, and technical data for 6 months. You may request deletion of your data at any time, subject to legal retention requirements.

7. Data Sharing

We do not sell your personal data. We share data only with: payment gateway providers (for processing payments), logistics partners (for order delivery), and legal authorities (when required by law). All third-party partners are bound by confidentiality agreements.

8. Cookies

Our website uses essential cookies for cart functionality and session management. We also use Google Analytics for anonymous usage statistics. You can manage cookies through your browser settings.

9. Your Rights (under DPDP Act, 2023)

As a data principal, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request erasure of your personal data
• Withdraw consent for data processing
• Nominate a person to exercise rights on your behalf
• Lodge a complaint with the Data Protection Board of India

10. Children's Privacy

Our website is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11. Grievance Officer

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.