Last updated: 9 September 2026

​

1. Who we are

INDAL KP, a sole proprietorship registered under Udyam Registration No. UDYAM-BR-26-0131252, operating from Behind MIG-185, Hanuman Nagar, Kankarbagh, Patna Sadar, Patna – 800020, Bihar, India, is the data fiduciary responsible for personal data collected through www.indalkp.com.

This policy explains what we collect, why, how long we keep it, and what rights you have. It is written to comply with the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.

​

2. What we collect

Information you give us

• Name, email address and phone number

• Billing and, where a physical item is involved, shipping address

• Project briefs, reference material and files you upload

• Messages you send through forms, chat or email

• Account credentials, where you create an account

Information collected automatically

• IP address, approximate location derived from it, browser and device type

• Pages visited, time on page, referring URL

• Cookies and similar technologies (see section 7)

Payment information

Card numbers, UPI IDs, CVV and net-banking credentials are collected and processed directly by Razorpay, our RBI-authorised payment aggregator. We never see or store them. We receive only the transaction outcome, a masked reference and the amount.

​

3. Why we use it

PurposeWhat it covers

Fulfilling your orderDelivering files, granting access, running bookings

PaymentsProcessing, confirming and reconciling transactions

SupportAnswering questions, resolving disputes, handling refunds

Legal complianceTax records, statutory retention, responding to lawful requests

Improving the WebsiteUnderstanding which pages and products are useful

MarketingSending updates and offers — only with your consent, and always with an unsubscribe link

We do not use your data for automated decision-making that produces legal effects, and we do not sell your personal data to anyone.

​

4. Legal basis

We process personal data on the basis of your consent, the necessity of performing a contract with you, our legitimate interest in operating and securing the Website, and compliance with legal obligations.

​

5. Who we share it with

We share personal data only with parties who need it to make the Website work:

RecipientRole

Wix.com Ltd.Website hosting, store, bookings, email marketing

Razorpay Software Private LimitedPayment processing

Google (Analytics, Workspace)Website analytics, business email

Courier or delivery partnersOnly where a physical item is shipped

Professional advisersAccountant or legal adviser, where required

Government authoritiesWhere required by law, court order or a valid legal request

Each of these processes data under its own privacy policy and its contract with us. Some are located outside India; where data is transferred abroad, we take reasonable steps to ensure comparable protection.

We do not sell, rent or trade your personal data.

​

6. How long we keep it

DataRetention

Order and transaction records8 years, for tax and accounting compliance

Account and profile dataWhile your account is active, plus 1 year

Project files and briefs2 years after project completion, unless you ask us to delete sooner

Marketing contactsUntil you unsubscribe

Support correspondence3 years

Analytics dataUp to 26 months, in aggregated form

After these periods data is deleted or irreversibly anonymised.

​

7. Cookies

The Website uses cookies to keep you signed in, remember your cart, and understand how the site is used.

• Strictly necessary — required for the site, cart and checkout to function. These cannot be switched off.

• Analytics — help us see which pages and products people use.

• Marketing — used only if you consent, to measure campaigns.

You can refuse or delete cookies through your browser settings. Blocking strictly necessary cookies will break checkout and login.

​

8. Security

We use HTTPS across the entire site, rely on Wix's managed hosting infrastructure, keep administrative access limited to the proprietor, and use strong authentication on all business accounts. Payment data never touches our systems.

No method of transmission over the internet is completely secure. While we take reasonable and appropriate safeguards, we cannot guarantee absolute security. If a breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.

​

9. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you

• Correct data that is inaccurate, incomplete or out of date

• Erase your data, where we are not legally required to keep it

• Withdraw consent at any time, without affecting processing already carried out

• Object to marketing communications, at any time

• Nominate another person to exercise these rights on your behalf in the event of death or incapacity

• Complain to us, and thereafter to the relevant statutory authority

To exercise any of these, email indalkp@gmail.com with the subject line "Privacy Request". We respond within 30 days. We may ask you to verify your identity before acting on a request.

​

10. Children

The Website is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

​

11. Third-party links

The Website links to external platforms. Once you leave www.indalkp.com, this policy no longer applies. Please read the privacy policy of any site you visit.

​

12. Changes to this policy

We may update this policy. The "Last updated" date at the top shows when. Material changes will be notified by email or a prominent notice on the Website.

​

13. Grievance Officer

Name: Indal Kumar Patel Designation: Proprietor & Grievance Officer Email: indalkp@gmail.com Phone: +91 98527 16519 Address: Behind MIG-185, Hanuman Nagar, Kankarbagh, Patna Sadar, Patna – 800020, Bihar, India

Grievances are acknowledged within 48 hours and resolved within 30 days.