This policy explains what personal data primeunlock collects through PrimeUnlock, why we collect it, and the control you have over it. It is published under the Information Technology Act, 2000 and the rules made under it, and reflects the principles of the Digital Personal Data Protection Act, 2023.
1. What we collect
You give us: your name, email address and phone number at checkout, an order note if you write one, and your password (stored only as a one-way hash) if you create an account.
Collected automatically: your IP address in hashed form, browser and device type, the pages you view, and a session cookie that keeps your cart and login working.
We never collect: your full card number, CVV, UPI PIN or netbanking password. Those go directly to the payment gateway and never reach our servers. We receive only a payment reference and a success or failure result.
2. Why we use it
To process and deliver your order, to confirm payment with the gateway, to send order and delivery emails, to answer support requests, to detect fraud and abuse, to meet tax and accounting obligations, and — only if you subscribe — to send occasional offers.
The lawful basis is the performance of the contract you enter when you order, our legitimate interest in preventing fraud, our legal obligations, and your consent where consent is what applies.
3. Who we share it with
Our payment gateway, Cashfree Payments, receives the details needed to process the payment. Our hosting provider stores the site and its database. Our email provider delivers transactional email. Where a product is fulfilled by an upstream supplier, we pass on only what that supplier needs to issue the code.
We also disclose data where a court, tax authority or law enforcement agency lawfully requires it.
We do not sell your personal data, and we do not share it with advertisers.
4. Cookies
We use a session cookie to keep you signed in and your cart intact. It is essential to the site working and is not used for advertising or cross-site tracking. Blocking it will break checkout.
5. How long we keep it
Order records are kept for eight years to satisfy Indian tax and accounting requirements. Account data is kept while your account is open. Newsletter data is kept until you unsubscribe.
6. Security
The site runs over HTTPS. Passwords are hashed with bcrypt and are not recoverable by us or by anyone with database access. Administrative areas require authentication, forms are protected against cross-site request forgery, and payment credentials never touch our servers.
No system is perfectly secure. If a breach affects your data we will notify you and the relevant authority as required by law.
7. Your rights
You may ask us to show you the data we hold about you, correct anything inaccurate, delete your account and data, withdraw consent for marketing, or take your data elsewhere. Write to primeunlock@gmail.com and we will respond within 30 days.
Deletion requests are honoured except where we must retain order records for the statutory tax period described above.
8. Children
This site is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
9. Changes
Material changes to this policy will be posted on this page with a new effective date.
10. Contact
Privacy questions and data requests: primeunlock@gmail.com. Unresolved complaints go to the grievance officer named on the Contact & Grievance page.