Privacy Policy

Tncarts (the "Website") is owned and operated by Everest Exports ("Company," "we," "us," or "our"). We are committed to protecting the privacy of your personal data. This Privacy Policy outlines how we collect, use, process, and protect your data when you use our Website and purchase our products.

By accessing or using the Website, you confirm that you have read and understood this Policy and consent to the practices described herein.

1. Key Definitions

Data Principal: This refers to the individual whose personal data is being processed (i.e., you, the user or customer).
Data Fiduciary: This refers to the legal entity, Everest Exports (operating Tncarts), that determines the purpose and means of processing your personal data.

2. Personal Data We Collect

We collect and process personal data that is either provided by you directly or collected automatically during your use of our services.

A. Information You Provide Directly

When you interact with our Website, especially during account creation or checkout, you provide us with:

Identity and Contact Data: This includes your full Name, Email Address, Phone Number, and account Sign-up details. We use this information to create and manage your user account, verify your identity, and communicate important updates regarding your orders or account status.
Transaction and Shipping Data: This includes your full Shipping Address, Billing Address, details of Products Purchased, and your Order History. This data is essential for processing, fulfilling, and ensuring the delivery of your orders, managing returns, and handling warranties.
Financial Data: This includes Payment Method details (such as the last four digits of the card), the Transaction ID, and Payment Confirmation. This data is used solely to process payments securely through our trusted third-party payment gateway, Razorpay, and manage billing records. Please note that we do not store your full credit/debit card numbers or sensitive financial information.
Communication Data: This includes records of any correspondence, feedback, or responses to surveys you provide. We use this to offer customer support, resolve any concerns you might have, and generally improve our service quality.

B. Automatically Collected Data (Technical and Usage)

When you browse our Website, we automatically collect:

Technical Information: This includes your IP Address, Device Identifier, Browser Type, Operating System, and the referring website that brought you to Tncarts.
Usage Information: This includes information about how you use our site, such as the time spent on specific pages and your overall navigation path. This data helps us improve the Website's functionality, analyze user behavior, and prevent fraudulent activity.

3. Lawful Basis and Purpose of Processing

We only process your personal data when we have a legal basis to do so, primarily under the DPDPA. These bases include:

Contractual Necessity: We process your Name, Address, and Transaction Data because it is necessary to perform the sales contract—to confirm your purchase, process the payment, and deliver the goods to you.
Consent: We process your data (e.g., Email Address) for activities like marketing and promotional communications only after obtaining your clear, informed, and unambiguous consent through a clear affirmative action, such as ticking a checkbox. You have the right to withdraw this consent at any time.
Legal Obligation: We process and retain certain transaction and identity data to comply with mandatory laws, such as tax regulations and reporting requirements.

4. How We Share Your Personal Data

We do not sell your personal data. We only share it with carefully selected third-party partners to facilitate our services:

Payment Gateway: We share necessary Financial Data with our payment gateway, Razorpay, to securely process your transactions.
Logistics Partners: We share your Name, Shipping Address, and Phone Number with our trusted courier services to enable them to pick up and deliver your order and provide delivery updates.
IT Service Providers: We share Technical and Usage Data with service providers who help us host the Website, run analytics, and maintain security.
Legal Compliance: We may share data when required by a legal obligation, court order, or governmental authority to establish, exercise, or defend our legal rights.

5. Cookies and Tracking Technologies

The Tncarts Website utilizes essential and non-essential cookies and similar tracking technologies. These small text files are placed on your device to remember your preferences, keep track of items in your shopping cart, and help us analyze how our site is performing. We will provide a mechanism to seek your explicit and informed consent for the use of non-essential cookies. You are free to manage or decline these cookies through your browser settings or our consent tool.

6. Data Security and Retention

Data Security

We implement robust technical and organisational security measures to protect your personal data against unauthorized access, loss, misuse, or alteration. These measures include data encryption, secured servers, firewalls, and strict internal access controls that limit personal data access only to employees who need it for their job roles.

Data Retention

We retain your personal data only for the period necessary to fulfil the purposes outlined in this Policy, or as required by law. Once the data is no longer necessary, we ensure it is securely destroyed or anonymized so that it can no longer be associated with you.

7. Your Rights as a Data Principal (DPDPA Rights)

Under the Digital Personal Data Protection Act, 2023, you have significant rights regarding your personal data processed by Everest Exports:

Right of Access: You can request a summary of your personal data being processed and details about our processing activities.
Right to Correction/Completion: You can request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure/Withdrawal of Consent: You have the right to withdraw your consent at any time. The withdrawal will not affect processing carried out before the withdrawal. Upon withdrawal, we will cease processing and erase your data, unless we are legally required to retain it.

To exercise any of these rights, please contact us using the information provided in Section 8.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us immediately using the details in Section 9.

9. Contact Information

For any privacy-related questions, concerns, or requests to exercise your rights, please contact us:

Contact Name/Department: Manikkam P
Email Address: info.everestexports@gmail.com

10. Policy Updates

We may update this Privacy Policy from time to time to adapt to new legal requirements or changes in our business practices. We will notify you of any major changes by updating the "Effective Date" at the top of this document. Your continued use of the Website after any change indicates your acceptance of the new Policy.