This is in compliance with Digital Personal Data Protection Act, 2023 and Information Technology Act, 2000.

Last Updated: 2026

This Privacy Policy describes how Carbone One (“we”, “our”, “us”), acting as a Data Fiduciary, collects, uses, processes, and protects your personal data when you access our website or purchase our products.

By using our website or services, you (“you”, “your”, “Data Principal”) consent to the collection and processing of your personal data in accordance with this Privacy Policy and applicable Indian laws.

1. Notice and Consent

By accessing our website or providing your personal data, you provide free, specific, informed, and unambiguous consent to the collection and processing of your personal data for the purposes outlined in this Privacy Policy.

You have the right to withdraw your consent at any time, as detailed in Section 7.

2. Information We Collect

We collect only such personal data as is necessary for lawful purposes.

1. a) Personal Information

• Full name
• Email address
• Phone number
• Shipping and billing address
• Any other information voluntarily provided by you

1. b) Payment Information

We do not store your payment details. Payments are securely processed through RBI-compliant third-party payment gateways.

1. c) Usage / Non-Personal Information

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Cookies and analytics data

3. Purpose of Processing (How We Use Your Data)

Your data is processed strictly for lawful purposes, including:

• Order Fulfilment: Processing, shipping, and delivering your orders
• Customer Support: Addressing queries, complaints, and service requests
• Service Improvement: Enhancing website performance and user experience
• Marketing Communications: Sending promotional content only with your consent
• Security & Fraud Prevention: Detecting and preventing unauthorized activity
• Legal Compliance: Meeting obligations under applicable laws

We do not process your personal data for any purpose that is not disclosed to you.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable core website functionality
• Remember user preferences
• Analyze traffic and improve services

You may disable cookies via your browser settings; however, certain features of the website may not function properly.

5. Sharing and Disclosure of Personal Data

We do not sell or rent your personal data.

We may share your data only with:

• Authorized Service Providers: Logistics partners, payment gateways, analytics and IT service providers
• Business Transfers: In case of merger, acquisition, or restructuring
• Legal Authorities: Where required under applicable law or valid legal process

All third parties are contractually bound to maintain confidentiality and security of your data.

6. Data Security Safeguards

We implement reasonable security practices and procedures as required under applicable Indian law, including:

• Secure servers and encryption protocols
• Restricted access to personal data
• Periodic review of security systems

However, no system is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to:

• Fulfil the purpose for which it was collected
• Comply with legal and regulatory obligations
• Resolve disputes and enforce agreements

Upon completion of the purpose, your data will be deleted or anonymized, unless retention is required by law.

8. Your Rights as a Data Principal

Under applicable Indian law, you have the right to:

• Access Information: Request details of personal data processed by us
• Correction & Updating: Rectify inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Withdraw Consent: At any time for future processing
• Grievance Redressal: Lodge complaints regarding data processing

To exercise these rights, please contact us as per Section 12.

9. Children’s Privacy

Our website and products are not intended for individuals under the age of 18.

We do not knowingly collect personal data from children. If such data is identified, it will be deleted promptly.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Users are advised to review their respective privacy policies.

11. Data Breach Notification

In the event of a personal data breach, we will take reasonable steps to:

• Notify relevant authorities as required under law
• Inform affected users, where applicable

12. Grievance Redressal Mechanism

In accordance with applicable law, you may contact our Grievance Officer for any concerns related to data processing.

Grievance Officer: [Insert Name]
Email: [Insert Official Email ID]
Address: [Insert Registered Business Address]

We will acknowledge and resolve grievances within a reasonable time as required by law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date.

Continued use of our services constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions regarding this Privacy Policy or your data, please contact:

Carbone One
Email: [Insert Official Email ID]