Privacy Policy
Digital PDF Online Store — Your Privacy. Our Responsibility.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or make a purchase from our Platform. By using this Platform, you consent to the practices described in this Policy.
Section 1
Introduction
Welcome to SecureIAM Guides ("Platform"), an online store selling digital PDF guide products. We are committed to protecting your privacy and handling your personal data with the highest standards of security, transparency, and care.
This Privacy Policy ("Policy") describes how SecureIAM Guides ("We", "Us", "Our", or "Seller") — the Data Fiduciary under the Digital Personal Data Protection Act, 2023 — collects, processes, stores, shares, and protects the personal data of our customers and website visitors ("You", "Your", or "Data Principal").
This Policy is issued in compliance with the following Indian legislation and applicable international standards:
- Digital Personal Data Protection Act, 2023 (DPDPA)
- Information Technology Act, 2000 (IT Act)
- IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020
- Central Goods and Services Tax Act, 2017 (for financial record requirements)
Section 2
Scope of This Policy
This Policy applies to all personal data we collect through:
- Your visits to and use of our website at secureiam.in
- Your registration of an account or subscription to our mailing list
- Your purchase of any digital PDF product from our Platform
- Your communication with us via email, contact forms, or support channels
- Cookies, analytics tools, or tracking technologies deployed on the Platform
Third-Party Sites Not Covered
Section 3
Personal Data We Collect
We collect only the minimum personal data necessary to provide our services, process your orders, and fulfill our legal obligations.
3.1 Data You Provide Directly
3.2 Data Collected Automatically
3.3 Data We Do NOT Collect
We Never Collect
Section 4
How We Use Your Personal Data
We process your personal data only for specific, clear, and lawful purposes:
Process purchase & deliver product
Send order confirmation & download link
Generate & issue GST tax invoices
Provide customer support
Fraud detection & platform security
Send marketing emails (with consent)
Analyze traffic & improve Platform
Anti-piracy & license enforcement
We Never Sell Your Data
Section 5
How We Share Your Personal Data
5.1 Third-Party Service Providers
Payment Gateway Providers
Razorpay, PhonePe, or similar RBI-regulated processors — to process your payment transaction securely.
Email Delivery Services
Resend or similar ESPs — to deliver transactional and marketing emails with appropriate data processing agreements.
Analytics Providers
Google Analytics or similar — receives anonymized/pseudonymized browsing data for website performance analysis. No PII is shared for analytics.
Cloud Storage / Hosting
Web hosting and file delivery providers — store encrypted Platform data and facilitate product downloads.
5.2 Legal Disclosures
We may disclose your personal data to government authorities, law enforcement agencies, or courts if required by a court order, subpoena, lawful government request, obligations under PMLA 2002 or FEMA, or any other applicable Indian statute. We will, where permissible, notify you before complying.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of our business, your personal data may be transferred to the acquiring entity subject to the same privacy protections. We will notify you via email before your data is transferred.
Section 6
Data Storage, Retention & Security
6.1 Where Your Data Is Stored
Your personal data is primarily stored on servers located in India or on platforms compliant with applicable Indian data localisation requirements. Where data is stored outside India, such transfers occur in compliance with applicable provisions of the DPDPA, 2023 and IT Rules, 2011.
6.2 Data Retention Schedule
| Data Category | Retention Period | |
|---|---|---|
| Purchase & Transaction Records | 7 years | CGST Act, 2017 §36 |
| Customer Support Communications | 3 years | From date of last correspondence |
| Marketing Email Subscription | Until unsubscribed + 3 years | Suppression list purposes |
| Website Analytics Data | 26 months | Anonymized/aggregated form |
| Download Logs (Anti-Piracy) | 2 years | From purchase date |
| Account Data | Until deletion + 1 year | Legal/dispute resolution |
6.3 Security Measures
Data Breach Notification
Section 7
Your Rights as a Data Principal
Under the DPDPA, 2023 and other applicable Indian law, you have the following rights. Contact support@secureiam.in to exercise them:
Right to Access
Request a summary of the personal data we hold about you and the purposes for which it is being processed.
Right to Correction
Request correction of any inaccurate, incomplete, or outdated personal data we hold.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, subject to legal retention requirements.
Right to Withdraw Consent
Withdraw consent for marketing communications or any consent-based processing at any time.
Right to Grievance Redressal
Raise a complaint about how we handle your personal data, to be addressed within 30 days.
Right to Nominate
Nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity (DPDPA 2023 right).
Right to Data Portability
Request your personal data in a structured, commonly used, machine-readable format, to the extent technically feasible.
We will respond to all data rights requests within 30 days. Complex requests may require up to 60 days. If not satisfied, you may escalate to the Data Protection Board of India or appropriate Consumer Disputes Redressal Commission.
Section 8
Children's Privacy
Our Platform is intended for use by individuals who are 18 years of age or older. We do not knowingly collect, process, or store personal data from children under the age of 18.
In accordance with Section 9 of the DPDPA, 2023, we will implement age-verification mechanisms and obtain verifiable parental consent before processing any data belonging to a child, if our Platform becomes accessible to minors.
Parent or Guardian?
Section 10
Marketing & Email Communications
Transactional Emails
Cannot Opt OutOrder confirmations, product delivery, invoices, support responses. These are necessary for service delivery and cannot be opted out of.
Marketing Emails
Consent RequiredPromotional offers, new product launches, free resources, newsletters. Sent only with your explicit consent.
How to Unsubscribe
Section 11
Third-Party Platforms & External Links
When you use payment gateways or other third-party services on our Platform, your data is also processed by those platforms under their own privacy policies:
Section 12
International Visitors & Cross-Border Data Transfers
Our Platform is primarily directed at users in India. If you access our Platform from outside India, your personal data may be transferred to, stored, and processed in India. By using our Platform from outside India, you consent to such transfer and processing.
For EU/UK users, we ensure compliance with applicable data protection frameworks to the extent required.
Section 13
Privacy Grievance Officer
In accordance with Rule 5(9) of the IT (Reasonable Security Practices) Rules, 2011 and the DPDPA, 2023:
Designated Grievance Officer
Unresolved complaints may be escalated to:
Data Protection Board of India
For DPDPA 2023 violations
Consumer Disputes Redressal Commission
DCDRC / SCDRC / NCDRC
Cyber Appellate Tribunal
Under the IT Act, 2000
Section 14
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations.
Material Change Notification
Section 15
Contact Us
For any queries, clarifications, or concerns related to this Privacy Policy or your personal data:
Your Trust Is Our Priority
We are committed to being transparent about how we use your data. We will never sell your personal information. If you ever have concerns about your privacy, we encourage you to reach out — we are here to help.
Governed by the Laws of the Republic of India | DPDPA 2023 Compliant. This document is provided for informational purposes only. For binding legal advice, please consult a qualified legal professional in India.