Privacy Policy

1. Who We Are

1. This Privacy Policy explains how ARCO AUTOZONE ECOM (“ARCO AutoZone”, “We”, “Us”, “Our”), a sole proprietorship (GSTIN 08AKNPN6729Q1Z3) at Ground Floor, P.No. 52-53, Hotel Arco Palace, Railway Station Road, Sindhi Camp, Jaipur, Rajasthan 302001, India, collects and uses personal data when you use arcoautozone.com or the mobile application “ARCO AutoZone” (the “Platforms”).
2. We are the Data Fiduciary for this personal data under the Digital Personal Data Protection Act, 2023, and we follow the Information Technology Act, 2000 and the rules made under it.
3. This Policy is part of our Terms and Conditions.

2. What We Collect

1. Order details you give us: name, mobile number, e-mail address, delivery address and PIN code, GSTIN if you want a business invoice, the products you order, and any notes you add.
2. Payment information: the payment status, amount and the transaction reference from the payment gateway. Your card, UPI PIN, net-banking password and similar details are entered on the gateway’s secure page; we never receive or store them.
3. Returns, enquiries and reviews: what you send us in the return / refund request form, the contact form, on WhatsApp or by e-mail (including photographs and videos of a part), and any review or rating you post.
4. Chat and photo search: the messages you type into our website assistant, and the photograph of a part you upload to search by photo.
5. Technical information: your IP address and the approximate country it shows (we use it to show prices in the right currency and to protect the Platforms), browser and device type, and pages visited, kept in our server logs.
6. Mobile app: the same information as above, when you order or contact us through it. The app needs only an internet connection; it does not ask for access to your camera, photos, files, contacts, messages or location.
7. We do not knowingly collect sensitive personal data such as health, biometric or religious information, and we do not need it.

3. Why We Use It

1. To take, confirm, pack, ship and deliver your order, issue the GST invoice, and handle returns, refunds and warranty claims.
2. To send you messages about your order — confirmation, dispatch, tracking and delivery — by SMS, WhatsApp or e-mail.
3. To answer your questions and find the right part for your vehicle, including through our website assistant and photo search.
4. To keep the Platforms secure and prevent fraud and misuse.
5. To meet our legal duties, such as GST, accounting and tax records, and lawful requests from authorities.
6. To send you offers by WhatsApp or e-mail, only if you have agreed to receive them. You can stop them at any time (Section 7).

4. Who We Share It With

1. We share personal data only as needed for the purposes in Section 3, with:
   (a) payment gateways (such as ICICI Bank and Razorpay) — to take your payment and make refunds;
   (b) courier and logistics partners (such as Delhivery) — your name, phone and address, to deliver and pick up parts;
   (c) messaging and e-mail services (WhatsApp Business by Meta, our e-mail provider) — to send order messages;
   (d) AI service providers (Anthropic for the website assistant, Google for photo search) — only the chat message or photograph you send, to produce an answer;
   (e) our hosting and security providers (our servers and Cloudflare) — to run and protect the Platforms; and
   (f) government and law-enforcement authorities, when the law requires it.
2. These providers may use the data only to provide their service to us. Some of them process data on servers outside India, as permitted by Indian law.
3. We do not sell or rent your personal data, and we do not share it with advertisers.
4. Reviews you post, with the name you give, are shown publicly on the product page.

5. Cookies

1. We use only the cookies and browser storage needed for the Platforms to work — for example, to keep your cart, remember your currency and keep a staff login secure. We do not use advertising or cross-site tracking cookies.
2. You can block or delete cookies in your browser, but the cart and checkout may then not work.

6. How Long We Keep It

1. Order records and invoices are kept for as long as the GST and tax laws require — currently up to eight years — and then deleted or anonymised.
2. Return requests, chats and enquiries are kept as long as needed to resolve them and for any related claim. Server logs are kept for a short period for security.
3. Marketing consent and messages are kept until you withdraw your consent.

7. Your Rights and Choices

1. Under the Digital Personal Data Protection Act, 2023 you may ask us to:
   (a) tell you what personal data of yours we hold and how we use it;
   (b) correct, complete or update it;
   (c) delete it, unless we must keep it by law (for example, invoices);
   (d) withdraw any consent you have given, such as for offers — this does not affect what was done before; and
   (e) nominate a person to exercise these rights for you in case of death or incapacity.
2. To use these rights, write to our Grievance Officer (Section 10). We may need to confirm your identity first, and we will reply within the time the law requires.
3. To stop offers on WhatsApp or e-mail, reply “STOP” or write to us. Order messages will still be sent while an order is open.

8. How We Protect It

1. The Platforms use encrypted (HTTPS) connections, and access to customer data is limited to staff who need it for their work. We take reasonable security measures as required by law.
2. No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

9. Children

1. The Platforms are meant for people aged 18 or above. We do not knowingly collect data of a child without the consent of a parent or lawful guardian; if you believe we have, please write to us and we will delete it.

10. Grievance Officer and Contact

1. For any question, request or complaint about your personal data, contact our Grievance Officer: Amaan, ARCO AUTOZONE ECOM, Ground Floor, P.No. 52-53, Hotel Arco Palace, Railway Station Road, Sindhi Camp, Jaipur, Rajasthan 302001 — e-mail [email protected], WhatsApp / phone +91 91169 03624.
2. We acknowledge every complaint within 48 hours and resolve it within one month. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.

11. Changes to This Policy

1. We may update this Policy from time to time. The new version will be published on this page with its date; for a significant change we will also tell you on the Platforms.
2. This Policy is governed by the laws of India.