Privacy policy
(GDPR & DPDP Act, 2023 Compliant)
Engineers India Research Institute (“we”, “our”, “us”) values your privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India) and the General Data Protection Regulation (GDPR).
By accessing or using this website, placing an order, or interacting with our services, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.
1. Information We Collect
We collect personal and technical information necessary to operate our e-commerce services efficiently and securely.
a) Personal Information
Collected when you place an order, create an account, or contact us:
- Name
- Email address
- Phone number
- Billing and shipping address
- Order details, purchase history, and transaction references
b) Payment Information
Payment transactions are processed through secure third-party payment processors.
We do not store or have access to complete credit/debit card numbers, UPI details, or banking credentials.
c) Automatically Collected Information
When you browse our website, certain data is collected automatically:
- IP address
- Device and browser information
- Pages viewed, session duration, and interaction data
- Cookies and similar tracking technologies
This data helps ensure site functionality, security, fraud prevention, and performance optimization.
2. Purpose and Lawful Basis for Processing
Your personal data is processed only for legitimate and lawful purposes, including:
| Purpose | Lawful Basis |
|---|---|
| Order processing and delivery | Performance of a contract |
| Customer communication and support | Legitimate interest |
| Payment verification and fraud prevention | Legitimate interest |
| Legal and regulatory compliance | Legal obligation |
| Marketing communication (if applicable) | Consent |
3. Consent and User Control
Where required by law, we obtain your free, informed, specific, and unambiguous consent before processing personal data.
You may withdraw consent at any time by contacting:
📧 eiri@eiriindia.org
Withdrawal of consent will not affect processing already lawfully carried out.
4. Sharing and Disclosure of Information
We do not sell or rent personal data.
Your data may be shared only with:
- Service providers supporting order fulfillment, payment processing, website hosting, analytics, and customer support
- Logistics and delivery partners for order shipment
- Government or legal authorities when required by law
All such entities are contractually obligated to maintain confidentiality and data protection standards.
5. Data Retention
Personal data is retained only as long as necessary to:
- Fulfill orders and provide services
- Maintain business and tax records
- Comply with legal and regulatory requirements
Data is securely deleted or anonymized once retention is no longer required.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Enable core website functionality
- Maintain shopping cart and checkout sessions
- Analyze website traffic and improve user experience
You may manage cookie preferences through your browser settings. Disabling cookies may affect certain site features.
7. Data Security
We employ appropriate technical, administrative, and organizational measures to safeguard personal data against unauthorized access, misuse, alteration, or loss.
While we take reasonable precautions, no online transmission or storage system can be guaranteed to be 100% secure.
8. User Rights (GDPR & DPDP Act, 2023)
You have the right to:
- Access your personal data
- Correct or update inaccurate information
- Request deletion of personal data (subject to legal obligations)
- Withdraw consent
- Object to or restrict certain processing activities
- Request grievance redressal
Requests may be submitted to: 📧 eiri [at] eiriindia.org
9. Cross-Border Data Transfers
Personal data may be processed or stored outside India only where adequate data protection safeguards are in place, in compliance with applicable data protection laws.
10. Children’s Privacy
Our website and services are not intended for individuals under 18 years of age.
We do not knowingly collect personal data from minors.
11. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of such third parties.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes will be effective upon posting on the website. Continued use of the website constitutes acceptance of the revised policy.
13. Contact & Grievance Redressal
For privacy-related questions, data access requests, or grievances, please contact:
eiri [at] eiriindia.org