This policy explains how I Plus T Solution, Gurugram, Haryana, India ("we", "us") handles your personal data when you use I Plus T Shop at iplust.in/shop. We process data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
What we collect
- Order details: your name, email, mobile number, delivery address and any order note you add.
- Payment status: whether a payment succeeded, plus the Razorpay order and payment IDs. We never see or store card numbers, UPI PINs or bank credentials. Razorpay handles those under PCI-DSS.
- Technical data: a one-way, keyed hash of your IP address (used for fraud prevention and rate limiting), your browser user-agent, and anonymous counts of clicks on partner-store links.
- Messages you send through our contact form.
We don't use advertising trackers on the shop, and we don't sell your data.
Why we use it
- To process, deliver and support your order (contract performance).
- To send order confirmations, shipping updates and replies to your questions.
- To prevent fraud and abuse, and to keep the service secure.
- To meet legal obligations such as tax, accounting and consumer-protection records.
How we protect it
- Your name, email, phone, address and notes are encrypted with AES-256-GCM before they are stored. The database only ever holds encrypted values, and keyed hashes for lookups.
- The database is reachable only from our own servers; your browser never talks to it directly.
- All traffic uses HTTPS/TLS. Admin access requires strong passwords and two-factor authentication, and every admin action is logged.
Who we share it with
Only what each service needs to do its job:
- Razorpay to process payments.
- Courier partners (name, phone and address) to deliver your order.
- Resend (email delivery) to send order emails.
- Supabase (database hosting) and Cloudinary (product images), our infrastructure providers.
- Authorities, when the law requires it.
When you click a partner-store link, you leave our site and that store's privacy policy applies.
How long we keep it
Order records are kept for 8 years to meet tax and accounting law. Contact messages are kept for up to 2 years. Security logs are kept for up to 1 year.
Your rights
Under the DPDP Act you can ask to access, correct or erase your personal data, withdraw consent where processing relies on it, and nominate someone to exercise these rights for you. Write to info@iplust.in. We may keep data the law requires us to keep.
Cookies and local storage
The shop uses your browser's local storage only to remember your cart (product IDs and quantities). Admin pages use a strictly necessary security cookie. We don't use advertising cookies.
Children
The shop is meant for users aged 18 and over. Minors may use it only with a parent or guardian's involvement.
Changes
We will post any updates here with a new date. Significant changes will be highlighted on the shop.
Contact
Grievance Officer: Jitender, I Plus T Solution
Email: info@iplust.in · Phone: +91 83070 56141
We acknowledge complaints within 48 hours and resolve them within one month of receipt.