Last updated: [FOUNDER: date]. This policy explains how LPI Media Co. ("LPI", "we", "us") collects and uses your personal data, consistent with India's Digital Personal Data Protection Act, 2023 ("DPDPA").
1. Data we collect
- Account data: name, email address, phone number, password (stored only as a cryptographic hash). - Organisation and billing details: organisation name, billing contact, GSTIN/tax ID if you choose to provide one. - Order content: everything you submit to fulfil your order, including files, links and descriptions. - Payment data: payment status, transaction references and receipts. Card numbers, CVV and UPI credentials are collected and processed by Razorpay, not by us. - Usage data: minimal server logs (IP address, timestamps) for security and reliability. - Support and messages: what you send us through dashboard messaging and support requests.
2. Why we use your data (purpose limitation)
To create and operate your account; to process payments and issue receipts; to deliver the products and services you order; to communicate order status and requests; to provide support; to meet legal, accounting and dispute-resolution obligations; and to improve our services using de-identified information. We do not sell your personal data and do not use it for unrelated purposes without fresh consent.
3. Consent and withdrawal
Where we rely on your consent, you give it when you register, place an order or submit content, and you may withdraw it by contacting our Grievance Officer or, for marketing messages, by using the opt-out provided. Withdrawal may mean we cannot deliver some or all of an active order; in that case refunds follow our Refund Policy.
4. Your rights as a Data Principal
Under the DPDPA you may: request a summary of the personal data we hold about you and how it is processed; request correction, completion or updating of your data; request erasure of your data once the purpose is served and retention is no longer legally required; nominate another individual to exercise your rights on your behalf; and raise grievances, first with us and then with the Data Protection Board of India. To exercise any right, write to our Grievance Officer. We respond within [FOUNDER: X] working days.
5. Grievance Officer
Name: [FOUNDER: name]. Email: [FOUNDER: email]. Postal address: [FOUNDER: address]. We aim to acknowledge grievances within 7 working days and to resolve them without unreasonable delay.
6. Children
Our services are intended for adults. If we learn that we hold data of a person under 18 collected without verifiable parental consent, we will delete it. We do not track, behaviourally monitor or direct targeted advertising at children.
7. Sharing and processors
We share personal data only with: Razorpay (payment processing); our hosting provider Cloudflare (hosting, database and storage); professional advisers where strictly necessary; and authorities where required by law. Each processes data only on our instructions and under contractual safeguards.
8. Retention
We keep order, payment and receipt records for [FOUNDER: confirm period with adviser; commonly up to 8 years for financial records] to meet legal and accounting obligations and to handle disputes. Other data is kept while your account is active or as needed to provide services, then deleted or de-identified.
9. Security
We use encryption in transit, hashed passwords, access controls, audit logging of sensitive actions, and scoped access so staff see only what their role requires. If a personal data breach affecting you occurs, we will notify you as required by law.
10. International transfers
Your data may be processed outside India in compliance with the DPDPA and applicable government notifications.
11. Cookies
We use one essential session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
12. Changes
We update this policy as our practices or the law require; the update date above always reflects the current version.