Privacy policy

Information you give us:

• Account details — your name, email address and password when you sign up, and a phone number if you add one to your profile. Your password is stored only in encrypted (hashed) form, and we cannot read it.
• Delivery addresses — the name, phone number, address lines, landmark, city, state, PIN code, country and address type you save.
• Order details — the products and quantities you buy, prices, delivery charges and totals, the contact details and delivery address you confirm at checkout, and the status of your order and payment.
• Service requests — the product and model, serial number, invoice date, PIN code and address you enter, and the photos you upload of the product and its serial number label.
• Messages — the content of any email you send us and the address you send it from.

Information collected automatically:

• Payment references — when you pay, we receive the Razorpay order and payment reference numbers and whether the payment succeeded. Your card, UPI or net banking details are entered on Razorpay’s secure checkout and are never received or stored by us.
• Cart contents — before you sign in, your cart is kept in your own browser; once you sign in, it is saved to your account.
• Technical information — your IP address, browser and device type, the pages you request and the time of each request, which our hosting provider processes to deliver and secure the website.
• Activity on the website — the pages you view and shopping actions such as viewing a product, adding to cart, starting checkout and completing a purchase, recorded through the Meta Pixel as described under Cookies and similar technologies.

We use personal data only for the purposes it was provided for:

• To create and manage your account, keep you signed in, and send account emails such as password resets.
• To process your orders — taking payment through Razorpay, arranging delivery, and handling replacements and cancellations under our published policies.
• To register, review and resolve service requests, and to contact you about them.
• To answer your questions and enquiries.
• To measure how our advertising performs and improve the website, using the Meta Pixel.
• To keep the website secure and prevent fraud and misuse, for example by limiting how many service requests one account can open.
• To meet our legal obligations, including tax, GST invoicing and accounting requirements, and to enforce our policies.

The website uses:

• Essential cookies and browser storage — to keep you signed in, protect your session during checkout, and remember your cart before you sign in. The website cannot work properly without them.
• The Meta Pixel — a tool from Meta Platforms that records the pages you view and the shopping actions described above, together with the product identifiers and order values involved, and sets cookies such as “_fbp”. We use it to measure and improve our ads on Facebook and Instagram. We do not send your name, email address, phone number or delivery address to Meta through the Pixel. Meta handles this information under its own privacy policy and may associate it with your Facebook or Instagram account.

We share personal data only where it is needed for the purposes above:

• Hostinger — hosts the website and stores our database, account sign-in details and service-request photos.
• Razorpay — processes your payments.
• Meta Platforms — measures advertising through the Meta Pixel.
• Delivery and logistics partners — receive your name, phone number and delivery address so they can deliver orders and collect products for replacement.
• Service personnel acting for us — receive the details of a service request so they can attend to it.
• Government authorities, courts and law enforcement — where we are required to by law, or where it is necessary to protect the rights, property or safety of our customers, the public or ICONIC SMART.
• A buyer or successor — if our business, or part of it, is merged, acquired or transferred, subject to this policy.

We protect personal data with reasonable security safeguards, including:

• Encrypted HTTPS connections on every page of the website.
• Access controls that let each customer see only their own account, addresses, orders and service requests.
• Private storage for service-request photos, which are shown only through links that expire within minutes.
• Limiting access within ICONIC SMART to the people who need it to serve you.

• Account details and saved addresses — for as long as your account is open, and deleted when you ask us to delete your account.
• Orders, invoices and payment records — for as long as Indian tax, GST and accounting laws require, even if your account is deleted.
• Service requests and their photos — for as long as they are needed to resolve the request and keep the service history of your product, and deleted on request unless the law requires us to keep them.
• Emails you send us — for as long as needed to deal with your enquiry.
• Information collected by the Meta Pixel — retained by Meta under its own policies.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you, how we use it, and who we have shared it with.
• Correct, complete or update your personal data. You can change your name, phone number and saved addresses yourself at any time in your account.
• Have your personal data erased, unless we must keep it to comply with the law.
• Withdraw your consent at any time.
• Have your grievances addressed by us.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.