Privacy Policy

Hextasy ("we", "us", "our") operates the website https://hextasy.in (the "Service"). We are located at Mudra Deeptech, 2-2-49/2/B, Suryapet, Near Head Post Office, Suryapet, Telangana, 508213, India. Email: support@hextasy.in; Phone: +91-7780380773.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Information Technology Act, 2000, and other applicable Indian laws. By using the Service, you consent to this Policy. If you do not agree, please do not use the Service.

We will notify you of material changes via email (support@hextasy.in) or site posting. Continued use after changes implies acceptance.

Information We Collect

We collect the following categories of personal data:

• Identity and Contact: Name, email, phone number, shipping/billing address.
• Order and Financial: Order details, payment info (e.g., card/UPI via gateway), IP address.
• Usage Data: Browser type, device info, pages visited, cookies (essential, analytics).
• Communications: Comments, support queries, feedback.

We collect this directly from you (e.g., checkout, forms) or automatically (e.g., logs). No data from children under 18; Service not directed at them.

How We Use Your Information

We process data only for specified purposes with your consent or legitimate uses under DPDP Act (e.g., contract fulfillment):

• Process and fulfill orders (e.g., print/ship 3D inserts).
• Manage payments, deliveries, customer support.
• Improve Service (analytics, spam detection).
• Comply with laws (tax, disputes).

Any other use requires fresh consent. You can withdraw anytime.

Consent and Withdrawal

Consent is free, specific, informed, and via clear checkboxes (no pre-ticked). Withdraw via one-click in account/settings or email. Withdrawal won't affect prior lawful processing.

Cookies and Tracking

We use:

Manage via browser or cookie banner. Opt-out available.

Sharing Your Data

We share only as needed:

• Service Providers: Payment (e.g., Razorpay), shipping (e.g., DTDC), cloud (e.g., AWS India), spam tools.
• Legal: Courts, government, if required.
• No selling/sharing for marketing.

Processors bound by DPDP contracts.

Data Retention

Data kept only as necessary:

• Orders: 7 years (tax/compliance).
• Support: 3 years post-resolution.
• Comments: Indefinitely (or until deletion request).
• Usage: 2 years.

Deleted securely post-retention unless legally required.

International Transfers

Data primarily stored in India. If transferred abroad (e.g., global gateways), only with government-notified adequacy or safeguards per DPDP.

Your Rights (Data Principals)

Under DPDP and IT Act:

• Access, correct, erase, restrict processing.
• Port data, object/withdraw consent.
• Grievance with us or Data Protection Board.

Request via support@hextasy.in; response within 30 days. Account users self-manage.

Security

We use encryption (HTTPS, data at rest), access controls, regular audits. No absolute guarantee; report breaches to us—we'll notify per DPDP timelines if significant risk.

Data Transfers Outside EEA/India

See International Transfers above.

Contact and Grievance Officer

For queries: support@hextasy.in or above address. Grievance Officer: Abhinay Maddha (same details). We'll resolve in 15–30 days per law.

This Policy supersedes prior versions. Consult legal expert for advice.