Privacy Policy

1. Introduction

2. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third-party services. The types of information we may collect include:

2.1 Personal Information You Provide

• Full name and contact details (email address, phone number)
• Shipping and billing address
• Account login credentials (username and encrypted password)
• Order history and purchase preferences
• Communications you send us (e.g., customer support queries, feedback)

2.2 Payment Information

We do not directly collect or store your payment card details. All payment transactions are processed through Razorpay, a PCI-DSS compliant payment gateway. Razorpay's privacy policy governs the handling of your payment data. We only receive a transaction confirmation reference from Razorpay.

2.3 Information Collected Automatically

• IP address and approximate geographic location
• Browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Clickstream data and browsing behavior on our website
• Cookie identifiers and session data (see Section 6 for details)

2.4 Information from Third-Party Services

We may receive limited information from third-party analytics, marketing, and customer engagement tools we use to operate our business, including but not limited to Google Analytics, email marketing platforms, and customer support tools. This information is used only in aggregated or anonymized form wherever possible.

3. How We Use Your Information

We use the personal information we collect for the following lawful purposes:

3.1 To Fulfil Your Orders

• Process and confirm your purchases of leather accessories and products
• Arrange shipping and delivery to your provided address
• Send order confirmations, shipping updates, and delivery notifications
• Handle returns, refunds, and exchanges in accordance with our Refund Policy

3.2 To Manage Your Account

• Create and manage your registered user account
• Authenticate your identity when you log in
• Enable guest checkout where applicable

3.3 For Marketing and Communications

• Send you promotional emails, offers, and newsletters about our leather products (only if you have opted in or are an existing customer)
• Send transactional SMS notifications related to your orders
• Personalise your shopping experience based on your preferences and history

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email we send or by contacting us at info@roccope.com.

3.4 For Business Operations and Legal Compliance

• Improve our website, products, and customer service
• Conduct analytics to understand how visitors use our website
• Prevent fraud, detect security threats, and ensure platform integrity
• Comply with applicable laws, regulations, and legal processes in India
• Enforce our Terms and Conditions and other agreements

4. Legal Basis for Processing Your Data

Under the Information Technology Act, 2000 and SPDI Rules, 2011, we collect and process sensitive personal data only with your consent, or as necessary to provide you with our services.

For visitors from the European Union, we process your personal data under the following lawful bases under the GDPR:

• Contract Performance: Processing necessary to fulfil your purchase order and deliver products.
• Legitimate Interests: Analytics, fraud prevention, and improving our services.
• Consent: Marketing emails and non-essential cookies.
• Legal Obligation: Compliance with applicable laws and regulatory requirements.

5. Sharing of Your Information

We do not sell, trade, or rent your personal information to any third parties for their marketing purposes. We may share your information only in the following limited circumstances:

5.1 Service Providers

We share your information with trusted third-party vendors who assist us in operating our website and fulfilling your orders. These include:

• Razorpay (Payment Processing) – to process your transactions securely
• Logistics and Courier Partners – to deliver your orders to your shipping address
• Email and SMS Marketing Platforms – to send you communications
• Analytics Providers (e.g., Google Analytics) – to understand website usage
• Customer Support Tools – to manage your queries and support tickets

All service providers are contractually required to use your information only for the purposes we specify and to maintain appropriate security standards.

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or at the request of a government authority, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal data.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather information about how our website is used.

6.1 What Are Cookies?

Cookies are small data files placed on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time.

6.2 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function, including cart and session management. These cannot be disabled.
• Analytics Cookies: Used by tools like Google Analytics to understand visitor behaviour and improve our website.
• Marketing Cookies: Used to show you relevant advertisements, including retargeting pixels (e.g., Meta Pixel).
• Preference Cookies: Used to remember your settings and preferences such as language or currency.

6.3 Managing Cookies

You can control and manage cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Order and transaction records are retained for a minimum of 7 years as required under Indian accounting and tax laws.
• Account data is retained for the duration your account is active and for a reasonable period thereafter.
• Marketing preferences and communications history are retained until you opt out.
• Analytics data is retained in aggregated and anonymised form indefinitely.

When data is no longer required, we securely delete or anonymise it.

8. Data Security

We implement reasonable security practices and procedures as mandated by the SPDI Rules, 2011 to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website
• Secure storage of personal data with access restricted to authorised personnel only
• Regular security assessments and vulnerability testing
• PCI-DSS compliant payment processing via Razorpay

However, please note that no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

9.1 Rights for All Users (India – IT Act / SPDI Rules)

• Right to access the personal data we hold about you
• Right to correct inaccurate or incomplete personal data
• Right to withdraw consent for use of your sensitive personal data
• Right to opt out of marketing communications at any time

9.2 Additional Rights for EU/EEA Users (GDPR)

• Right to erasure ('right to be forgotten') – request deletion of your personal data
• Right to data portability – receive your data in a structured, machine-readable format
• Right to restrict processing of your data in certain circumstances
• Right to object to processing based on legitimate interests or for direct marketing
• Right to lodge a complaint with your local data protection supervisory authority

9.3 How to Exercise Your Rights

To exercise any of the above rights, please contact our Privacy Officer at info@roccope.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. Children's Privacy

Our website and services are not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@roccope.com and we will take steps to delete such information from our records.

11. International Data Transfers

Roccope is based in India and primarily processes and stores data within India. However, as we use certain third-party service providers (such as cloud hosting and analytics tools) whose servers may be located outside India, your data may be transferred to and stored in countries outside India, including the European Economic Area.

Where such transfers occur, we ensure appropriate safeguards are in place, including contractual clauses that require our service providers to maintain equivalent data protection standards. EU users' data is processed in accordance with GDPR requirements for international transfers.

12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. We have no control over the content or privacy practices of those websites and are not responsible for their privacy policies. We encourage you to review the privacy policy of every website you visit.

13. Returns, Refunds, and Related Policies

This Privacy Policy should be read alongside our Returns & Refund Policy, which is available on our website. Personal data collected during a return or refund request (such as bank account details for refund processing) will be used solely for that purpose and retained only for the legally required period.

14. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of any significant changes by:

• Updating the 'Last Updated' date at the top of this policy
• Sending an email notification to registered users
• Displaying a prominent notice on our website

Your continued use of our website after any changes to this policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

15. Grievance Officer (As Required Under IT Act, 2000)

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of our Grievance Officer are provided below:

If you have any grievances regarding the processing of your personal data, please contact the Grievance Officer. We will endeavor to resolve your grievance within 30 days of receipt of the complaint.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

We are committed to working with you to obtain a fair resolution of any complaint or concern about your privacy.