Skip to Content

Privacy Policy

This Privacy Policy describes how Narayani Machin​ery ("we," "us," or "our") collects, uses, processes, and protects the personal data of users ("you" or "Data Principal") who visit our website, register an account, place an order, or make a payment.

We are committed to protecting your privacy and ensuring compliance with the applicable Indian data protection laws, primarily the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules") under the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). 

1. Applicability and Consent

By accessing or using our website and services, you explicitly consent to the collection, storage, processing, and disclosure of your Personal Data and Sensitive Personal Data or Information (as defined below) in accordance with this Privacy Policy. You have the right to withhold consent or withdraw consent at any time by contacting our Grievance Officer, subject to legal and contractual restrictions.

2. Information We Collect

We collect information to facilitate your transactions and provide you with a seamless experience. This information falls into two main categories:

A. Personal Data

This is information that can be used to identify you directly or indirectly. We collect this when you register an account, place an order, or contact us.

  • Identity Data: Name, date of birth, user ID, and account login details.

  • Contact Data: Email address, billing address, shipping address, and phone number.

  • Transaction Data: Details about orders you have placed, payment history, and delivery details.

  • Technical Data: Internet Protocol (IP) address, device information, browser type, and operating system.

  • Usage Data: Information about how you use our website (e.g., pages viewed, time spent, products searched).

B. Sensitive Personal Data or Information (SPDI) - as per IT Act/SPDI Rules

This includes specific, high-risk data. We only collect this when strictly necessary for payment processing:

  • Financial Data: Credit/debit card numbers or other payment instrument details (collected via a secure, third-party payment gateway that is PCI-DSS compliant. We do not store complete card details on our servers).

  • Password: Your account password (stored in an encrypted/hashed format).

3. How We Use Your Information (Purpose Limitation)

We will only collect and process your Personal Data and SPDI for the specific purposes for which consent was obtained, or as otherwise allowed by the DPDP Act.

4. Disclosure and Transfer of Information

We will not publish, sell, or rent your Personal Data or SPDI to third parties without your prior explicit consent, except in the following limited circumstances:

  • Service Providers: We may share your data with trusted third-party vendors who perform services on our behalf, such as:

    • Payment Gateways (for processing payments securely)

    • Logistics/Courier Partners (for order delivery)

    • IT and cloud hosting providers (for website operation)

  • Legal Compliance: We may disclose your information if required by a legal mandate or order from a Government Agency (like CERT-In) or to comply with law enforcement requests, as per the IT Act and SPDI Rules.

  • Transfer: We may transfer your data to another body corporate or person in India or in any other country that ensures the same level of data protection that we adhere to, only if it is necessary for the performance of the contract or if you have consented to the transfer.

5. Data Principal Rights (As per DPDP Act)

You, as the Data Principal, have the following rights concerning your personal data:

  1. Right to Access: You have the right to request a summary of the Personal Data we are processing and the activities relating to the processing.

  2. Right to Correction & Erasure: You may request the correction, completion, updating, or deletion of your Personal Data that is inaccurate or no longer necessary for the purpose for which it was collected.

  3. Right to Grievance Redressal: You have the right to lodge a complaint with our Grievance Officer (see Section 8).

  4. Right to Withdraw Consent: You have the right to withdraw your consent at any time, which will result in us ceasing the processing of the personal data for which consent was the basis.