This Privacy Policy (“Policy”) explains how Rokad Retail Ventures Pvt. Ltd. (“Rokad”, “Company”, “we”, “our”, or “us”) collects, uses, processes, stores, and protects personal and business information when you access or use our website, platforms, products, services, or communications (collectively, the “Services”).

Rokad is committed to protecting user privacy and processing data in a lawful, transparent, and secure manner, in accordance with applicable laws of India and, where relevant, internationally recognised data protection principles.

---

1. Company & Contact Details

• Legal Name: Rokad Retail Ventures Pvt. Ltd.
• Registered / Communication Address: 808, Mahabir Tower, Main Road, Ranchi, Jharkhand – 834001, India
• Privacy-Related Communication Email: 📧 privacy@rokad.co

---

2. Governing Laws & Regulatory Framework

This Policy is governed by and framed in accordance with:

1. Information Technology Act, 2000
2. Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
3. Digital Personal Data Protection Act, 2023 (“DPDP Act”)
4. Applicable rules, notifications, guidelines, and amendments issued thereunder

Where required due to the location of users, principles of international data protection frameworks (such as consent, transparency, and data minimisation) are also observed.

In case of conflict, statutory provisions shall prevail.

---

3. Applicability & Scope

This Policy applies to:

• Website visitors
• Users submitting forms or enquiries
• Newsletter subscribers
• Customers, suppliers, partners, and prospects
• Any individual or entity interacting digitally with Rokad

This Policy does not apply to third-party platforms, websites, or services not owned or controlled by Rokad.

---

4. Definitions

• Personal Data: Any data about an identifiable individual, as defined under applicable Indian law.
• Data Principal: The individual to whom personal data relates.
• Data Fiduciary: Rokad Retail Ventures Pvt. Ltd.
• Data Processor: Any entity processing data on behalf of Rokad.

---

5. Categories of Information Collected

5.1 Personal Identification Information

• Name
• Email address
• Phone number (if voluntarily provided)
• Professional designation

5.2 Business & Commercial Information

• Business name and details
• Industry information
• Enquiry-related information
• Messages or content voluntarily submitted

5.3 Communication & Preference Data

• Newsletter subscription choices
• Marketing and communication preferences
• Feedback and correspondence

5.4 Technical & Usage Information

• IP address (processed in anonymized or truncated form where supported)
• Browser type, operating system, and device information
• Log files and access timestamps
• Website interaction and usage data collected via analytics tools

Rokad does not intentionally collect Sensitive Personal Data such as passwords, financial information, biometric data, health data, or government-issued identifiers unless required under a lawful obligation.

---

6. Modes of Data Collection

Data is collected through:

• Website forms (powered by Tally.so)
• Email and business communications
• Newsletter subscriptions
• Automated technical logs and analytics systems

All data collection is conducted in a lawful, fair, and transparent manner.

---

7. Purpose of Processing

Personal data is processed strictly for the following purposes:

• Responding to enquiries and communications
• Providing requested services or information
• Sending newsletters, updates, and business communications (where opted in)
• Personalising content and email communications
• Improving website performance and user experience
• Internal analytics, reporting, and research
• Compliance with legal, regulatory, and contractual obligations
• Preventing fraud, misuse, or security incidents

Data is not used for purposes beyond those stated without additional consent or lawful basis.

---

8. Consent & Lawful Basis

Under the DPDP Act, 2023 and applicable principles:

• Personal data is processed based on consent or other lawful grounds
• Consent is free, informed, specific, and unambiguous
• Analytics cookies are not enabled by default and are activated only after explicit user consent via the website’s cookie consent mechanism
• Consent may be withdrawn at any time through available controls or by contacting Rokad

Withdrawal of consent may affect certain features or communications.

---

9. Technology & Data Processing Infrastructure

Rokad uses the following platforms as data processors:

• Strapi – Content Management System
• Vercel – Website hosting and deployment
• GitHub – Source code repository and access-controlled development
• Tally.so – Secure data collection forms
• Analytics tools – Used to understand website usage in an aggregated and anonymized manner

These processors operate under contractual, confidentiality, and security obligations and do not have independent rights over the data.

---

10. Data Sharing & Disclosure

• Rokad does not sell, rent, or trade personal data

• Data is used strictly for internal business purposes

• Data is not shared with third parties for independent commercial or marketing use

• Disclosure may occur only where:

  • Required by law, court order, or government authority
  • Necessary to protect legal rights or prevent fraud
  • Required for authorised data processors under strict controls

---

11. Data Retention

Personal data is retained only for as long as:

• Necessary to fulfil the stated purposes
• Required under applicable laws or regulations
• Needed for dispute resolution or enforcement of agreements

Upon expiry of the retention period, data is securely deleted, anonymized, or irreversibly de-identified.

---

12. Data Security Measures

Rokad implements reasonable and appropriate security practices, including:

• Secure hosting environments
• Role-based access controls
• Authentication and authorisation mechanisms
• Restricted internal access
• Periodic security and compliance reviews

While reasonable safeguards are implemented, no system can guarantee absolute security.

---

13. Cross-Border Data Processing

Where infrastructure or service providers process data outside India, such processing is carried out with appropriate safeguards and in compliance with applicable Indian laws and recognised data protection standards.

---

14. Rights of Data Principals

Subject to applicable law, you may:

• Request access to your personal data
• Request correction or updating of inaccurate data
• Request erasure of personal data (where legally permissible)
• Withdraw consent for communications or analytics
• Lodge grievances regarding data handling

Requests may be sent to privacy@rokad.co.

---

15. Grievance Redressal

Privacy-related grievances may be addressed to:

📧 privacy@rokad.co 📍 808, Mahabir Tower, Main Road, Ranchi, Jharkhand – 834001

Rokad will endeavour to respond within a reasonable timeframe as required by law.

---

16. Cookies & Tracking Technologies

Rokad uses cookies and similar technologies to:

• Enable essential website functionality
• Analyse website usage and performance

Analytics cookies are deployed only after user consent and collect aggregated and anonymized usage data. No directly identifiable personal information (such as names or email addresses) is collected through analytics cookies.

Users may manage or withdraw cookie consent through the website’s cookie settings or browser controls.

---

17. Children’s Privacy

Rokad does not knowingly collect personal data from individuals under 18 years of age. If such data is identified, it will be deleted without undue delay.

---

18. Third-Party Links

The Services may contain links to third-party websites. Rokad is not responsible for the privacy practices, policies, or content of such third-party platforms.

---

19. Changes to This Policy

Rokad reserves the right to update this Policy to reflect:

• Legal or regulatory changes
• Technological developments
• Business or operational updates

The updated Policy will be published on the website and will be effective from the stated date.

---

20. Governing Law & Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India. Courts at Ranchi, Jharkhand shall have exclusive jurisdiction.