1. Introduction & Data Fiduciary Notice
Durvient (“Durvient,” “Company,” “We,” “Us,” or “Our”) operates the e-commerce storefront durvient.com, specializing in high-performance automotive parts, drone accessories, and specialized electronics across the Republic of India.
We respect your right to privacy and are committed to safeguarding your personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Consumer Protection (E-Commerce) Rules, 2020.
Under the DPDP Act, 2023, Durvient acts as the “Data Fiduciary” determining the purpose and means of processing your personal data, and you as our customer or visitor act as the “Data Principal.”
🏢 Registered Office & Operational Headquarters
Durvient
Q1-1103, Solacia Phase 2, Baif Road,
Wagholi, Pune – 412207, Maharashtra, India.
Support Helpline: +91 70209 35643 | Support Email: contact@durvient.com
2. Personal Data We Collect
We only collect personal data that is strictly necessary to fulfill your purchases, ensure delivery, authenticate warranties, and provide technical support.
a. Identity and Contact Data
-
Personal Details: Full name, telephone/mobile number, and email address.
-
Delivery & Billing Data: Complete shipping address, billing address, PIN/postal code, state, and landmarks.
-
Business Invoicing (B2B): Registered entity name, GSTIN (Goods and Services Tax Identification Number), and PAN (if applicable for business tax invoices).
b. Transaction and Order Details
- Order identifiers, date and time of order, products purchased, quantities, warranty status, and return/replacement requests.
- Payment mode (UPI, Net Banking, Credit/Debit Card, COD) and Gateway Reference / Transaction IDs generated by our authorized payment gateways.
🔒 Critical Financial Safeguard (Zero Card Data Storage)
Durvient does never collect, handle, or store your complete 16-digit credit/debit card numbers, expiry dates, or CVV/CVC codes on our servers. All electronic transactions are executed through RBI-licensed payment aggregators utilizing end-to-end encrypted tokenization.
c. Technical, Device and Log Data
- IP (Internet Protocol) address, geographic region/city-level geolocation.
- Browser type, browser version, operating system, device manufacturer, screen resolution, and language preferences.
- URL clickstreams, pages visited, session duration, and referral URLs.
3. How Your Data is Collected
-
Directly from You: When you place an order, create an account, initiate a warranty claim, submit a product review, or contact our technical support via email or WhatsApp.
-
Automatically Collected: As you navigate our storefront via session cookies, server log files, and analytics tags (e.g., Google Analytics, Meta Pixel).
-
From Logistics & Payment Partners: Delivery status updates, AWB tracking numbers, payment completion or failure confirmations received from Shiprocket, courier partners, and payment gateways.
4. Purpose & Lawful Grounds for Processing
Under the DPDP Act 2023, we process your personal data exclusively under two lawful grounds: (1) Consent provided by you, and (2) Legitimate Uses / Performance of Contract necessary for fulfilling e-commerce transactions.
| Purpose of Processing |
Data Categories Processed |
Lawful Ground under Indian Law |
| Order Fulfillment & Doorstep Delivery |
Name, Phone, Shipping Address, PIN code |
Contractual Obligation / Legitimate Use |
| Payment Reconciliation & Fraud Prevention |
Order ID, Transaction Amount, Gateway Token |
Contractual Obligation & Statutory Compliance |
| GST Invoicing & Tax Accounting |
Billing Name, Address, GSTIN, Invoice amount |
Statutory Compliance (GST & Companies Act) |
| Warranty Claims & After-Sales Support |
Contact data, Order ID, Vehicle model, Photos |
Contractual Obligation / Customer Support |
| Order Status Notifications (SMS / WhatsApp) |
Mobile Number, Order ID, Tracking AWB |
Legitimate Use / Transactional Notice |
| Promotional Marketing & Newsletters |
Email, Mobile Number |
Explicit Consent (Revocable at any time) |
5. Payment Security & RBI Compliance
Durvient works exclusively with Reserve Bank of India (RBI) authorized Payment Aggregators and Payment Gateways including Razorpay, Paytm Payments, PhonePe, Cashfree, and PayU.
-
Card-on-File (CoF) Tokenization: In accordance with RBI mandate circulars on card data security, original payment card credentials are never saved by merchants. Payment aggregators assign a secure, encrypted token representing the card.
-
UPI Transactions: Direct UPI transactions are verified using Virtual Payment Addresses (VPA) and bank reference numbers (RRN) without accessing bank credentials.
-
Cash on Delivery (COD): For orders placed via COD, phone verification or OTP confirmation may be deployed to confirm genuine shipping addresses and minimize Return-to-Origin (RTO) fraud.
6. Third-Party Disclosures & Logistics Partners
Durvient does not sell, rent, or trade your personal data to third parties. We disclose data solely to verified partners bound by strict confidentiality and non-disclosure obligations:
-
Logistics Aggregators & Couriers: We disclose recipient name, delivery address, contact number, and order contents to Shiprocket, along with underlying carriers (e.g., Delhivery, Blue Dart, DTDC, Xpressbees, India Post) solely for dispatch, transit tracking, and delivery.
-
E-Commerce Platform Infrastructure: Hosted securely on Shopify Inc., which maintains PCI-DSS Level 1 compliance and SOC 2 Type II certifications.
-
Review & Feedback Systems: Verified customer reviews submitted via Judge.me display only your chosen public display name and feedback.
-
Statutory Authorities: If required under Section 69 of the IT Act, court orders, or statutory GST/income-tax investigations, data may be disclosed strictly to authorized law enforcement bodies.
7. Data Retention & Erasure Schedule
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws:
-
Active Customer Data: Stored for an active duration of two (2) years from the date of your last interaction or purchase.
-
Tax and Statutory Records: Invoices, tax records, and GST filing data are retained for a minimum statutory period of eight (8) years to comply with the Central Goods and Services Tax (CGST) Act, 2017 and Income Tax Act, 1961.
-
Data Erasure: Upon expiry of the retention duration or upon a verified erasure request from you, your personal data will be either irreversibly anonymized or permanently purged from our databases.
8. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023, you enjoy comprehensive, legally enforceable rights regarding your personal information:
-
Right to Access: You may request a summary of the personal data we hold about you and the processing activities undertaken.
-
Right to Correction & Updating: You may update or correct incomplete, inaccurate, or outdated personal information in your store account or by contacting customer support.
-
Right to Erasure: You have the right to request deletion of your personal data, provided it is no longer required for fulfilling ongoing orders or statutory compliance.
-
Right to Withdraw Consent: Where processing is based on your consent (such as promotional marketing or non-essential cookies), you can withdraw your consent at any time without affecting lawful processing conducted prior to withdrawal.
-
Right to Nominate: You have the legal right under Section 14 of the DPDP Act 2023 to nominate an individual who, in the event of your death or incapacity, shall exercise your rights as a Data Principal.
-
Right to Grievance Redressal: You have the right to readily access grievance redressal mechanisms established by Durvient (detailed in Section 14).
9. Technical Data & Cookies Policy
Our storefront utilizes cookies and similar web technologies to ensure a seamless purchasing experience:
-
Strictly Necessary Cookies: Essential for browsing, shopping cart persistence, customer login, and secure checkout. Disabling these will prevent the store from operating correctly.
-
Performance & Analytics Cookies: (e.g., Google Analytics 4) Help us analyze aggregated visitor metrics, page load speeds, and popular product categories without identifying individuals personally.
-
Marketing & Advertising Pixels: (e.g., Meta Pixel, Google Ads) Facilitate measuring ad campaign performance and presenting relevant automotive or drone accessory recommendations across partner platforms.
You can adjust your cookie preferences or block cookies directly via your web browser settings.
10. SMS, WhatsApp & Marketing Communications
In accordance with the Telecom Commercial Communications Customer Preference Regulations (TCCCPR) and Consumer Protection Guidelines:
-
Transactional Notifications: When you place an order, we send essential transactional updates (Order Confirmation, Invoice, Dispatch AWB, Out for Delivery alerts) via SMS, WhatsApp, and Email. These messages are exempt from Do Not Disturb (DND) registries as they are strictly fulfillment-related.
-
Promotional Alerts: We only send promotional announcements, launch discounts, or special offers if you have opted in. You can opt out at any time by replying “STOP” on WhatsApp or clicking the “Unsubscribe” link in any promotional email.
11. Protection of Children’s Privacy
Our website and products (automotive retrofit electronics, drone parts, tools) are intended strictly for individuals aged 18 years and older.
In compliance with Section 9 of the DPDP Act 2023, Durvient does not knowingly collect personal data from minors, does not engage in targeted advertising directed at children, and does not conduct behavioral tracking or profiling of individuals under 18 years of age. If you believe a minor has provided us with personal data, please contact our Grievance Officer immediately for prompt data erasure.
12. Data Security & Breach Protocols
We implement rigorous administrative, physical, and technical safeguards to secure your personal data against unauthorized access, loss, or misuse:
-
256-bit TLS/SSL Encryption: All browser-to-server and API communications are encrypted via industry-standard TLS encryption.
-
Edge Security & Cloudflare CDN: Web Application Firewalls (WAF), rate-limiting, and DDoS mitigation protect against automated attacks and scrapers.
-
Restricted Access Controls: Internal access to customer orders is restricted strictly to authorized support personnel on a role-based, need-to-know basis.
-
Breach Notification Protocol: In the rare event of a confirmed personal data security breach, Durvient commits to notifying the Data Protection Board of India and affected Data Principals without undue delay, along with recommended remedial measures.
13. Cross-Border Data Transfers
Your personal data is predominantly stored and processed on secure cloud infrastructure located within India and compliant international jurisdictions (such as Shopify’s globally distributed, secure cloud nodes). In compliance with the DPDP Act 2023, data is transferred only to countries or territories that are not restricted by the Central Government of India, ensuring equivalent or superior data protection standards.
14. Statutory Grievance Redressal Mechanism
In accordance with Rule 5(9) of the Information Technology (SPDI) Rules, 2011, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are provided below:
Grievance Redressal Officer
Appointed under IT Rules 2011 & DPDP Act 2023
Designation
Grievance & Compliance Officer
Legal Entity
Durvient (durvient.com)
Contact Number
+91 70209 35643 (Mon–Sat, 11:30 AM – 7:00 PM IST)
Physical Mailing Address
Q1-1103, Solacia Phase 2, Baif Road, Wagholi, Pune – 412207, Maharashtra, India.
⏱️ Statutory Response Timelines
• Acknowledgment: Within forty-eight (48) hours of receipt of grievance.
• Redressal / Resolution: Within thirty (30) days from the date of receipt, in accordance with applicable rules.
15. Governing Law & Jurisdiction
This Privacy Policy, along with all user interactions and transactions on Durvient, is governed exclusively by the laws of the Republic of India. Any disputes, claims, or controversies arising under this Policy shall be subject to the exclusive jurisdiction of the competent courts located in Pune, Maharashtra, India.
We reserve the right to revise this Privacy Policy periodically to reflect changes in regulatory standards or store operations. Material changes will be highlighted with a revised “Last Updated” date at the top of this document.
