Privacy Policy
Privacy & Data Protection Policy (DPDP Act 2026 Compliant)
- Introduction & Data Fiduciary Status
This Privacy Policy is issued by Sandhya Enterprise (hereinafter "the Company," "we," or "our") and governs the digital storefront sympliqueindia.com. In accordance with the Digital Personal Data Protection (DPDP) Act, 2026, Sandhya Enterprise operates as the Data Fiduciary, determining the purpose and means of processing personal data provided by the "Data Principal" (the customer).
- Infrastructure, Hosting & Data Residency
To ensure the highest level of data sovereignty and speed for our Indian users, our official domain and hosting infrastructure are managed through MilesWeb Internet Services Pvt Ltd.
Local Storage: In strict compliance with national mandates and cyber security guidelines, all personal data, transaction logs, and website databases are stored exclusively on secure, Tier-compliant servers located within the territory of India.
- Server-Level Security: Our hosting environment is reinforced with redundant firewalls and real-time threat monitoring provided by MilesWeb, acting as a baseline defense for our digital ecosystem.
- Data Processors & Third-Party Integration: We utilize specialized third-party Data Processors to execute the performance of your sales contract. Your data is shared with these partners strictly on a "need-to-know" basis:
- Logistics Partner: Shiprocket (BigFoot Retail Solutions Pvt. Ltd.) processes your name, shipping coordinates, and contact details to facilitate delivery and real-time tracking.
- Payment Aggregator: Razorpay Software Private Limited processes financial metadata to authorize secure payments.
- Third-Party Security Breach & Liability Limitation: While Sandhya Enterprise implements rigorous application-level security standards, we utilize independent third-party processors (Razorpay, Shiprocket, and MilesWeb) who maintain their own independent security certifications (including PCI-DSS and ISO standards).
- Liability Boundary: In the event of a security incident originating within the independent infrastructure of these third-party partners, our liability is strictly limited to mandatory reporting to the Data Protection Board (DPB), providing active assistance in the investigation, and notifying affected Data Principals as per the timelines mandated by the DPDP Act. We are not liable for direct or indirect losses resulting from breaches occurring within the proprietary systems of these independent processors.
- Rights of the Data Principal: We respect your digital sovereignty. Under the DPDP Act, you possess the following absolute rights:
- Right to Access & Rectification: You may request a summary of the personal data being processed or seek correction of inaccurate data.
- Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your data once the purpose of processing (fulfillment and statutory audit periods) is complete.
- Right to Withdraw Consent: You may withdraw your consent for any non-essential data processing (such as marketing) as easily as it was granted.
- Data Protection Officer (DPO) & Grievance Redressal : If you have any inquiries regarding your data privacy, security protocols, or wish to exercise your legal rights, please contact our designated officer. Email: admin@sympliqueindia.com Subject Line: Attn: Data Protection Officer or Attn: Grievance Redressal
- AI-Driven Operations & Business Intelligence:
To ensure the sustainable growth and operational excellence of the SYMPLIQUE ecosystem, Sandhya Enterprise utilizes advanced Artificial Intelligence (AI) and Machine Learning (ML) frameworks for comprehensive business data analysis across all functional segments, including financial forecasting, logistics optimization, and sales trend modeling. These automated systems process de-identified transactional metadata to refine our 'Exposure-Response' protocols and enhance supply chain resilience across the Indian Ambient Delta. In strict accordance with the DPDP Act 2026 and IT Rules, all synthetically generated information (SGI)—including multilingual educational media and diagnostic reports—is explicitly disclosed as AI-mediated. We maintain rigorous human oversight over all algorithmic decision-making, ensuring that our business intelligence tools prioritize consumer safety, algorithmic fairness, and data sovereignty on secure, Indian-hosted servers. Customers reserve the right to request a human review of any AI-generated recommendation, as we remain committed to transparent, ethical innovation that supports both brand integrity and individual privacy.
