Privacy Policy
Last updated: July 2026
PrimeBluePeak Pvt. Ltd. (“PrimeBluePeak”, “we”, “us”) is committed to protecting the privacy of every customer, seller and visitor of primebluepeak.com. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and safeguarded, and the rights available to you under applicable Indian law, including the Information Technology Act, 2000 with its allied rules and the Digital Personal Data Protection Act, 2023.
1. Information We Collect
We collect only such information as is necessary to operate the marketplace and to serve you well.
- Identity and contact data: name, email address, mobile number, billing and delivery addresses.
- Transaction data: orders placed, invoices, returns, refunds and communications with our support team.
- Payment data: card, UPI, netbanking or wallet details entered directly with our PCI-DSS compliant payment partners. We do not store full card numbers or CVV on our systems.
- Technical and usage data: device type, browser, IP address, pages viewed, search terms, wishlist and cart activity.
- Optional preference data: sizes, favourite brands, categories of interest and communication preferences.
2. How We Use Your Information
Personal data is processed for defined, lawful purposes and is not used for unrelated activities.
- Processing, packing, invoicing, delivering and servicing your orders.
- Providing customer support, managing returns, exchanges, cancellations and refunds.
- Personalising product recommendations, search results and merchandising.
- Sending transactional notifications, and marketing communications where you have opted in.
- Detecting and preventing fraud, misuse and security incidents, and complying with statutory obligations.
3. Legal Basis & Consent
We process personal data on the basis of the consent you provide at the point of collection, the performance of the contract of sale between you and PrimeBluePeak, our legitimate interest in operating a secure marketplace, and compliance with legal and taxation requirements. Consent may be withdrawn at any time, in which case we may be unable to continue providing certain services.
4. Cookies & Similar Technologies
We use cookies, local storage and pixels to keep you signed in, retain your bag and wishlist, remember display preferences and measure site performance. A full description, including how to manage or disable them, is set out in our Cookie Policy.
5. Disclosure to Third Parties
We never sell your personal data. Limited disclosures are made only where required to deliver our services.
- Logistics and courier partners, for delivery, tracking and reverse pickups.
- Payment gateways, banks and wallet providers, for authorising and settling transactions.
- Brand partners and sellers, strictly for order fulfilment and warranty servicing.
- Technology, analytics, communication and customer-support vendors bound by written data-processing agreements.
- Law-enforcement, regulatory or judicial authorities, where disclosure is legally mandated.
6. Data Security
All data is transmitted over TLS 1.2 or higher and stored on access-controlled infrastructure. We apply role-based access, least-privilege principles, encryption of sensitive fields at rest, audit logging and periodic security reviews. While no method of transmission is entirely infallible, we maintain reasonable security practices as prescribed under Indian law.
7. Data Retention
Account and preference data is retained for as long as your account remains active. Order, invoice and tax records are retained for the statutory period applicable under Indian accounting and GST regulations, after which data is deleted or irreversibly anonymised.
8. Your Rights
Subject to applicable law, you may exercise the following rights by writing to us.
- Access a summary of the personal data we hold about you.
- Correct, complete or update inaccurate data.
- Request erasure of data no longer required for a lawful purpose.
- Withdraw consent or unsubscribe from marketing communications.
- Nominate another individual to exercise your rights in the event of incapacity or death.
9. Children's Privacy
Our services are intended for individuals aged 18 years and above. We do not knowingly collect personal data of children without verifiable parental consent, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
10. Changes to This Policy
This Privacy Policy may be revised from time to time. Material changes will be notified by email or through a prominent notice on the platform, and the updated version will carry a revised effective date.
11. Grievance Officer & Contact
Concerns regarding the processing of your personal data may be addressed to our Grievance Officer, who will acknowledge your request and respond within the timelines prescribed by law: PrimeBluePeak Pvt. Ltd., Buldhana, Maharashtra, India · +91 98908 54462 · primebluepeak@gmail.com.