TechSoilSociety is committed to compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), India. This Privacy Policy explains your rights as a Data Principal and our obligations as a Data Fiduciary under the Act.
1. Introduction
TechSoilSociety (“we”, “us”, “our”) is a digital media and content platform based in Navi Mumbai, India. We are committed to protecting the personal data of our users (“you”, “your”, “Data Principal”) in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA).
This Privacy Policy applies to all users of our website, shop, Etsy store links, newsletter, and any affiliated platforms.
2. What Data We Collect
2.1 Information You Provide Directly
- Name and email address (via contact forms, newsletter subscriptions)
- Account credentials (if you create an account on our shop)
- Order and shipping information (for shop purchases)
- Comments or messages submitted through our website
2.2 Information Collected Automatically
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring URLs and search terms used to find our site
- Cookies and similar tracking technologies (see our Cookie Policy)
2.3 Information from Third Parties
- Analytics data from Google Analytics or similar services
- Payment information processed by our payment gateway partners
- Data from social media platforms if you interact with our social content
- Affiliate tracking data when you click on affiliate links
3. How We Use Your Data
We process your personal data only for lawful purposes with appropriate legal basis as required under DPDPA 2023:
3.1 With Your Consent
- Sending newsletters and marketing communications
- Personalising content recommendations based on your interests
- Placing non-essential cookies for analytics and advertising
3.2 For Contract Performance
- Processing and fulfilling orders from our shop or Etsy store
- Communicating about your orders, returns, or customer support requests
3.3 For Legitimate Business Interests
- Improving website functionality and user experience
- Preventing fraud and ensuring security of our platform
- Internal analytics and performance measurement
3.4 For Legal Compliance
- Maintaining records as required under Indian tax and business laws
- Responding to lawful requests from government authorities
4. DPDPA 2023 — Your Rights as a Data Principal
Under the Digital Personal Data Protection Act, 2023 (India), you have the following rights that we are committed to honouring.
4.1 Right to Access Information
You have the right to obtain a summary of your personal data that we process and details about the processing activities.
4.2 Right to Correction and Erasure
You may request correction of inaccurate or incomplete personal data, or request erasure of your personal data where it is no longer necessary for us to retain it.
4.3 Right to Grievance Redressal
You have the right to file a grievance with us about how your data is processed. We will respond within a reasonable timeframe. You may also approach the Data Protection Board of India if your grievance is not resolved.
4.4 Right to Withdraw Consent
Where we rely on your consent to process personal data (e.g., newsletters, cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
4.5 Right to Nominate
You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity, as provided under DPDPA 2023.
How to Exercise Your Rights
To exercise any of your rights, please contact our Grievance Officer at: support@techsoilsociety.com
We will respond to your request within 30 days of receipt.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law.
- Newsletter subscriber data: Until you unsubscribe
- Customer order data: 7 years (as required under Indian tax laws)
- Contact form data: 12 months
- Website analytics data: 26 months
- Cookie data: As specified in our Cookie Policy
6. Data Sharing and Disclosure
We do not sell your personal data. We may share data with:
6.1 Service Providers
Trusted third-party service providers who help us operate our website and business, including:
- Web hosting and infrastructure providers
- Email marketing platforms (e.g., Mailchimp)
- Payment processing services
- Analytics providers (e.g., Google Analytics)
All service providers are bound by data processing agreements and are required to protect your data.
6.2 Affiliate Partners
When you click on affiliate links on our website, you will be redirected to third-party websites. Those third parties have their own privacy policies and we are not responsible for their data practices.
6.3 Etsy Store
Our Etsy store is operated on the Etsy platform. When you make a purchase through our Etsy store, Etsy processes your data according to their own Privacy Policy. Please review Etsy’s Privacy Policy at etsy.com/legal/privacy.
6.4 Legal Requirements
We may disclose your data when required by law, court order, or governmental authority in India.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmitted to and from our website
- Secure access controls for our systems and databases
- Regular security assessments
- Limiting staff access to personal data on a need-to-know basis
However, no method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Children’s Privacy
Our website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a child, we will delete it immediately. If you believe a child has provided us with personal data, please contact us.
9. International Data Transfers
As an Indian website, your data is primarily stored and processed in India. Some of our service providers (such as Google Analytics) may process data outside of India. We ensure that adequate safeguards are in place for any international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via a notice on our website. The updated policy will indicate the revised effective date.
11. Grievance Officer
In accordance with the DPDPA 2023, we have appointed a Grievance Officer for privacy-related concerns:
Response Time: Within 30 days
Name: TechSoilSociety Grievance Officer
Email: support@techsoilsociety.com
Address: Navi Mumbai, Maharashtra, India
Effective Date: May 1, 2026