PRIVACY POLICY

Last Updated: 26.05.2026

1. INTRODUCTION & COMMITMENT

Arlades is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website www.arlades.com, including any related mobile websites, mobile applications, or other media channels connected thereto. Please read this Privacy Policy carefully. If you do not agree with the terms of this Policy, please do not access the Site.

Jurisdiction: This Policy is compliant with the Digital Personal Data Protection Act (DPDP), 2023 and the Information Technology Act, 2000 (as amended).

2. DEFINITIONS

Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number and postal address.

Processing: Any operation performed on Personal Data, such as collection, recording, organization, structuring, storage, use, transmission, or deletion.

Data Principal: The natural person to whom Personal Data relates.

Data Fiduciary: The entity determining the purposes and means of Processing Personal Data (Arlades, in this case).

Sensitive Personal Data: As defined under DPDP 2023, includes financial information, health data, biometric data, caste, religion, and political beliefs.

3. INFORMATION WE COLLECT

3.1 Personal Data (Voluntarily Provided)

We collect Personal Data you voluntarily provide when you:

• Register on the Site

• Create an account

• Subscribe to newsletters or updates

• Place orders

• Request quotes or design consultations

• Participate in surveys or promotions

• Contact us via email, phone, or contact forms

Types of Personal Data collected include:

• Name, email address, phone number, postal address

• Payment information (credit/debit card details processed securely by third-party payment gateways and is not retained on our servers)

• Project details and preferences

• Billing and shipping information

• Communication preferences

3.2 Non-Personal Data (Automatically Collected)

When you visit the Site, we automatically collect:

• Browser type and version

• Device type and ID

• Pages visited and time spent

• Referral source

• Approximate geographic location (country/city level only)

• Device language and timezone

3.3 Cookies and Tracking Technologies

We use cookies to:

• Remember your preferences and login information

• Understand how you use the Site

• Personalize content and recommendations

• Track website performance and user behavior

• Deliver targeted marketing content (with your consent)

Types of Cookies We Use:

Cookie Type	Purpose	Duration	Optional?
Essential Cookies	Enable core website functionality (login, cart, checkout)	Session or persistent	Required
Performance Cookies	Track page performance, user flows, and analytics	Up to 2 years	Optional*
Marketing/Advertising Cookies	Display personalized ads and measure campaign effectiveness	Up to 2 years	Optional
Preference Cookies	Remember your settings (language, theme)	Up to 1 year	Optional

 

*Performance cookies help us improve the Site; users may opt-out but some functionality may be limited.

Third-Party Cookies: We use Google Analytics (Google LLC) to understand user behavior. Google may set its own cookies. Learn more at: https://policies.google.com/privacy

Note: Disabling essential cookies may affect Site functionality.

To opt-out of any cookies, contact us at contact@arlades.com.

4. HOW WE USE YOUR INFORMATION

We process your Personal Data for the following lawful purposes (as per DPDP 2023):

4.1 Core Business Operations

• Fulfilling Orders: Process transactions, manage inventory, arrange delivery

• Customer Service: Respond to inquiries, provide support, resolve complaints

• Account Management: Create and maintain user accounts, authentication

• Communication: Send transactional emails (order confirmations, shipping updates, invoices)

4.2 Relationship Management

• Personalization: Customize your browsing experience and product recommendations

• Marketing Communications: Send promotional offers, newsletters, and product updates (only with your explicit consent)

• Surveys and Feedback: Gather insights to improve products and services

4.3 Legal & Compliance

• Regulatory Compliance: Comply with tax laws, GST requirements, and RBI regulations

• Dispute Resolution: Address complaints and resolve disputes

• Fraud Prevention: Detect and prevent unauthorized or illegal activity

• Record Keeping: Maintain transaction records for audit trails and financial reporting

4.4 Business Intelligence

• Analytics: Analyze user behavior, website traffic patterns, and conversion metrics

• Performance Monitoring: Track system performance and identify technical issues

• Product Development: Understand customer needs to develop new products/services

4.5 Security

• Access Control: Manage login credentials and session security

• Threat Detection: Monitor for suspicious activity and security breaches

Legal Basis for Processing (DPDP 2023):

• Consent: Explicit opt-in for marketing, newsletter, and tracking cookies

• Contract: Processing necessary to fulfill your purchase orders

• Legal Obligation: Tax compliance, money laundering prevention, data retention requirements

• Legitimate Interest: Fraud prevention, security, and service improvement

5. DATA RETENTION

We retain your Personal Data for the following periods:

Data Category	Retention Period	Reason
Account Information	For the duration of your account + 1 year after closure	Service continuity and dispute resolution
Transaction/Order Data	7 years	GST and Indian tax law requirements
Payment Information	Not retained (processed by payment gateway)	Security and PCI compliance
Marketing/Newsletter List	Until you unsubscribe	Legitimate business interest
Website Analytics	12 months	Performance optimization
Cookies	As specified in cookie table above	User preferences and analytics
Customer Support Records	2 years	Dispute resolution and compliance

 

Data Deletion: Upon request at contact@arlades.com, we will delete your Personal Data within 30 days, subject to:

• Legal retention requirements (GST, tax records cannot be deleted)

• Ongoing disputes or complaints

• Contractual obligations

6. DISCLOSURE AND SHARING OF INFORMATION

We may share your Personal Data in the following circumstances:

6.1 Third-Party Service Providers

We share information with trusted vendors who perform services on our behalf:

Service Provider	Type of Data Shared	Purpose
Payment Gateway (Razorpay)	Payment information	Process online transactions
Logistics/Courier Partners (DTDC, Delhivery, etc.)	Name, phone, address	Arrange shipment and delivery
Email Marketing Service (Mailchimp, etc.)	Email address, name	Send newsletters and promotions
Cloud Storage Provider	Customer records, documents	Data backup and recovery
Compliance/Legal Consultants	Personal Data as required	Regulatory compliance
Analytics Tools (Google Analytics)	Anonymized usage data	Website performance tracking

 

Data Processing Agreements: All third-party providers are contractually bound to:

• Process data only as instructed

• Implement appropriate security measures

• Not use data for their own purposes

• Maintain confidentiality

6.2 By Law or to Protect Rights

We may disclose your information when:

• Required by law (court orders, government requests, tax authorities)

• Necessary to protect our legal rights and interests

• Required to enforce our Terms and Conditions

• Necessary to protect personal safety or prevent fraud

• As required by Goods and Services Tax (GST) laws or Anti-Money Laundering (AML) regulations

6.3 Business Transfers

In the event of merger, acquisition, bankruptcy, or asset sale:

• Your Personal Data may be transferred to the successor organization

• We will notify you and provide 30 days to opt-out

• The successor must maintain equivalent privacy protections

6.4 Public Information

Information you choose to post publicly (reviews, testimonials, social media) is not considered confidential.

7. SECURITY OF YOUR INFORMATION

We implement comprehensive security measures to protect your Personal Data:

SSL/TLS Encryption: All data transmitted to/from our website is encrypted using 256-bit SSL encryption

Secure Servers: Data stored on servers protected by firewalls and intrusion detection systems

Access Controls: Only authorized personnel can access Personal Data

Role-Based Access: Employees have access only to data necessary for their roles

Important Note: While we maintain robust security measures, we cannot guarantee absolute security of your information. You are responsible for maintaining confidentiality of your passwords and login credentials.

8. YOUR RIGHTS AND CHOICES

Under the Digital Personal Data Protection Act (DPDP), 2023, you have the following rights:

8.1 Right to Access

You have the right to request and obtain a copy of your Personal Data held by us. We will provide this in a structured, portable format within 30 days of your request.

How to Request: Contact our Grievance Officer at contact@arlades.com with "Access Request" in the subject line.

8.2 Right to Rectification (Correction)

You can request correction of inaccurate, incomplete, or outdated Personal Data.

How to Request: Email contact@arlades.com or update directly in your account dashboard.

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your Personal Data, subject to:

• No ongoing legal or contractual obligations

• No pending transactions or disputes

• Compliance with GST/tax retention requirements

Deletion Period: 30 days from valid request.

8.4 Right to Restrict Processing

You can request that we limit processing of your data for specific purposes (e.g., stop marketing communications, analytics).

8.5 Right to Data Portability

You can request your Personal Data in a portable, machine-readable format (CSV, JSON) for transfer to another service.

8.6 Right to Withdraw Consent

You can withdraw consent for:

• Marketing and promotional communications

• Cookies and tracking technologies

• Targeted advertising

Withdrawal is effective immediately for new communications; past processing remains valid.

8.7 Right to Object

You can object to:

• Processing for marketing purposes

• Profiling or automated decision-making

• Direct marketing via email, SMS, or phone

8.8 Right to Lodge a Grievance

You have the right to file a complaint with us or with the Data Protection Board of India.

9. EXERCISING YOUR RIGHTS

9.1 How to Submit Requests

Email: contact@arlades.com

Postal Address:

Sri Kripa Stones & Granites Pvt Ltd

Plot No 285, 2nd Floor, Sector 28

122022 Gurugram

India

Response Timeline: We will respond to all requests within 30 days.

9.2 Verification of Identity

To process your request, we will ask for sufficient information to verify your identity, such as:

• Email address associated with your account

• Last 4 digits of payment method

• Recent order number

• Date of birth (for sensitive requests)

10. MARKETING COMMUNICATIONS & OPT-OUT

10.1 Types of Communications

We may send you:

• Transactional emails (order confirmations, shipping updates)

• Promotional emails (discounts, new products)

• Newsletter/Blog updates

• SMS notifications (if you opt-in)

• Push notifications (if you enable them)

10.2 Opt-Out Options

Email:

• Click "Unsubscribe" link in any promotional email

• Email contact@arlades.com with "Unsubscribe" in subject

• Manage preferences in your account dashboard

SMS:

• Reply "STOP" to any SMS message

• Email contact@arlades.com to opt-out

Push Notifications:

• Disable in your browser or app settings

Note: You will still receive transactional/service emails even if you opt-out of marketing.

10.3 Legitimate Interest Communications

We may send important notifications about:

• Security updates or breaches

• Changes to Terms of Service or Privacy Policy

• Account suspension or closure notices

These cannot be opted out of.

11. THIRD-PARTY WEBSITES & LINKS

Our Site may contain links to third-party websites (e.g., social media platforms, payment gateways, logistics providers).

We are not responsible for:

• Privacy practices of third-party sites

• Content on third-party sites

• Data collection by third-party sites

We encourage you to review the privacy policies of any third-party site before providing your information.

12. CHILDREN'S PRIVACY

Our Policy on Children:

• We do not knowingly collect Personal Data from children under 18 years old

• Our products and services are designed for adults

• If you are under 18, please do not use the Site or provide any information

If we become aware that we have collected data from a child under 18, we will immediately:

• Delete the data within 30 days

• Notify the user/parent

• Cease any further collection

To Report: Contact contact@arlades.com with "Child Data" in subject line.

13. DATA PROTECTION & COMPLIANCE

13.1 DPDP 2023 Compliance

This Policy aligns with the Digital Personal Data Protection Act, 2023, including:

• Lawful purpose for processing

• Transparency in data collection

• User rights recognition

• Security requirements

• Breach notification within 72 hours

13.2 GST & Tax Compliance

We retain transaction records as required by:

• Goods and Services Tax (GST) Act, 2017 (records retained for 7 years)

• Indian Income Tax Act, 1961

• Anti-Money Laundering (AML) regulations

13.3 IT Act, 2000 Compliance

We comply with information security standards as per:

• Section 43 (unauthorized access)

• Section 66 (hacking)

• Section 72 (breach of confidentiality)

14. DATA PROTECTION OFFICER & GRIEVANCE REDRESSAL

14.1 Grievance Officer (as per DPDP 2023)

Email: contact@arlades.com

Postal Address:

Sri Kripa Stones & Granites Pvt Ltd

Plot No 285, 2nd Floor, Sector 28

122022 Gurugram

India

Response SLA: 30 days from receipt of complaint

14.2 Grievance Process

Submit Complaint: Email contact@arlades.com with details

Acknowledgment: We acknowledge receipt within 5 days

Investigation: We investigate and collect relevant information

Resolution: We communicate our findings and proposed remedies

Appeal: If unsatisfied, you can escalate to the Data Protection Board of India

15. SPECIAL CATEGORIES OF DATA

We do not intentionally collect "Sensitive Personal Data" as defined in DPDP 2023, which includes:

• Financial data (we use payment gateways; we don't store card details)

• Health data

• Biometric data

• Caste, religion, or political beliefs

• Sexual orientation or gender identity

If you voluntarily provide such information in communications (emails, support tickets), we will:

• Handle it with heightened security

• Use it only for the stated purpose

• Delete it upon completion of the transaction

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes in applicable laws

• Updates to our data practices

• Improvements to this Policy

16.1 Notification of Changes

We will notify you of material changes by Email notification (if you have an account). The "Last Updated" date at the top of this page indicates when the Policy was last modified.

16.2 Your Rights Upon Changes

If you disagree with changes, you may:

• Stop using the Site

• Request deletion of your account and data

• Contact us to discuss concerns

Continued use of the Site after changes constitutes acceptance of the updated Policy.

17. CONTACT INFORMATION

For any privacy-related questions, concerns, or requests:

Primary Contact:

Email: contact@arlades.com

Postal Address:

Sri Kripa Stones & Granites Pvt Ltd

Plot No 285, 2nd Floor, Sector 28

122022 Gurugram

India

Website: www.arlades.com

Social Media: Instagram: @arlades_india

18. ACKNOWLEDGMENT

By using www.arlades.com, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

If you have any questions or concerns, please do not hesitate to contact us using the information provided above.

© 2026 Arlades. All rights reserved.