What we collect, why we collect it, who we share it with and how you can have it corrected or removed.
Last updated 26 August 2026INFINITAS ECOMMERCE PRIVATE LIMITED is a private limited company incorporated in India, operating an online supply house for raw materials and home supplies at this website. In this policy, "we", "us" and "our" mean INFINITAS ECOMMERCE PRIVATE LIMITED, and "you" means the person visiting the site or placing an order.
This policy is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
We do not collect sensitive personal data such as caste, religion, biometric data or health information, and you should not send it to us.
| Purpose | Data used | Basis |
|---|---|---|
| Processing and delivering your order | Name, contact details, address | Performance of contract |
| Payment processing and reconciliation | Order reference, amount, gateway transaction ID | Performance of contract |
| GST invoicing and statutory records | Name, address, GSTIN where supplied | Legal obligation |
| Order updates and delivery notifications | Email, mobile number | Performance of contract |
| Answering enquiries and quotes | Whatever you send us | Consent |
| Fraud prevention and site security | IP address, order patterns | Legitimate interest |
| Improving the catalogue and site | Aggregate usage data | Legitimate interest |
| Marketing emails, where you opt in | Email address | Consent — withdrawable at any time |
We do not sell your personal data, and we do not share it for third-party advertising.
We never see or store your payment credentials. UPI payments are completed inside your own payment app, through our payment gateway partner. We receive only a transaction reference, the amount and a success, failure or pending status.
We do not store card numbers, CVV codes, UPI PINs, OTPs or net-banking credentials at any point, and nobody from INFINITAS ECOMMERCE PRIVATE LIMITED will ever ask you for them. If someone does, it is not us — report it to us immediately.
After these periods, data is deleted or irreversibly anonymised.
The site runs over HTTPS with a valid TLS certificate, so data in transit is encrypted. Administrative access is restricted, password-protected and logged, and databases sit behind server-level access controls with regular backups.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023.
You may ask us to:
Write to us with your order reference or registered email address and we will respond within 30 days.
This site is not directed at children, and we do not knowingly collect personal data from anyone under 18. Some products in the catalogue — chemicals, adhesives, blades and hand tools among them — are not suitable for use by children and must be stored out of their reach. If you believe a child has given us personal data, tell us and we will delete it.
We may update this policy as the business or the law changes. The revision date at the top of this page always reflects the current version, and material changes will be highlighted on the site. Continuing to use the site after a change means you accept the updated policy.
This policy is governed by the laws of India, and any dispute is subject to the courts at Bihar. See also our grievance redressal page.