Privacy Policy

1. Introduction

Rock Luggage India (“Rock”, “we”, “our”, or “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website, purchase our products, or interact with our services.

Our practices reflect the standards of the General Data Protection Regulation (GDPR) and align with India’s Digital Personal Data Protection Act, 2023 (DPDPA).

We do not and will never sell your personal information to third parties.

If you have questions or concerns about this Policy or how your personal data is handled, please contact us at care@rockluggage.in.

2. What Personal Data We Collect

Depending on your interaction with Rock Luggage India, we may collect:

  • Full name
  • Email address(es)
  • Delivery and billing addresses
  • Phone number(s)
  • IP address(es) and device information
  • Data from cookies and analytics tools (e.g. Google Analytics)
  • Transaction details (via Shopify’s secure checkout system)

This information helps us process your orders, deliver products, provide customer support, and enhance your shopping experience.

3. How We Collect Your Data

We collect information in the following ways:

  • When you create an account or make a purchase on our website.
  • When you subscribe to our marketing communications or newsletter.
  • When you submit an enquiry, request warranty support, or communicate with us.
  • Automatically through cookies, web analytics, or similar technologies when you browse our website.

You may refer to Google’s privacy policy regarding analytics here:
https://support.google.com/analytics/answer/3379636?hl=en

4. Legal Basis and Purpose for Processing

We process your personal data to:

  • Fulfil your orders and manage transactions.
  • Provide customer support and respond to enquiries.
  • Send updates about your purchases, delivery, or product availability.
  • Personalise your experience and improve our website performance.
  • Comply with applicable legal and tax obligations.

Where required, we will seek your explicit consent before using your information for marketing or other secondary purposes.

5. How We Obtain Consent

When you provide personal data (for example, to complete a purchase or register a warranty), you consent to its collection and use for that specific purpose.
If we request your data for an additional purpose (e.g., promotional emails), we will ask for your explicit consent or provide an option to opt out.

You may withdraw your consent at any time by contacting us at care@rockluggage.in

6. How We Store and Protect Your Data

Rock Luggage India partners with Shopify and Klaviyo to securely store and process your information.

  • Shopify provides the e-commerce platform used for transactions.
  • Klaviyo manages our email marketing and communication database.

Both platforms use encrypted data storage, secure firewalls, and PCI-DSS compliant payment systems.
Access to your data is strictly limited to authorised Rock employees and service providers.

For more details, refer to:

7. How We Share Your Data

We do not sell your personal data.
However, we may share it with trusted third-party partners to enable core functions such as:

  • Payment processing (via Shopify or Razorpay, as applicable).
  • Logistics and delivery partners for order fulfilment.
  • Customer communication and support platforms.
  • IT, hosting, or data storage providers.

All third parties are bound by confidentiality agreements and are only permitted to process data as required to perform their service.

8. International Data Transfers

Your data may be processed outside India (e.g., in the EU, UK, or USA) where Shopify or Klaviyo servers are located.
We ensure appropriate safeguards are in place—such as Standard Contractual Clauses (SCCs) or equivalent mechanisms—to protect your information.

9. Cookies and Tracking Technologies

Our website uses cookies to enhance browsing experience, analyse site performance, and enable key functions such as checkout.

You can modify your cookie preferences at any time via your browser settings.

10. Your Rights

Under the DPDPA 2023 (and GDPR where applicable), you have the right to:

  • Access: Request a copy of your personal data.
  • Rectify: Correct or update inaccurate or incomplete data.
  • Erase: Request deletion of your personal data (“right to be forgotten”).
  • Withdraw Consent: Stop receiving marketing communications.
  • Data Portability: Request transfer of your data to another provider.

To exercise these rights, email care@rockluggage.in with “Data Access Request” in the subject line.
We may verify your identity before fulfilling your request.

11. Data Retention

We retain your personal data only as long as necessary to:

  • Complete transactions or provide customer support.
  • Comply with legal, accounting, or regulatory requirements.
  • Maintain records for product warranties or returns.

Once the retention period expires, data is securely deleted or anonymised.

12. Third-Party Links

Our website may contain links to external sites (e.g., courier tracking, payment gateways).
We are not responsible for the privacy practices of these websites and encourage you to review their privacy statements.

13. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect new legal requirements or operational changes.
Any updates will be posted on our website: www.rockluggage.in.
Your continued use of our website after such updates constitutes your acceptance of the revised policy.

15. Contact Us

If you have questions, requests, or complaints regarding this Privacy Policy, please contact:

Data Protection Officer – Rock Luggage India
Email: care@rockluggage.in
Address: Rock Luggage India, Bengaluru, Karnataka, India