1. Introduction

Hypefly India Products Private Limited ("Hypefly India", "we", "us", or "our") operates the website hypefly.co.in (the "Platform"). We are committed to protecting the personal data of our customers, visitors, and users in compliance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and all other applicable laws.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you have over your data. By using our Platform or placing an order, you acknowledge that you have read and understood this policy.

2. Who We Are (Data Fiduciary)

Hypefly India Products Private Limited

Registered Address:  Mukut Building, 20 SV Road, Bandra West, Mumbai 400050, Maharashtra, India

Current Office: Flat 4A, Building 6B, Sangeeta Apartment, Building No. B/6, Juhu Tara Road, Juhu Koliwada, Santacruz West, Mumbai 400049, Maharashtra, India

Email: contact@hypefly.co.in

WhatsApp: +91 9619946879

3. Personal Data We Collect

3.1 Account & Order Information

• Full name
• Email address
• Mobile/WhatsApp number
• Shipping and billing address
• Order history, preferences, and purchase details
• Payment reference information (processed by PayU, Snapmint, and GoKwik — we do not store full card details)

3.2 Device & Usage Information

When you visit our Platform, we automatically collect:

• IP address, browser type, operating system, and device identifiers
• Pages viewed, time spent, search queries on the Platform, and referral URLs
• Cookies, pixels, and similar tracking technologies (see Section 7)

3.3 Communications Data

• Messages sent to us via WhatsApp, email, or any support channel
• Feedback, reviews, or complaints you submit

4. How We Use Your Personal Data

We process your personal data only for the following purposes:

• Processing and fulfilling your orders, including payment processing, authentication, and delivery coordination
• Creating and managing your account on our Platform
• Communicating with you about your orders, pre-order timelines, shipping updates, and customer support
• Sending you marketing communications via email, SMS, or WhatsApp (where you have opted in or placed an order with us — you may opt out at any time)
• Detecting and preventing fraud, chargebacks, and misuse of our Platform
• Complying with our legal obligations, including GST, customs, and consumer protection laws
• Improving our Platform through analytics, user behaviour analysis, and product personalisation
• Running targeted advertising on platforms such as Google, Meta (Facebook/Instagram), and similar channels

5. How We Share Your Personal Data

We do not sell your personal data. We share it only with trusted service providers who support our operations, under strict confidentiality obligations:

5.1 Service Providers

• Cloud Hosting: Amazon Web Services (AWS) — our Platform is hosted on AWS infrastructure
• Payment Gateways:  for processing payments and buy-now-pay-later services
• Logistics Partners — for order fulfilment and last-mile delivery
• Email Marketing — for sending transactional and promotional emails
• WhatsApp Messaging: — for WhatsApp-based customer communication and broadcasts
• Analytics: Google Analytics — for understanding user behaviour and site performance
• Advertising: Google Ads, Meta (Facebook/Instagram) — for running targeted ad campaigns

5.2 Legal Disclosures

We may disclose your personal data if required by law, court order, regulatory authority, or to protect the legal rights and safety of Hypefly India, our customers, or the public.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes described in this policy:

• Order and transactional data: Retained for 7 years in compliance with the Goods and Services Tax Act and other applicable financial record-keeping obligations
• Account data: Retained for the duration of your account and for a reasonable period thereafter, unless you request deletion
• Marketing data: Retained until you opt out or request deletion
• Device and analytics data: Retained in aggregated or anonymised form for up to 2 years

7. Cookies & Tracking Technologies

Our Platform uses cookies and similar technologies to enhance your browsing experience, analyse usage, and support our advertising. These include:

• Functional cookies: Essential for the Platform to operate (e.g., cart, checkout, session management)
• Analytics cookies: Used by Google Analytics to track page views, traffic sources, and user behaviour
• Advertising pixels: Meta Pixel, Google Ads conversion tracking, and similar tools that allow us to show you relevant ads and measure campaign performance

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

To opt out of Google Analytics tracking, visit: https://tools.google.com/dlpage/gaoptout

To manage Facebook/Meta ad preferences, visit: https://www.facebook.com/settings/?tab=ads

8. Your Rights Under the DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You may request a summary of the personal data we hold about you and how it is being processed
• Right to Correction: You may request correction of inaccurate or incomplete personal data
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations (e.g., GST record retention). To make a deletion request, email us at contact@hypefly.co.in
• Right to Grievance Redressal: You may raise a complaint or grievance with us using the contact details in Section 10
• Right to Nominate: You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity

We will respond to all valid requests within 30 days. In certain cases, we may be unable to delete data that is required to be retained under applicable law.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• Data hosted on Amazon Web Services (AWS) with industry-standard security configurations
• HTTPS encryption for all data transmitted via our Platform
• Payment data handled exclusively by PCI-DSS compliant gateways (PayU, Snapmint, GoKwik) — we do not store full card numbers on our servers
• Restricted internal access to personal data on a need-to-know basis

While we take all reasonable precautions, no method of internet transmission is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected individuals and the Data Protection Board of India as required under the DPDP Act.

10. Marketing Communications & Opt-Out

We may send you promotional communications by email, SMS, or WhatsApp if you have placed an order with us or have opted in to receive such communications.

You can opt out at any time by clicking the unsubscribe link in any marketing email, replying STOP to any SMS or WhatsApp message, or by emailing contact@hypefly.co.in. Opting out of marketing will not affect transactional communications related to your orders.

11. Third-Party Websites

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or regulatory guidance. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after any changes constitutes your acceptance of the updated policy.

13. Grievances & Contact Us

If you have any questions, concerns, or grievances regarding this Privacy Policy or the handling of your personal data, please contact us:

Privacy Contact

Hypefly India Products Private Limited

Flat 3B, Mukut Building, 20 SV Road, Bandra West, Mumbai 400050

Email: contact@hypefly.co.in

WhatsApp: +91 9619946879

We will endeavour to resolve all grievances within 30 days of receipt. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India, once established and operational under the DPDP Act, 2023.