Privacy Policy

Information you provide

• Identity data: Name, email address, phone number
• Address data: Delivery address, city, state, pincode
• Account data: Login credentials (password stored encrypted), account preferences
• Order data: Products ordered, quantities, order value, payment status
• Communication data: Messages sent to customer care or grievance officer
• Showroom visit requests: Name, phone, preferred instrument category, preferred visit date, and optional campaign parameters from the Book a demo form on Yamaha Music Square landing pages

Information collected automatically

• Technical data: IP address, browser type and version, device type, operating system — including the IP address and browser string recorded when you submit the Book a demo form (for abuse prevention and to match your request)
• Usage data: Pages visited, search queries on the platform, products viewed, cart actions
• Cookie data: Session tokens, cart state, preferences (see Section 7)

We do not collect sensitive personal data such as financial account numbers, biometric data, or Aadhaar numbers. Payment processing is handled entirely by Razorpay — Gretex Industries Limited never sees or stores your card or banking credentials.

• Order fulfilment: Processing your order, arranging delivery, generating GST invoices
• Account management: Creating and maintaining your account, enabling order history access
• Customer support: Responding to queries, processing return and refund requests
• Legal compliance: GST records, invoicing obligations under Indian tax law, consumer protection compliance
• Platform improvement: Understanding how the platform is used to improve features and fix issues
• Fraud prevention: Detecting and preventing fraudulent transactions
• Showroom leads: Arranging instrument demos at Yamaha Music Square and, when enabled, forwarding qualified leads to our CRM

We do not use your data for unsolicited marketing. Order-related transactional communications (order confirmation, dispatch notification, delivery update) are sent as part of the service.

We share your data only with the following third-party service providers, strictly for the purposes described below — fulfilling your order, and understanding how our website is used:

We do not sell, rent, or trade your personal data to any third party for commercial purposes. We do not share data with advertisers.

We may disclose personal data to government or regulatory authorities if required by law, court order, or to protect our legal rights.

• Transactional data (orders, invoices): Retained for a minimum of 7 years as required under Indian GST law
• Account data: Retained while your account is active. Upon account deletion, personal data is removed within 30 days, subject to legal retention obligations
• Customer support data: Retained for 2 years from the date of the last communication
• Book a demo requests: Retained until the visit is completed or cancelled, then for up to 2 years for follow-up and CRM history
• Technical & usage data: Retained for 90 days in log form, then aggregated or deleted

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to access: Request a summary of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete personal data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements — e.g. GST records cannot be deleted)
• Right to grievance redressal: File a complaint with our Grievance Officer; and thereafter with the Data Protection Board of India if unresolved
• Right to nominate: Nominate another individual to exercise your rights in the event of your incapacity or death

To exercise any of these rights, contact us at vishal@gretexindustries.com. We will respond within 30 days of receipt.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted storage of passwords, HTTPS for all data transmission, access controls limited to authorised personnel, and secure third-party integrations. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Gretex Industries Limited uses the following types of cookies:

• Essential cookies: Required for the platform to function — session management, cart state, login authentication. These cannot be disabled without breaking core functionality.
• Preference cookies: Remember your choices such as pincode, language, and display preferences.
• Analytics cookies (Google Analytics): Help us understand how visitors use the website — for example which pages and products are viewed — so we can improve it. These cookies do not identify you by name, email address or phone number.

We do not use advertising or cross-site tracking cookies. You can clear or block cookies through your browser settings; clearing them will log you out and reset your preferences. You can also opt out of Google Analytics using Google's browser add-on at https://tools.google.com/dlpage/gaoptout.

Gretex Industries Limited is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. For material changes, we will notify registered users by email. Your continued use of Gretex Industries Limited after any change constitutes your acceptance of the updated policy.

Regulated under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.