Sathya Krishnan, operating as EPIC FULL FILLS ("Data Fiduciary", "We", "Us"), collects, processes, and safeguards your personal data in strict compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.
1. Itemized Data Collection
We adhere to data minimization principles and collect only the data necessary to provide our services:
- Identity & Contact Data: Full name, billing address, shipping address, email address, and phone number.
- Technical Data: IP address, browser type, device information, and navigation metrics collected during website visits.
- Transaction Data: Purchase history, order status, and payment references (Payment card/account credentials are processed directly by Razorpay and are never stored on our servers).
2. Purpose of Processing & Lawful Basis
Your personal data is processed strictly for:
- Fulfilling purchase orders, generating valid GST tax invoices, and arranging doorstep courier delivery.
- Managing customer inquiries, processing return/replacement requests, and providing technical support.
- Transmitting essential transactional updates (e.g., order dispatch alerts and tracking links).
3. Explicit Consent & Marketing Communications
- Promotional email newsletters, WhatsApp updates, or SMS offers are sent only if you have provided explicit, affirmative opt-in consent.
- Right to Withdraw Consent: You can withdraw your consent at any time through your Website Account Dashboard settings or by clicking the "Unsubscribe" link included in our emails (managed via Brevo).
4. Third-Party Data Processors
We do not sell, lease, or monetize your personal data. We transfer your data solely to authorized third-party Data Processors bound by legal data protection obligations:
- Logistics Partners: Bluedart, Delhivery, Ekart, Shadowfax, and Xpressbees receive your recipient name, delivery address, and contact number for package delivery.
- Payment Gateway: Razorpay processes your transactional information securely.
- Communication Infrastructure: Brevo handles automated customer transactional and marketing emails.
5. Data Principal Rights
Under the DPDP Act, 2023, you have the right to:
- Access a summary of your personal data held by us.
- Request correction or updating of inaccurate or incomplete personal records.
- Request erasure of your personal data (subject to legal and tax retention mandates).
- Nominate another individual to exercise your data rights in the event of death or incapacity.
To exercise any of these rights, contact us at support@epicfullfills.com. Unresolved concerns can be escalated through our Grievance Redressal Policy.