Privacy Policy

Effective date: 14 October 2026 1. Who we are Adiniru Private Limited (“Adiniru”, “we”, “us”) operates the website https://adiniru.co.in and related online services for its bookshop, events, publishing intake, and academies. Contact for privacy / data requests: Email: directenglishkerala@gmail.com Phone: +91 99954 93552 Form: https://adiniru.co.in/contact 2. Scope This Privacy Policy explains how we collect, use, store, and share personal data when you browse the site, create a customer account, place an order, register for an event, or submit academy / publishing forms. It is prepared with reference to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable e-commerce practice in India. 3. Information we collect • Identity and contact data: name, email address, phone number • Account credentials: password stored only as a secure one-way hash • Transaction data: shipping address, order contents, event or class registrations, payment status and gateway order / transaction references • Content you upload: manuscripts, documents, photos, or certificates submitted through forms • Technical data: IP address, browser type, device information, and pages visited, used for security and reliability We do NOT store card numbers (PAN), CVV, or UPI PINs. Card and UPI credentials are entered only on HDFC Bank SmartGateway’s hosted pages. 4. Purpose of processing We use personal data to: • Register and manage your customer account • Process and fulfil bookshop orders and event / academy payments • Verify payments through HDFC SmartGateway (Status API / webhooks) and process approved refunds • Send transactional emails (order status, registration updates) • Respond to support, cancellation, and privacy requests • Comply with tax, accounting, banking audit, and legal obligations • Protect the site against fraud and abuse 5. Lawful use We process personal data as needed to perform a contract with you (orders, registrations, accounts), for legitimate business operations of Adiniru, and where required by Indian law. Where consent is required for a specific optional purpose, we will ask for it separately. 6. Sharing of personal data We do not sell personal data. We may share limited data with: • HDFC Bank SmartGateway / payment processors, to complete or verify payments and refunds • Email delivery service providers, for transactional messages • Cloud hosting and object-storage providers that process data on our instructions • Professional advisers and government authorities when required by law or to protect legal rights 7. Cross-border transfers If any processor stores or processes data outside India, we will do so only as permitted under applicable Indian law and with appropriate safeguards. 8. Cookies and similar technologies We use essential cookies and local storage (for example a secure session cookie and cart identifier) so you can stay signed in and keep items in your cart. These are required for the website to function. We do not use cookies to build advertising profiles for sale. 9. Security We use HTTPS/TLS in transit, access controls, and least-privilege practices for systems that handle personal and payment-status data. No method of transmission over the internet is completely secure; please use a strong unique password. 10. Retention We retain account, order, and payment-status records for as long as needed for fulfilment, customer support, refunds, bank / tax audits, and legal requirements. When data is no longer required, we delete or anonymise it where feasible. 11. Your rights Subject to the DPDP Act and other applicable law, you may request: • Access to personal data we hold about you • Correction of inaccurate data • Withdrawal of consent where processing is consent-based • Closure of your customer account (some transaction records may still be retained for compliance) To exercise these rights, email directenglishkerala@gmail.com with the subject “Privacy request” and enough detail for us to verify your identity. 12. Children Our online shop and most account features are intended for adults. If you believe a child has provided personal data without appropriate consent, contact us and we will review and delete it where required. 13. Grievance / contact For privacy complaints or questions, contact us using the details in section 1. We aim to acknowledge requests within a reasonable period and resolve them in line with applicable law. 14. Changes We may update this Privacy Policy from time to time. The effective date at the top will change when we publish a revision. Continued use of the website after an update means you accept the revised policy. Related pages: Terms and Conditions · Cancellation and Refund Policy · Contact Us