XtraCover Privacy Policy

1. Introduction

This Privacy Policy applies to XtraCover Technologies Private Limited, including its subsidiaries and Indian branch offices (referred to as "XtraCover," "we," "our," or "us"). As a Data Fiduciary, XtraCover is committed to protecting your personal information and ensuring transparency in how we collect, use, store, and share your data. Our goal is to provide a secure and trustworthy experience for all users.

2. Purpose of this Policy

This Privacy Policy explains how we handle personal data in compliance with applicable laws, including the Digital Personal Data Protection Act (DPDPA), 2023 and the General Data Protection Regulation (GDPR), 2018.

It covers:
• The types of personal data we collect
• How we collect data (directly or indirectly)
• How we use your data
• How we store and protect your data
• Your rights regarding your personal data

Our services are intended for business and professional use. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has provided us with personal data without consent, please contact us for removal. For any concerns, inquiries, or requests related to your personal data, contact us at contactus@xtracover.com.

3.Key Definitions

4.Abbreviations

5.Roles & Responsibilities

Data Fiduciary / Data Controller Details
XtraCover Technologies Private Limited
A-1, 3rd Floor, FIEE Complex, Okhla Industrial Area,
Phase-2, New Delhi, South Delhi, DL 110020
Data Protection Officer (DPO) Contact
For privacy-related concerns or requests, reach out to our DPO at contactus@xtracover.com.

6. How We Use Your Data

We process personal data for the following purposes, ensuring compliance with legal requirements:

1. Providing Services: To process orders, manage accounts, and fulfill contractual obligations.
2. Communication: To send updates, promotions, and service-related information (opt-out available).
3. User Experience: To analyze website activity and enhance functionality.
4. Security & Compliance: To protect against fraud and ensure legal compliance.
5. Consent-Based Processing: To process personal data only when consent is required.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy. Once the retention period ends, we securely delete, destroy, or anonymize data as per:

• Legal and regulatory requirements
• Industry best practices
• Contractual obligations

Transactional data is retained for five years from the date of the transaction before being securely disposed of.

7.Data Retention & Storage

As a user, you have the following rights under the Digital Personal Data Protection Act (DPDPA), 2023 and the General Data Protection Regulation (GDPR), 2018:

• Right to Access: Request details about how your personal data is processed.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Object: Object to the processing of your data if it impacts your rights and freedoms.
• Right to Portability: Request a machine-readable copy of your personal data.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.
• Right to Nominate a Representative: Appoint someone to manage your data rights in case of incapacity or death.
• Right to Grievance Redressal: Raise concerns with our DPO at contactus@xtracover.com.

8.Your Rights Under Data Protection Laws

We implement strict security measures, including:
• Technical safeguards: Firewalls, encryption, and access controls.
• Organizational safeguards: Data access restrictions and staff training.
• Physical safeguards: Secure storage and controlled access to data centers.
While we take every precaution to secure your data, no system is entirely immune to security risks. If you suspect a data breach, please contact us immediately.

9.Security Measures

We may share personal data:
• With subsidiaries, affiliates, and trusted service providers for business operations.
• To comply with legal obligations and government requests.
• To prevent fraud, protect rights, and enforce policies.
• During business transfers (e.g., mergers, acquisitions).
We do not sell your personal data to third parties.

10.Data Sharing & Third-Party Disclosures

Your data may be transferred and processed outside your country in compliance with applicable legal frameworks. We ensure adequate safeguards for international data transfers.

11.Cross-Border Data Transfers

We may update this Privacy Policy periodically. Any significant changes will be communicated via:
• Updates on our website
• Email notifications where required by law
Please review this policy regularly for the latest updates.

12.Policy Updates

For any questions, concerns, or requests related to this Privacy Policy, please reach out to us.

13.Contact Us