1. Introduction
This Privacy Policy applies to XtraCover Technologies Private Limited, including its subsidiaries and Indian branch offices (referred to as "XtraCover," "we," "our," or "us"). As a Data Fiduciary, XtraCover is committed to protecting your personal information and ensuring transparency in how we collect, use, store, and share your data. Our goal is to provide a secure and trustworthy experience for all users.
2. Purpose of this Policy
This Privacy Policy explains how we handle personal data in compliance with applicable laws, including the Digital Personal Data Protection Act (DPDPA), 2023 and the General Data Protection Regulation (GDPR), 2018.
It covers:
• The types of personal data we collect
• How we collect data (directly or indirectly)
• How we use your data
• How we store and protect your data
• Your rights regarding your personal data
Our services are intended for business and professional use. We do not knowingly collect data from individuals under 18 years of age. If you believe a minor has provided us with personal data without consent, please contact us for removal. For any concerns, inquiries, or requests related to your personal data, contact us at contactus@xtracover.com.
3.Key Definitions
Term | Definition |
---|---|
Personal Data / Personally Identifiable Information (PII) | Any information that identifies an individual, such as name, contact details, or location data. |
Data Fiduciary | The entity (person, company, or organization) that determines how personal data is processed. |
Data Principal | The individual whose personal data is collected and processed. |
Data Processor | A third party that processes personal data on behalf of XtraCover. |
IP Address | A unique numerical address assigned to a device connected to the internet. |
Machine-Readable Format | Data in a structured format that can be processed by computers (e.g., PDFs, Word documents, Excel sheets). |
4.Abbreviations
Abbreviation | Meaning |
---|---|
DPO | Data Protection Officer |
TCP/IP | Transmission Control Protocol/Internet Protocol |
PII | Personally Identifiable Information |
5.Roles & Responsibilities
Data Fiduciary / Data Controller Details
XtraCover Technologies Private Limited
A-1, 3rd Floor, FIEE Complex, Okhla Industrial Area,
Phase-2, New Delhi, South Delhi, DL 110020
Data Protection Officer (DPO) Contact
For privacy-related concerns or requests, reach out to our DPO at contactus@xtracover.com.
6. How We Use Your Data
We process personal data for the following purposes, ensuring compliance with legal requirements:
1. Providing Services: To process orders, manage accounts, and fulfill contractual obligations.
2. Communication: To send updates, promotions, and service-related information (opt-out available).
3. User Experience: To analyze website activity and enhance functionality.
4. Security & Compliance: To protect against fraud and ensure legal compliance.
5. Consent-Based Processing: To process personal data only when consent is required.
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy. Once the retention period ends, we securely delete, destroy, or anonymize data as per:
• Legal and regulatory requirements
• Industry best practices
• Contractual obligations
Transactional data is retained for five years from the date of the transaction before being securely disposed of.
7.Data Retention & Storage
As a user, you have the following rights under the Digital Personal Data Protection Act (DPDPA), 2023 and the General Data Protection Regulation (GDPR), 2018:
• Right to Access: Request details about how your personal data is processed.
• Right to Rectification: Request corrections to inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Object: Object to the processing of your data if it impacts your rights and freedoms.
• Right to Portability: Request a machine-readable copy of your personal data.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.
• Right to Nominate a Representative: Appoint someone to manage your data rights in case of incapacity or death.
• Right to Grievance Redressal: Raise concerns with our DPO at contactus@xtracover.com.
8.Your Rights Under Data Protection Laws
We implement strict security measures, including:
• Technical safeguards: Firewalls, encryption, and access controls.
• Organizational safeguards: Data access restrictions and staff training.
• Physical safeguards: Secure storage and controlled access to data centers.
While we take every precaution to secure your data, no system is entirely immune to security risks. If you suspect a data breach, please contact us immediately.
9.Security Measures
We may share personal data:
• With subsidiaries, affiliates, and trusted service providers for business operations.
• To comply with legal obligations and government requests.
• To prevent fraud, protect rights, and enforce policies.
• During business transfers (e.g., mergers, acquisitions).
We do not sell your personal data to third parties.
10.Data Sharing & Third-Party Disclosures
Your data may be transferred and processed outside your country in compliance with applicable legal frameworks. We ensure adequate safeguards for international data transfers.
11.Cross-Border Data Transfers
We may update this Privacy Policy periodically. Any significant changes will be communicated via:
• Updates on our website
• Email notifications where required by law
Please review this policy regularly for the latest updates.
12.Policy Updates
For any questions, concerns, or requests related to this Privacy Policy, please reach out to us.
13.Contact Us
Email: contactus@xtracover.comCopyright © 2025 XtraCover All rights reserved