Privacy Policy
Please read the following carefully to understand our processes and practices regarding your Personal Data and how we will treat it.
Data Protection
We are committed to compliance with applicable Indian data protection laws including the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and forthcoming Personal Data Protection legislation.
We will treat all your Personal Information as confidential (although we reserve the right to disclose this information in the circumstances set out below). We will keep it on secure servers and we will fully comply with all applicable Indian Data Protection and relevant consumer legislation.
Information that you supply is held securely and strict security procedures are followed to prevent unauthorised access. We will not sell, trade or rent your personal information to others unless you authorise us to do so.
We may share the information you provide us with our associated companies and suppliers (such as delivery companies) that provide additional services.
Personal Data We May Collect From You
Blazemark, which you as a data subject entered into an agreement with by using our website or mobile application, will be the controller for the user’s data.
We may collect and process the following personal data about you on our website and mobile applications:
Identity Data
Including information such as first name, last name, title, date of birth, and government identification details (as required for delivery verification).
Contact Data
Including information such as email address, billing address, delivery address, location, state, country, telephone number, and loyalty programme membership details.
Financial Data
Including information such as payment card details, bank account information, UPI details, and digital wallet information.
Transaction Data
Including information such as details of your purchases and the fulfilment of your orders (order number, subtotal, product details, currency, discounts, shipping costs, number of items, product codes (SKU), individual item prices, categories, taxes, etc.), payments to and from you and details of other products and services you have obtained from us, correspondence or communications with you in respect of your orders, and details of any rewards and bonuses awarded.
Technical Data
Including information such as details of the device(s) you use to access our services, your internet protocol (IP) address, login data, your username and password, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, mobile device information.
Profile Data
Including information such as purchases or orders made by you, product interests, railway model preferences, collection themes, reviews and survey responses, wishlist items, and account preferences.
Usage Data
Including information such as how and when you use our website/app, how you moved around it, what pages you visited, what products you viewed, what you searched for, time spent on pages, and interaction patterns.
Marketing and Communications Data
Including information such as your preferences in receiving marketing from us and our third parties, your communication preferences, newsletter subscriptions, and promotional opt-ins.
We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data as this data does not directly or indirectly reveal your identity. If we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.
We collect your data when you interact with us which includes (but is not limited to) when you browse our website, create an account, purchase products from us, leave us feedback, contact customer service, participate in surveys, enter competitions, or engage with our social media content.
Uses Made of Your Personal Data
We (and our representatives) may hold and use your personal data in the following ways:
Personal Data You Give to Us Could Be Used To:
- Order Fulfillment: Carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us, including the processing of, and updates about, any existing product orders.
- Customer Service: Provide customer support, respond to inquiries, resolve disputes, and handle returns or exchanges.
- Product Recommendations: Provide you with information about other railway models and services we offer that are similar to those that you have already purchased or enquired about.
- Service Updates: Notify you about changes to our service, new product releases, policy updates, or important account information.
- Website Optimization: Ensure that content from our website or app is presented in the most effective manner for you and for your device.
- Payment Processing: Enable our contractual partners to process payments, deliver your products, or provide you with additional services such as financing options or insurance.
Personal Data We Collect About You Could Be Used To:
- Website Administration: Administer our website or app and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
- Product Development: Improve our railway models and services and to ensure that website or app content is presented in the most effective manner for you and your device.
- Interactive Features: Allow you to participate in interactive features of our website or app and services, when you choose to do so, including product reviews, wish lists, and community forums.
- Security: Support our efforts to keep our website or app safe and secure, prevent fraud, and protect against unauthorized access.
- Personalization: Make suggestions and recommendations to you and other users of our website or app about railway models or services that may interest you or them based on your browsing and purchase history.
- Review Invitations: Send you an email if you have purchased from us, inviting you to review the product(s) bought. You will be able to unsubscribe from these emails at any time.
- Business Analytics: Analyze customer behavior, preferences, and trends to improve our business operations and product offerings.
User Generated Content
Personal Data we collect from user generated content (such as product reviews, photos, social media posts) could be used for marketing, advertising and promotional purposes in accordance with our Terms and Conditions. We will always get your express consent before we engage in any third-party marketing or non-direct marketing.
Legal Basis for Processing
For some aspects of processing your Personal Data, such as receiving direct marketing communications, you can exercise your right to prevent such processing by checking or un-checking (as directed) certain boxes on the forms we use to collect your data or by following the unsubscribe link on any marketing emails or SMS messages we send you. You can also exercise this right at any time by contacting us.
For other aspects of processing, we do not need your consent to process your Personal Data. This will be the case where we can rely on:
- Legal Obligations: To comply with our contractual obligations to you or legal requirements
- Legitimate Business Interests: For example, ensuring we provide the best customer experience, fraud prevention, and business analytics
- Vital Interests: To protect your vital interests or those of others
You should be aware that if we are requested by the Police, Income Tax Department, GST authorities, or any other regulatory or government authority investigating suspected illegal activities to provide your personal information and/or user information, we are entitled to do so.
If you wish to use credit facilities, financing options, or buy-now-pay-later services, you consent to us providing your Personal Data, including contact and financial data, to the providers of those services.
Information Sharing and Third Parties
Where we pass your Personal Data to third parties or where you follow links on our website which take you to a third party’s website, this may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
Third Parties We May Share Your Data With:
- Shipping Partners: Courier services and logistics companies for order delivery
- Payment Processors: Banks, payment gateways, and financial service providers
- Technology Services: Web hosting, cloud storage, and IT support providers
- Customer Service: Help desk platforms and communication tools
- Marketing Services: Email platforms and advertising networks (with your consent)
- Legal Compliance: Government authorities, courts, and law enforcement (when legally required)
Your Rights Under Indian Data Protection Law
Under applicable Indian data protection regulations, you have the following rights:
Right to Information
The right to be informed of any data stored about you. You have the right to know what personal data we collect, how we use it, and who we share it with.
Right of Access
The right to access any personal data stored about you. You can request a copy of your personal data that we hold.
Right to Correction
The right to rectify any errors in the personal data stored about you. If you find inaccuracies in your data, you can request corrections.
Right to Erasure
The right to have your personal data deleted, subject to certain legal and business requirements.
Right to Restrict Processing
The right to have your personal data used only for specific agreed purposes and to restrict other processing activities.
Right to Data Portability
The right to receive your personal data in a structured, commonly used format so you can transfer it to another service provider.
Right to Object
The right to object to the processing of your personal data for certain purposes, including direct marketing.
Rights Regarding Automated Decision Making
The right to not be subject to automated decision-making processes without human intervention.
Important Note: In all cases, regardless of the reason why we process your Personal Data, if you exercise your right of erasure, to object, or to restrict processing, we will always comply with your rights. However, in some cases, if you do not allow us to process certain Personal Data, you may not be able to use our services or purchase our products, and this can affect your use of our website.
Cookies and Similar Technologies
When you visit our website or mobile application, we may store or retrieve data about you using cookies and similar technologies. Cookies may be necessary for the basic functionality of the website as well as other purposes, including the personalisation of your experience.
Cookie Categories:
Essential Cookies: Necessary for basic website functionality, including shopping cart operations, secure login, and payment processing.
Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
Personalization Cookies: Remember your preferences and provide customized content based on your interests and browsing history.
Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns.
You have the option of disabling certain types of cookies through your browser settings, though doing so may impact your experience on the website. Essential cookies cannot be disabled as they are required for basic website functionality.
For further details of how Google uses information from our sites, please visit Google’s Privacy & Terms policies.
Data Security Measures
We implement comprehensive security measures to protect your personal information:
Technical Safeguards:
- SSL/TLS encryption for all data transmission
- Secure server infrastructure with firewall protection
- Regular security updates and patches
- Encrypted data storage
- Secure payment processing systems
Administrative Safeguards:
- Strict access controls and authentication requirements
- Regular staff training on data protection procedures
- Documented data handling policies and procedures
- Incident response and breach notification protocols
Physical Safeguards:
- Secure data center facilities
- Restricted physical access to servers and systems
- Environmental controls and monitoring
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Account Information: Retained while your account is active and for 7 years after closure for legal compliance
- Transaction Records: Retained for 7 years for tax and legal purposes
- Marketing Data: Retained until you unsubscribe or request deletion
- Customer Service Records: Retained for 3 years for service improvement purposes
Upon account deletion or data retention period expiry, personal data is securely deleted or anonymized.
International Data Transfers
Currently, we primarily process data within India. If we need to transfer your data outside India for service provision, we will:
Ensure adequate data protection measures are in place
Obtain your consent where required by law
Use appropriate legal mechanisms for international transfers
Notify you of any such transfers in advance
Children’s Privacy
Our services are not directed to children under 14 years of age. We do not knowingly collect personal information from children under 14. If we become aware that we have collected personal data from a child under 14, we will take steps to delete such information promptly.
Parents or guardians who believe their child has provided us with personal information should contact us immediately.
Changes to Our Privacy Policy
We may update this Privacy Policy from time to time as we develop our services, website, and mobile applications, in order to improve our offerings and comply with changing legal requirements.
When we make significant changes to this policy, we will:
- Update the “Last Updated” date at the top of this policy
- Notify you by email if you have an account with us
- Display a prominent notice on our website
- Seek your consent for any material changes that affect how we use your personal data
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Information
If you have any questions, comments, concerns, or requests regarding this Privacy Policy and your personal data, please contact us:
General Privacy Inquiries:
Email: privacy@blazemark.com
Phone: +91-XXXX-XXXXX
Address: [Your Business Address]
Customer Service:
Email: support@blazemark.com
Phone: +91-XXXX-XXXXX
Hours: Monday-Friday, 9:00 AM – 6:00 PM IST
Data Protection Officer:
For formal data protection matters and rights requests:
Email: dpo@blazemark.com
Address: Data Protection Officer, Blazemark, [Your Business Address]
Postal Address:
Blazemark [Your Complete Business Address] [City, State, PIN Code] India
Response Time: We will respond to your privacy-related inquiries within 30 days of receipt. For urgent matters, please call our customer service line during business hours.
This Privacy Policy is governed by Indian law and any disputes will be subject to the exclusive jurisdiction of Indian courts.