Privacy Policy

Your privacy matters to us. Learn how we protect and handle your personal information.

GDPR Compliant
Secure Data
Transparent

Quick Navigation

Last Updated: September 2025

Information We Collect

1
Personal Information

Name, email address, phone number
Billing and shipping addresses
Date of birth and gender
Payment information (PCI-compliant)
Account credentials and preferences

2
Sensitive Personal Data (SPDI)

Password and authentication
Financial information
Health information (with consent)
Biometric data (3DStructFit)

3
Automatically Collected Information

IP address and device info
Browser type and version
Pages visited and time spent
Cookies and tracking technologies

How We Use Your Information

We use your information for the following purposes in compliance with Indian law:

Process orders, payments, and deliveries
Provide customer support and respond to inquiries
Send order confirmations and shipping updates
Personalize your shopping experience
Conduct market research and improve services
Prevent fraud and ensure platform security
Comply with legal obligations
Send marketing communications (with consent)

Information Sharing and Disclosure

We may share your information with third parties only in the following circumstances:

Service Providers

Trusted partners who assist in operations (payment processors, logistics, customer support)

Legal Requirements

When required by law, court order, or government authority

Business Transfers

In case of merger, acquisition, or sale of assets

Consent

With your explicit consent for specific purposes

Emergency Situations

To protect life, safety, or property

Data Localization: We ensure that sensitive personal data is stored and processed within India as required by the Information Technology Act, 2000.

Data Security Measures

We implement comprehensive security measures as required by Indian law:

ISO 27001 certified security practices
SSL/TLS encryption for data transmission
Secure data storage with access controls
Regular security audits and assessments
Employee training on data protection
Incident response procedures
Data backup and recovery systems

Breach Notification: In case of any data breach, we will notify affected users and relevant authorities within 72 hours as required by Indian law.

Your Rights Under Indian Law

You have the following rights regarding your personal information:

Right to Access

Request copies of your personal information

Right to Correction

Update or correct inaccurate information

Right to Withdraw Consent

Withdraw consent for data processing

Right to Erasure

Request deletion of your personal information

Right to Data Portability

Receive your data in a structured format

Right to Object

Object to processing for marketing purposes

Right to Grievance

File complaints with supervisory authorities

Exercise Your Rights: To exercise any of these rights, contact us at admin@crux.in. We will respond within 30 days as required by law.

Contact Information

For any privacy-related queries or concerns, please contact us:

Email

admin@crux.in

Last Updated: September 2025