Privacy Policy — BRIX Retail

1. Overview

This Privacy Policy applies to Brix Retail Private Limited ("BRIX"), its website (brixonline.in), mobile application, and all related services. By using BRIX, you consent to the practices described in this Policy.

BRIX is the data controller for personal data collected through our platform. We operate in compliance with the Information Technology Act, 2000, its amendments, and applicable data protection regulations in India.

2. What We Collect

We collect the following categories of personal data:

Category	Data Points	Source
Identity	Full name, mobile number, email address	Registration form
Location	Delivery address, GPS coordinates (with consent)	Checkout, device
Transaction	Order history, payment method (masked), invoice data, GSTIN	Platform activity
Device	IP address, browser type, device ID, OS version	Automatic collection
Usage	Pages visited, search queries, clicks, session duration	Analytics tools
Communications	Support messages, feedback, reviews submitted	User input

We do not collect or store full card numbers, CVV codes, or bank account passwords — these are handled entirely by our payment gateway partners.

3. How We Use Your Data

We use your data to:

Process orders: Confirm, pack, and deliver your orders and send you status updates.
Account management: Create and maintain your BRIX account and authenticate you.
Payments: Process transactions securely and issue GST-compliant invoices.
Customer support: Respond to queries, resolve disputes, and process returns.
Platform improvement: Analyse usage patterns to improve our product catalogue, UI, and delivery efficiency.
Legal compliance: Meet our obligations under Indian tax law, e.g. GST record-keeping for 8 years.

4. Data Sharing

We share your data only as necessary to fulfil our services:

Vendors: Your delivery address and contact number are shared with the fulfilling vendor to process and dispatch your order.
Logistics partners: Delivery name, address, and phone number are shared with our delivery partners for last-mile fulfilment.
Payment processors: Transaction data is shared with PCI-DSS-certified payment gateways (e.g. Razorpay).
Analytics providers: Anonymised or pseudonymised usage data may be shared with analytics tools to improve our platform.
Legal authorities: We may disclose data if required by law, court order, or governmental regulation.

We do not sell, rent, or trade your personal data to any third-party advertiser, data broker, or unrelated entity.

5. Cookies & Tracking

BRIX uses cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

Essential cookies: Required for core functionality (login sessions, cart persistence). Cannot be disabled.
Analytics cookies: Track page views, session data, and usage patterns (e.g. Google Analytics). You can opt out via browser settings.
Preference cookies: Remember your location, language, and display preferences.

You can manage cookie preferences in your browser settings. Disabling essential cookies may impact platform functionality.

6. Data Retention

We retain your data for as long as necessary for the purposes outlined in this Policy:

Account data: Retained for the duration of your account and 3 years after deletion.
Order & invoice data: Retained for 8 years for GST compliance.
Support communications: Retained for 2 years from the date of resolution.
Usage/analytics data: Aggregated, anonymised data retained indefinitely; individual records deleted after 12 months.

7. Data Security

BRIX employs industry-standard security measures to protect your data:

TLS/SSL encryption for all data in transit.
Encrypted storage for sensitive data at rest.
Role-based access controls — only authorised personnel can access personal data.
Regular security audits and vulnerability assessments.

Despite these measures, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you and relevant authorities within 72 hours as required by law.

8. Your Rights

Under applicable Indian law, you have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request that inaccurate or incomplete data be corrected.
Deletion: Request deletion of your account and personal data, subject to legal retention obligations.
Portability: Request a copy of your data in a structured, machine-readable format.

To exercise any of these rights, email us at support@brixonline.in with the subject line "Privacy Request". We will respond within 30 business days.

9. Children's Privacy

The BRIX platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at support@brixonline.in and we will delete such data promptly.

10. Policy Updates

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notice at least 7 days before the changes take effect. Continued use of BRIX after the effective date constitutes your acceptance of the updated Policy.

11. Contact & Grievance

For privacy-related queries or to file a grievance, please contact our designated Grievance Officer:

Name: Grievance Officer, Brix Retail Private Limited
Email: support@brixonline.in
Address: No. E-156, Manayata Residency, K R Puram Hobli, Bengaluru, Karnataka – 560045
Response time: We will acknowledge your complaint within 48 hours and resolve it within 30 days.