Privacy Policy

1. Who is responsible for your information

The data controller and seller is Chandrani Sadhu, proprietor trading as Souviks, an automotive spare-parts supplier. For privacy questions and requests, contact Sujit Kumar Sadhu, Head, Finance and Sales, at info@souviks.co.in or +91 94343 31896 / +91 79082 15701. Postal address: CN-119(2), Souviks Building, Beside NH-2, Andal More, West Bengal – 713321.

2. Information we collect

We collect information you provide when you browse, create an account, contact us, request a part or quotation, place an order, make a payment or seek after-sales support. Depending on how you use the website, this may include:

• Name, email address and mobile or telephone number.
• Company name, GSTIN and business details you choose to provide.
• Vehicle details, part numbers, product requirements, messages, photographs and other enquiry or quotation information.
• Billing and delivery address, PIN code, order contents, quantities, prices, invoices, delivery and return details.
• Account identifiers, sign-in provider details, profile information and account activity.
• Payment status, payment-provider reference numbers and refund reconciliation information. We do not ask you to submit card PINs, UPI PINs, passwords or one-time passwords to Souviks.

We and our service providers may also receive technical information such as IP address, browser and device type, operating system, page paths, timestamps, approximate location derived from network information, referral source and security or diagnostic logs.

3. Google Sign-In and account information

If you choose Google Sign-In, Supabase Auth uses Google's sign-in service to authenticate you. The website requests standard identity information such as your Google account identifier, email address and verification status, display name and profile image, subject to the permissions shown during sign-in. We do not request access to Gmail messages, Google Drive files, Contacts or Calendar content.

We use account information to authenticate you, maintain your session, associate sign-in details with your Souviks profile, provide account features and protect accounts. You can revoke the Google connection in your Google Account settings; that does not automatically delete transaction records or information already held by Souviks.

4. Why we use information

We use information only for purposes connected with operating Souviks and providing the service you request, including:

• Responding to product enquiries, Request a Part submissions and quotations.
• Checking product availability and fitment details and communicating about orders.
• Creating and securing accounts and authenticating sign-in.
• Processing orders, payments, invoices, shipping, delivery, returns, refunds and warranty requests.
• Maintaining order, tax, accounting and business records and meeting legal obligations.
• Preventing fraud, misuse, unauthorised access and security incidents.
• Understanding website performance, traffic sources and enquiry journeys so we can improve the website and customer support.

5. Website analytics, attribution and contact-intent analytics records

The website uses Google Analytics 4 to measure visits and website interactions. Analytics may use cookies or similar technologies and may receive technical data such as device/browser information, pages visited, interaction events, referral information and approximate location. Google processes this information under its own terms and privacy information.

Souviks also records limited first-party attribution information, such as referral channel and campaign parameters. A random browser identifier and attribution state may be stored in local storage for up to 90 days to connect an earlier visit or contact interaction with a later enquiry from the same browser.

When a visitor clicks a telephone or email contact link, the website may record the contact type, page path, timestamp and limited attribution details. A click records an intention to contact us; it does not prove that a call connected or an email was sent. The actual telephone number or email destination is not included in the contact-intent event record.

6. Cookies and local storage

We use essential cookies or browser storage to operate the website, keep account sessions, remember language or preferences, maintain cart or enquiry state, support security and preserve limited attribution data. Analytics technologies may be used to understand website usage. The current site does not provide a separate cookie-preference centre. You can manage or block cookies and local storage through your browser settings; doing so may affect sign-in, cart, language or other website functions. Third-party services may use their own cookies subject to their policies.

7. Who may receive information

We do not sell personal information. We share only the information reasonably needed for the relevant purpose with service providers and other recipients, which may include:

• Supabase, for website authentication, database storage and account/order services.
• Google, for Google Sign-In and Google Analytics.
• EmailJS or the configured enquiry-delivery provider, to relay contact, part-request and quotation messages to Souviks.
• Cashfree or another payment provider and the relevant banks, to process payments, verify payment status and reconcile refunds.
• Delhivery, Blue Dart, FedEx, XpressBees, India Post, DHL or another selected carrier, to arrange and track delivery.
• Cloudflare and other infrastructure, content-delivery and security providers, to host, protect and deliver the website and process technical logs.
• Professional advisers, auditors, insurers, regulators, courts or law-enforcement agencies where reasonably necessary or legally required.

Some providers act on our instructions; others may process information under their own terms and responsibilities. Their privacy notices also apply to the services they operate.

8. Payments and delivery

When you pay online, the payment provider handles the payment flow. Souviks receives information needed to identify the order and confirm payment, such as payment status and provider reference identifiers. Sensitive card or banking credentials are handled by the payment provider and should never be sent to us.

To deliver an order, we may send the selected carrier your name, phone number, delivery address, PIN code, parcel or order details and tracking information. We share only what is reasonably required to arrange delivery and resolve shipment issues.

9. Processing outside India

Our technology and service providers may process or store information in India or in other countries where their systems operate. Where information is processed across borders, Souviks will take the steps required by applicable Indian law and its arrangements with the relevant providers.

10. Retention

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, including account operation, responding to enquiries, completing orders, providing support, maintaining tax and accounting records, resolving disputes, preventing fraud and meeting legal obligations. First-party attribution identifiers are designed to expire after 90 days. Other retention periods depend on the record type and legal requirements. When information is no longer needed and there is no lawful reason to retain it, we take reasonable steps to delete, anonymise or securely dispose of it.

11. Security

We use reasonable technical and organisational measures intended to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure. Protect your sign-in credentials and contact us promptly if you suspect unauthorised use of your account.

12. Your requests and choices

You may contact us to request access to information associated with you, correction of inaccurate details, deletion where permitted, withdrawal of consent where processing relies on consent, or review of a privacy complaint. We may need to verify your identity before acting. Some records may need to be retained to meet tax, accounting, legal, fraud-prevention or dispute-resolution requirements.

The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 have phased commencement provisions. We will apply the rights, notices and obligations that are in force and applicable to the relevant processing at the time of the request. This policy will be updated as applicable requirements take effect. Under the current Gazette schedule, Rule 3 notice requirements and the main data-fiduciary obligations under the Act are scheduled to take effect on 13 May 2027; Souviks is preparing the required notices and processes before that date.

13. Children's information

The website and catalogue are intended for customers and business users dealing with automotive parts, not for children. Please do not submit a child's personal information unless you are legally authorised to do so. If you believe a child has provided personal information to Souviks, contact us so we can review the request under applicable law.

14. Changes and contact

We may update this Policy when our website, services, providers or legal obligations change. The current effective date appears at the top of the page.

Privacy / Grievance Contact: Sujit Kumar Sadhu, Head, Finance and Sales
Email: info@souviks.co.in
Phone / WhatsApp: +91 94343 31896 / +91 79082 15701
Postal address: CN-119(2), Souviks Building, Beside NH-2, Andal More, West Bengal – 713321