XLO Privacy Policy

XLO (“we,” “us,” or “our”) is committed to protecting the privacy of our website visitors and users in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws in India. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website [insert website URL] (the “Website”). By accessing or using our Website, you agree to the terms of this Privacy Policy.

1. Collection of Personally-Identifying Information

We may collect personally-identifying information (“Personal Information”) from you when you voluntarily provide it through the Website, such as when you:

  • Register for an account.
  • Fill out forms or surveys.
  • Subscribe to newsletters or marketing communications.
  • Make a purchase or engage in transactions via our E-commerce platform.
  • Contact us through forms or email.
  • Participate in contests, promotions, or other Website features.

The types of Personal Information collected may include, but are not limited to:

  • Name
  • Email address
  • Phone number
  • Postal address
  • Payment information (e.g., credit/debit card details, UPI IDs)
  • Other identifiers you voluntarily provide.

Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we treat certain data, such as passwords, financial information, and health-related information, as “Sensitive Personal Data or Information” (SPDI). We collect and process SPDI only with your explicit consent, where required, and in compliance with applicable laws.

2. Non-Personally-Identifying Information

We may collect non-personally-identifying information about your visit to our Website, including:

  • Browser type and version
  • Operating system
  • IP address
  • Time and date of access
  • Referring website addresses
  • Pages visited and time spent on the Website

This information is collected automatically through cookies, web beacons, and similar technologies to improve user experience and analyze Website performance.

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Website. Cookies are small data files stored on your device that help us:

  • Remember your preferences and settings.
  • Understand how you interact with our Website.
  • Deliver personalized content and advertisements.
  • Improve Website functionality and performance.

You may choose to disable cookies through your browser settings; however, this may affect the functionality of certain Website features. By using our Website, you consent to the use of cookies as described in this Privacy Policy, in accordance with Rule 5 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

4. Use of Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Website.
  • To process and fulfill E-commerce transactions, including order confirmation, shipping, and payment processing.
  • To respond to your inquiries, comments, or requests.
  • To send you newsletters, promotional materials, or other marketing communications (with your consent, where required).
  • To improve our Website, products, and services through analytics and user feedback.
  • To comply with legal obligations under Indian laws, including the Information Technology Act, 2000, and other applicable regulations.
  • To detect, prevent, and address technical issues, fraud, or security threats.

5. Sharing of Information

We do not sell, trade, or rent your Personal Information to third parties except as described below:

  • Service Providers: We may share your information with trusted third-party service providers (e.g., payment processors, shipping companies, or IT service providers) who assist us in operating the Website, processing transactions, or providing services. These providers are contractually obligated to protect your information and comply with applicable Indian data protection laws.
  • Legal Compliance: We may disclose your information to comply with legal obligations, such as responding to court orders, government requests, or to enforce our rights under applicable laws, including the Information Technology Act, 2000.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of such changes as required by law.

6. Security

We implement reasonable security practices and procedures, as mandated by Rule 8 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to protect your Personal Information from unauthorized access, use, alteration, or disclosure. These measures include encryption, secure servers, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Advertisements

Our Website may display advertisements from third-party ad networks. These ads may use cookies or similar technologies to deliver targeted content based on your browsing behavior. We do not control the privacy practices of these third-party advertisers. We recommend reviewing their privacy policies before interacting with their services.

8. Links to External Sites

Our Website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

9. Aggregated Statistics

We may collect and analyze aggregated, anonymized data about Website usage to improve our services and share insights with third parties. This data does not identify any individual and is used for statistical purposes only.

10. E-commerce

If you engage in E-commerce transactions on our Website, we collect necessary information to process your orders, such as payment details and shipping addresses. This information is securely processed through trusted payment gateways that comply with the Payment Card Industry Data Security Standard (PCI DSS) and applicable Indian laws. We retain transaction-related information only for the period necessary to fulfill the transaction or as required by law.

11. Your Rights

Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you have the following rights regarding your Personal Information:

  • Access: You may request access to the Personal Information we hold about you.
  • Correction: You may request correction or updating of inaccurate or incomplete Personal Information.
  • Withdrawal of Consent: Where we rely on your consent to process Personal Information, you may withdraw your consent at any time by contacting us.
  • Grievance Redressal: You may contact our Grievance Officer (details below) to address any complaints or concerns regarding your Personal Information.

To exercise these rights, please contact us at [insert contact information].

12. Privacy Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Website functionality. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this Privacy Policy periodically. If we make material changes, we will notify you via email or a prominent notice on the Website, as required by law.

13. Data Retention

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws, including the Information Technology Act, 2000. When your information is no longer needed, we securely delete or anonymize it.

14. Children’s Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect Personal Information from children. If we become aware that a child under 18 has provided us with Personal Information, we will take steps to delete such information in accordance with applicable laws.

15. International Data Transfers

If you are accessing our Website from outside India, please be aware that your information may be transferred to, stored, and processed in India, where our servers are located. We ensure that any international data transfers comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws.

16. Contact Us

If you have any questions, concerns, or suggestions regarding this Privacy Policy, please contact us.

By using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.