Privacy Policy

Introduction

TechnoSport (“TechnoSport”, “we”, “us”, “our”) is operated by Techno Sportswear Private Limited, a company incorporated under the laws of India having CIN:U13999TZ2015PTC021900 and its registered office at 102A, Leeds International Compound, Industrial Estate, Kasipalayam Main Road, Nallur Village, Tiruppur, Coimbatore, Tamil Nadu – 641606, India (the “Company”, and together with TechnoSport, the “Data Fiduciary” for the purposes of the Digital Personal Data Protection Act, 2023). This Privacy Policy explains how we collect, use, store, share, and protect the personal data of individuals (“you”, “Data Principal”) who visit or transact on www.technosport.in and any associated mobile applications (together, the “Platform”). The identity of the Data Fiduciary, our registered office, and the contact details of our Grievance Officer are set out in full in Section 18 (Grievance Redressal) and Section 28 (Contact Us) below.

This Policy is framed in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and, to the extent the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 continue to apply in parallel, this Policy is also intended to satisfy those requirements. Where any provision of this Policy is inconsistent with the DPDP Act or DPDP Rules as they come into force, the statutory provision shall prevail.

By using the Platform or providing your personal data to us, you acknowledge that you have read and understood this Policy. Where your consent is the basis for processing, that consent is sought separately through a clear affirmative action, as described in Section 6.

Definitions

"Applicable Law" means the DPDP Act, the DPDP Rules, and any other law, regulation, or governmental guidance applicable to the processing of personal data under this Policy.

“Child” means an individual who has not completed the age of eighteen years.

“Data Fiduciary” means Techno Sportswear Private Limited, which determines the purpose and means of processing personal data collected through the Platform.

“Data Principal” means the individual to whom the personal data relates, and, where such individual is a child, includes the parent or lawful guardian of that child.

“Data Processor” means any person who processes personal data on our behalf, such as our logistics, payment, and IT service providers.

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

“Processing” means any operation performed on personal data, including collection, storage, use, sharing, disclosure, and erasure, whether by automated means or otherwise.

"Platform" means www.technosport.in and any associated mobile applications operated by the Company.

"Sensitive Personal Data or Information" has the meaning assigned to it under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent such Rules continue to apply.

Scope and Applicability

This Policy applies to personal data we collect through the Platform, customer support channels, and offline touchpoints (such as retail counters or events) that feed into our digital systems. It applies to visitors, registered users, and customers who transact with us. It does not apply to information about our employees, which is governed separately, or to personal data that has already been made publicly available by the Data Principal or by a person under a legal obligation to make it public.

Personal Data We Collect

In keeping with the data minimisation principle under the DPDP Act, we collect only the personal data that is reasonably necessary for the purposes described in this Policy.

Information you provide directly

Identity and contact details like name, gender, date of birth, email address, mobile number, delivery and billing address.

Account credentials like username and password, or details used for social or OTP-based login.

Order and transaction details like products purchased, order value, and payment method. Card and net-banking details are collected and processed directly by our RBI-authorised payment gateway partners, tokenised in accordance with the Reserve Bank of India's Payment Aggregator and Payment Gateway guidelines, and are not stored on our servers in unencrypted form.

Correspondence — information you share when you contact customer support, write a review, or take part in a survey, contest, or loyalty programme.

Information collected automatically

Device and log information like IP address, browser type and version, device identifiers, operating system, and referring URLs.

Usage information like pages viewed, products browsed, items added to cart or wishlist, search queries, and time spent on the Platform.

Location information like approximate location derived from your IP address or, where you separately permit it, precise device location, used to show nearby stores and estimate delivery timelines.

Information from third parties

Confirmation of successful or failed transactions from payment gateways.

Information from social platforms where you choose to log in or interact with us using a third-party account, limited to what that platform permits and what you authorise.

Shipment and delivery status from our logistics and delivery partners.

Why We Process Your Personal Data

We process personal data only where we have a valid legal basis to do so under the DPDP Act, principally your consent, and, in limited circumstances, the "legitimate uses" recognised under Section 7 of the DPDP Act.

Consent-based processing

To create and manage your account and authenticate your identity.

To process, fulfil, and deliver your orders, including sharing necessary details with logistics and payment partners.

To carry out reasonable verification and security checks including to detect and prevent fraudulent transactions, unauthorised use, payment fraud, chargebacks, and misuse of promotional offers which may result in additional verification or cancellation of an order where fraud or misuse is reasonably suspected.

To respond to customer service queries, complaints, and returns or exchange requests.

To send order confirmations, delivery updates, payment confirmations, customer support and other service-related communications necessary for the provision of the Platform and, where you have separately opted in, promotional communications, newsletters and offers through email, SMS, WhatsApp, telephone or other permitted channels, subject to Applicable law including the Telecom Commercial Communications Customer Preference Regulations, 2018. Withdrawal of consent for promotional communications shall not affect our ability to send service-related or transactional communications.

To improve and maintain the Platform, and to provide you with a consistent experience across visits.

To conduct surveys, contests, and loyalty programmes you choose to take part in.

Legitimate uses under Section 7 of the DPDP Act

In the following limited circumstances, we may process personal data without seeking fresh consent, strictly within the boundaries permitted by the DPDP Act:

Where you have voluntarily provided personal data to us for a specified purpose and have not indicated that you do not consent to its use for example, sharing your number with customer support to resolve a query you raised.

Where processing is necessary to comply with an order or judgment of an Indian court or tribunal, or any instruction of a government body authorised by law.

Where processing is necessary to respond to a medical emergency involving a threat to your life or an immediate threat to health.

Where processing is necessary for a corporate restructuring such as a merger, demerger, or amalgamation approved by a court or other competent authority, and personal data continues to be protected under the resulting arrangement.

Where processing is necessary for law-enforcement purposes, or in the interest of the security of the State or public order, to the extent permitted by law.

Purpose limitation

Personal Data shall not be processed for any purpose that is incompatible with the purpose for which it was originally collected, unless such further processing is permitted under Applicable Law or we obtain your fresh consent for that further purpose.

Notice and Consent

Where we rely on your consent, we give you an itemised notice in clear and plain language describing the personal data to be collected, the specific purpose of processing, and how you may exercise your rights and lodge a complaint with the Data Protection Board of India, before or at the time of seeking your consent. Consent is obtained through a clear affirmative action that signifies agreement to the processing of your personal data for the specified purpose it is free, specific, informed, unconditional, and unambiguous. We do not use pre-ticked boxes, bundled consent for unrelated purposes, or default opt-ins for anything beyond what is strictly necessary to provide the Platform. You may withdraw your consent at any time, as easily as you gave it, through your account settings or by writing to our Grievance Officer (Section 18). Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we will take reasonable step to cease, and require our Data Processors to cease, processing your personal data within a reasonable time of withdrawal, unless retention is otherwise required or permitted by law. Where personal data is necessary to provide a particular feature of the Platform for example, a delivery address to fulfil an order withdrawing your consent for that data, or declining to provide it, may mean that we are unable to offer that specific feature or service to you. See Section 16 (Refusal or Limitation of Services).

Cookies and Similar Technologies

We use cookies, pixels, and similar technologies to keep you signed in, remember items in your cart, understand how the Platform is used, and, where you consent, to personalise content and measure the effectiveness of our marketing. You can control non-essential cookies through the cookie banner shown on your first visit and through your browser settings; disabling essential cookies may affect the functioning of the Platform, including checkout. See also our Cookie Policy (Section 19).

Disclosure of Personal Data

We do not sell your personal data. We require all Data Processors engaged by us to implement appropriate technical and organisational security measures, maintain the confidentiality of Personal Data, and process such Personal Data only in accordance with our documented instructions and Applicable Law. TechnoSport remains responsible for compliance with the DPDP Act in respect of Personal Data processed by a Data Processor on its behalf, regardless of the terms of our arrangement with that Data Processor.

With payment gateways and banking partners, to process payments and refunds securely.

With logistics, courier, and warehousing partners, to fulfil and deliver your orders.

With IT infrastructure, hosting, and customer-engagement service providers who support the Platform.

With professional advisers, auditors, and insurers, where necessary for our legitimate business operations.

With government authorities, regulators, courts, tribunals, law enforcement agencies or other competent authorities where required or permitted under Applicable Law, or pursuant to a lawful request, order, direction or legal process.

With a successor or acquiring entity in connection with a merger, demerger, amalgamation, acquisition, sale of business or assets, slump sale, other business transfer, restructuring, or insolvency or bankruptcy proceeding, subject to that entity being bound by protections at least as protective as this Policy.

Cross-Border Transfer of Personal Data

Section 16 of the DPDP Act permits the transfer of Personal Data outside India, except to such countries or territories as may be restricted by the Central Government from time to time. We may transfer Personal Data to our group companies, Data Processors, service providers or other authorised recipients located outside India, to the extent necessary for the purposes described in this Policy. Any such transfer shall be undertaken in accordance with Applicable Law and subject to appropriate contractual, organisational and technical safeguards. We shall not transfer Personal Data to any country or territory that is restricted under Applicable Law.

Data Retention and Storage Limitation

In keeping with the storage limitation principle under the DPDP Act, we retain Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or for such longer period as may be required or permitted under Applicable Law, after which it will be erased or anonymised in accordance with this Policy. Indicative retention periods are:

Account and profile data for as long as your account remains active, and for 3 (three) years thereafter, to allow reactivation and to comply with law.

Order and transaction records for 8 (eight) years, in line with our obligations under applicable tax, consumer-protection, and accounting laws.

Customer support correspondence for 3 (three) years from the date of resolution.

Marketing preferences and communication logs until you opt out, and for 2 (two) years thereafter to record that opt-out.

Where the specified purpose is no longer being served and retention is not otherwise required by law, we and our Data Processors, on our instruction will erase the personal data, or anonymise it such that it can no longer identify you (for example, retaining anonymised transaction data for business analytics).

Accuracy of Personal Data

We take reasonable steps to ensure that personal data which is likely to be used to make a decision affecting you, or which is disclosed to another Data Fiduciary, is accurate and complete. You can help us keep your personal data accurate by reviewing and updating your account details, and by promptly informing us of any changes.

How We Protect Your Personal Data

In line with Section 8(5) of the DPDP Act, we implement reasonable technical and organisational security safeguards appropriate to the personal data we hold, including encryption of sensitive data in transit and at rest, access controls on a need-to-know basis, network and application security monitoring, secure vendor contracts, and periodic security reviews. We periodically review and update these security measures having regard to changes in technology, evolving security risks, the nature of the Personal Data processed and applicable legal requirements. No system is completely secure, and while we work to protect your personal data, we cannot guarantee its absolute security.

Children's Personal Data

The Platform is not intended for use by children, and we do not knowingly offer our services to, or collect personal data from, children. If we become aware that we have inadvertently collected a child's personal data without the verifiable consent of the child's parent or lawful guardian, we will process that personal data only in accordance with the DPDP Act and the DPDP Rules including by obtaining verifiable parental or guardian consent where required, or by erasing the personal data where such consent cannot be obtained. We do not carry out tracking or behavioural monitoring of children, and we do not carry out targeted advertising directed at children, except for such limited processing as may be exempted under the DPDP Rules for verified parents or guardians, or for purposes such as safety-related and educational content.

Your Rights as a Data Principal

Subject to verification of your identity and to the exceptions recognised under the DPDP Act, you have the following rights in respect of your personal data:

Right to access information — to obtain a summary of the personal data we hold about you, the processing activities undertaken, and the identities of Data Processors with whom it has been shared.

Right to correction and erasure — to have inaccurate or incomplete personal data corrected and updated, and, subject to legal retention requirements, erased once it is no longer necessary for the purpose it was collected for, or once consent is withdrawn.

Right to grievance redressal — to have any grievance regarding our processing of your personal data addressed by us in a timely manner, as set out in Section 18.

Right to nominate — to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, through the mechanism made available on your account.

You may exercise these rights by writing to our Grievance Officer at the contact details in Section 18. We will respond to verifiable requests within the timelines prescribed under the DPDP Rules.

Your Duties as a Data Principal

Section 15 of the DPDP Act requires Data Principals to comply with certain duties. We ask that you: provide only accurate and complete information when using the Platform; do not impersonate another person while providing personal data; do not suppress material information while providing personal data for any document or while applying for a service; and do not register a false or frivolous grievance or complaint. These duties do not affect your rights under this Policy or the DPDP Act.

Refusal or Limitation of Services

Certain personal data is necessary for us to provide specific features of the Platform. For example, we cannot process and deliver an order without a valid delivery address and contact number, and we cannot process a payment without the necessary payment details. Where you decline to provide such personal data, or withdraw your consent for its processing, we may be unable to provide, or may need to limit, the relevant feature or service, and we will inform you where this is the case.

Personal Data Breach

In the event of a personal data breach, we shall take prompt remedial measures to contain and mitigate its impact, and shall notify the Data Protection Board of India and affected Data Principals where, and to the extent, required under Applicable Law.

Grievance Redressal

If you have a grievance regarding the processing of your personal data or this Policy, please write to our Grievance Officer at the details below. We will acknowledge and address your grievance within the timelines prescribed under the DPDP Rules.

If you are not satisfied with our response, or do not receive a response within the timeline prescribed under Applicable Law, you may approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023 and the rules made thereunder. Nothing in this Policy limits your right to seek any other remedy available under Applicable Law.

Relationship with Other Policies

This Policy should be read together with our Terms of Use, Return Policy, Cookie Policy, and Shipping & Delivery Policy, each available on the Platform. In the event of any inconsistency between this Policy and any other policy, this Policy governs matters relating to the processing of personal data, and the other policy governs the remaining contractual matters between us.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, our services, or Applicable Law including as further provisions of the DPDP Act and the DPDP Rules come into force, or as the Data Protection Board of India issues further guidance. We will post the revised Policy on the Platform with an updated “Last Updated” date, and, where the changes are material, we will provide additional notice such as an email or an on-site banner before the changes take effect. We encourage you to review this Policy periodically.

No limitation of statutory rights

Nothing contained in this Privacy Policy shall limit, exclude or prejudice any rights or remedies available to a Data Principal under the Digital Personal Data Protection Act, 2023 or any other Applicable Law.

Governing Law

This Policy, and any dispute arising out of or in connection with it, shall be governed by the laws of India.

Severability

If any provision of this Policy is held invalid, illegal, or unenforceable by a court or other competent authority, the remaining provisions shall continue in full force and effect.

Waiver

No failure or delay by us in exercising any right under this Policy shall operate as a waiver of that right, nor shall any single or partial exercise preclude any other or further exercise of that right.

Assignment

We may assign or transfer our rights and obligations under this Policy, in whole or in part, including in connection with any of the events described in Section 8, without your separate consent, provided the assignee remains bound by protections at least as protective as this Policy.

Language

This Policy may be made available in English and other languages. In the event of any conflict between versions, the English version shall prevail.

Interpretation

Section headings are for convenience of reference only and do not affect the interpretation of this Policy.

Contact Us

For any questions regarding this Policy or our processing of Personal Data, please contact our Grievance Officer using the details provided in Section 18. For general enquiries regarding the Platform or our products and services, you may also contact us through the "Contact Us" page available on the Platform.