1. DEFINITIONS

Personal Data: Any data about an individual who can be identified directly or indirectly, as defined under the DPDP Act or GDPR.
Processing: Any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, or deletion.
Cookies: Small text files placed on your device when you visit a website.

2. INFORMATION WE COLLECT

We may collect the following categories of information:

A. Information You Provide Directly

• Name, date of birth, billing and shipping addresses

• Email address, phone number

• Account login credentials

• Payment information (processed securely by third-party gateways)

• Your reviews, feedback, and customer service inquiries

B. Information Collected Automatically

• Log data (IP address, browser type, operating system, date/time of access, pages viewed)

• Device identifiers

• Usage patterns, clickstream data, and referral URLs

C. Information from Third Parties
We may receive information from affiliates, advertising partners, analytics providers, or public sources, in compliance with applicable law.
We do not knowingly collect Personal Data from children under 18 without parental consent.

3. HOW WE USE YOUR INFORMATION

We may use your Personal Data for the following lawful purposes:

• To register and manage your account

• To process and deliver orders, manage returns or refunds

• To communicate regarding orders, inquiries, or customer support

• To send transactional, promotional, or marketing communications (you may opt out anytime)

• To improve our website, products, and user experience

• To comply with legal obligations and enforce our Terms & Conditions

• To prevent or investigate fraud, unauthorized access, or illegal activities

• For any other purpose disclosed at the time of collection or with your consent

4. LEGAL BASIS FOR PROCESSING (GDPR USERS)

For users in the European Economic Area, we process Personal Data based on:

• Your consent

• Performance of a contract with you

• Compliance with legal obligations

• Legitimate interests pursued by GiantPro, provided they do not override your fundamental rights

5. SHARING OF INFORMATION

We may share your Personal Data with:

• Service Providers: Payment processors, logistics partners, IT services, marketing agencies

• Affiliates and Group Companies: For internal operations consistent with this Policy

• Legal and Regulatory Authorities: Where required by law or to protect rights and safety

• Business Transfers: In connection with mergers, acquisitions, or similar transactions
  We do not sell or rent your Personal Data to third parties for independent marketing purposes without your consent.

6. CROSS-BORDER DATA TRANSFERS

Your Personal Data may be transferred to and processed in countries outside India. Where applicable, we ensure appropriate safeguards and compliance with data protection laws.

7. DATA RETENTION

We retain your Personal Data only as long as necessary for its intended purpose or as required by law. Once the retention period expires, data is securely deleted or anonymized.

8. SECURITY MEASURES

We implement reasonable technical and organizational safeguards to protect Personal Data from unauthorized access or loss. However, no system is completely secure; use of our Website is at your own risk.
You are responsible for keeping your account credentials confidential.

9. YOUR RIGHTS

Subject to applicable law, you may have the following rights:

• Right to Access: Request a copy of your Personal Data

• Right to Correction: Request correction of inaccurate data

• Right to Withdraw Consent: Withdraw consent where applicable

• Right to Deletion: Request deletion of your Personal Data

• Right to Object: Object to processing for direct marketing or legitimate interests

• Right to Data Portability (GDPR only): Receive your data in a machine-readable format
  To exercise these rights, contact our Grievance Officer (details below). Verification of your identity may be required.

10. MARKETING COMMUNICATIONS

You may opt out of promotional emails or SMS by following the unsubscribe instructions provided. Transactional or service-related communications will still be sent when necessary.

11. COOKIES POLICY

What Cookies We Use

• Strictly Necessary Cookies: Enable core functions like cart and secure login

• Performance Cookies: Analyze site usage and performance

• Functional Cookies: Remember preferences and settings

• Advertising/Targeting Cookies: Deliver relevant ads based on your activity

Managing Cookies
You can disable cookies through your browser settings, but doing so may affect website functionality.

12. THIRD-PARTY LINKS AND SERVICES

Our website may contain links to third-party sites or services. This Policy does not cover those entities, and we encourage you to review their privacy practices separately.

13. CHILDREN’S PRIVACY

We do not knowingly collect data from individuals under 18 without parental consent. If such data is inadvertently collected, we will promptly delete it.

14. CHANGES TO THIS POLICY

We may update this Policy periodically. Updated versions will be posted with a revised Effective Date. Continued use of the website implies acceptance of the updated Policy.

GRIEVANCE REDRESSAL / DATA PROTECTION OFFICER

In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, the details of our Grievance Officer are as follows:

Grievance Officer
Email: info@giantpro.in
The Grievance Officer will acknowledge and address grievances within the period prescribed by applicable law.