Skip to main contentSkip to content

Legal

Privacy policy

How ITRefurb collects, uses, stores and protects your personal information when you visit our site, message us on WhatsApp, or sign up for stock alerts.Last updated

1. Who we are

This website is operated by ITRefurb (— reachable at Ap.enterprisebvn@gmail.com). References to "we", "us" or "our" in this policy mean ITRefurb. This policy applies to our website, our WhatsApp inbox and any email correspondence you start with us.

2. Information we collect

Information you give us directly

  • WhatsApp messages you send us (including your phone number, which WhatsApp shares automatically).
  • Email address and any order context you share when you sign up for the newsletter or the back-in-stock notification.
  • Name, billing details (address) and any other information you share when you place an order.

Information collected automatically

  • Server access logs (IP address, user agent, requested URL) — retained for up to14 days for security and abuse prevention.
  • Anonymous usage analytics via Google Analytics 4 (page views, scroll depth, outbound WhatsApp clicks). You can opt out using a browser-level blocker such as uBlock Origin.

3. How we use your information

  • To reply to your WhatsApp messages and fulfil any order you place.
  • To send you the newsletter or back-in-stock notification you opted in to. You can unsubscribe at any time using the link in every email.
  • To maintain the security and stability of our site (rate limiting, abuse detection).
  • To meet our legal and accounting obligations (record retention, statutory filings).

We do not sell, rent or trade your personal data with third parties for marketing purposes.

4. Where your data is stored

Operational data (orders, messages, newsletter subscriptions) is stored in a managed PostgreSQL database hosted on infrastructure located in India. Email is sent via a transactional email provider. WhatsApp conversations remain with WhatsApp / Meta under their own privacy policy.

5. Cross-border data transfers (DPDP Act 2023)

Some of the services we use to operate this site are provided by vendors headquartered outside India. Where your data is transferred to or processed by such a vendor, we rely on the safeguards below:

  • Google Analytics 4 — anonymous usage analytics (page views, scroll depth, outbound WhatsApp clicks) are processed by Google LLC on servers that may be located outside India. Google acts as our data processor under the EU SCC / Standard Contractual Clauses framework incorporated into their Data Processing Terms.
  • WhatsApp / Meta Platforms — every message you send us on WhatsApp is processed by Meta Platforms Ireland Limited and its affiliates under the WhatsApp Privacy Policy. We do not control Meta's retention, sub-processors or transfer mechanisms; you opt into this transfer simply by messaging us on WhatsApp.
  • Transactional email — our email provider delivers newsletters and back-in-stock notifications from data centres that may be located in the United States or Singapore, under GDPR-aligned processing terms.
  • Site hosting — the production build runs on a virtualised container host; container images are pulled from a registry that mirrors in India, but the source code lives in a version-control service that may transfer commit metadata to servers outside India.

We do not transfer your personal data to any third party for marketing purposes. If you would like us to delete data we hold about you, message us on WhatsApp — see §7 for your rights.

6. Cookies

We use a minimal set of first-party cookies for session and cart-state management, and Google Analytics 4 cookies for anonymous usage statistics. We do not use third-party advertising cookies. You can block GA4 cookies without affecting the site's core functionality — use a browser-level blocker such as uBlock Origin or enable your browser's "Do Not Track" signal.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 and the IT Act, / 2000 / IT Rules 2011, you have the right to:

  • Request a copy of the personal data we hold about you.
  • Ask us to correct or delete your data.
  • Withdraw consent for the newsletter or back-in-stock notification.

To exercise any of these rights, message us on WhatsApp or email Ap.enterprisebvn@gmail.com. We respond within 15 days.

8. Data retention

  • Order records and accounting entries — 8 years (required by Indian record-retention law).
  • WhatsApp conversations — retained on your and our devices per WhatsApp's default settings; we may keep exports for order context up to 24 months.
  • Newsletter subscriptions — until you unsubscribe.

9. Children

Our site is intended for adults buying IT hardware for legitimate personal or business use. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on the home page and the "Last updated" date at the top of this page will change.

11. Grievances

If you have a complaint about how we handle your personal data, contact our Grievance Officer first. If we don't resolve it within 15 days, you may escalate to your nearest consumer forum or the Data Protection Board of India.

Something unclear? Message us on WhatsApp and we'll help.