Privacy Policy

This policy explains what personal data GEN-E (“GEN-E”, “we”, “us”) collects when you visit www.ridegene.shop or buy from us, why we collect it, who we share it with, how long we keep it and the rights you have. We are responsible for this data as its data fiduciary under the Digital Personal Data Protection Act, 2023, and we handle it in line with that Act, the Information Technology Act, 2000 and the rules made under them.

1. What we collect and why

When you place an order

Your name, email address, phone number and delivery address, the items you buy, the amount you pay and any coupon you use. We use these to take your payment, deliver your order, email you about it, handle returns and warranty claims, keep the tax and accounting records the law requires, and check that a once-per-customer coupon is used only once.

Payment information

Payments are handled by Razorpay. You enter your card, UPI and bank details on Razorpay’s secure checkout, and they go directly to Razorpay. We never see or store your card number, CVV or UPI PIN. We receive only a payment reference, the kind of payment method you used (such as UPI or card) and whether the payment succeeded.

When you create an account

Your name, email address and password, so you can sign in and see your orders. Google Firebase Authentication stores your password in hashed form, and we never see it. If you sign in with Google, Google gives us your name, email address and profile photo.

When you subscribe

Your email address, to send you our news and offers, or to let you know when a product you asked about is back in stock. For stock alerts we also keep which product it was.

When you contact us

Whatever you choose to send, such as the photos and videos you share for a return or warranty claim, so we can deal with your request or complaint.

When you browse the Site

• Device and usage information: your browser and device type, IP address, the pages and products you view, the website that referred you and how you interact with the Site. Our hosting provider logs each request, and analytics and advertising tags record how the Site is used if you allow them (see section 3).
• Ad click identifiers: if you arrive by clicking one of our ads, the link carries an identifier from Google (gclid, gbraid or wbraid) or Meta (fbclid). We keep it in your browser for up to 90 days and, if you then place an order, store it with the order, so we can tell which ad led to the sale. We do not keep it if you have declined advertising cookies.
• Checkout context: when you start a checkout we record your IP address, your browser’s user agent and Meta’s browser identifiers (the _fbp and _fbc cookies, if present). They are kept with the order only until your purchase has been reported to Meta (see section 4), and are then deleted — or, for an order that is never paid, once it is closed, a day or two later. None of this is recorded if you have declined advertising cookies.
• Browser storage: your shopping cart, the ad click identifiers above and your cookie choice are saved in your own browser, not on our servers.

We also use device and IP information to keep the Site and our customers safe: for example, to detect fraudulent orders and payments, and, through Google reCAPTCHA Enterprise, which runs on every page of the Site, to check that visits, sign-ins and order lookups come from a real browser. reCAPTCHA collects information about your device and how you use the page, under Google's Privacy Policy and Terms of Service.

2. How we use your information

• To process your order: taking payment, arranging delivery, and emailing you your order confirmation and the courier’s tracking details.
• To provide customer support, returns, warranty service and complaint handling.
• To run your account and show you your order history.
• To prevent fraud and abuse, and to keep the Site secure.
• To send you news and offers, only if you have subscribed. You can unsubscribe at any time by writing to us.
• To understand how people use the Site, improve it, and measure how well our advertising works, as far as your cookie choices allow.
• To meet our legal obligations, such as keeping tax and accounting records.

3. Cookies and your choices

Cookies are small files stored on your device, and the Site also uses similar browser storage. Some of it the Site needs to work, such as what keeps you signed in and keeps your cart. The rest is optional, and of two kinds:

• Analytics: Google Analytics, which tells us how visitors find and use the Site.
• Advertising: Google Ads and the Meta Pixel (Facebook and Instagram), which measure our ads and help show them to people who are likely to be interested.

A banner lets you accept or decline analytics and advertising cookies. For visitors in India they are switched on unless you decline them. For visitors in the European Economic Area, the United Kingdom and Switzerland they stay off until you accept.

To change your choice or withdraw your consent, select Cookie preferences at the bottom of any page. It is as easy to withdraw consent as to give it. Withdrawing stops these cookies from being used from then on, but it does not undo anything collected before. You can also:

• block or delete cookies in your browser settings (see allaboutcookies.org for how), although the cart and sign-in may then stop working;
• manage the ads Google shows you in My Ad Center, and opt out of Google Analytics with Google’s opt-out browser add-on; and
• manage the ads Meta shows you in your Facebook ad preferences.

We do not currently change how the Site collects information when your browser sends a “Do Not Track” signal. Use Cookie preferences instead.

4. How purchases are reported to Google and Meta

When you complete a purchase, we may tell Google and Meta about it so they can report which ads led to sales. Both receive the order ID, its value and the products in it. To match the purchase to an ad, they may also receive some of your details:

• Meta, from our server through its Conversions API: your email address, phone number, name, city, state and PIN code, each hashed, together with the checkout context in section 1 (IP address, browser user agent and Meta browser identifiers), which Meta needs as they are and which are not hashed.
• Google, only if we have switched on its enhanced conversions feature: your email address and phone number, hashed in your browser before they are sent.

Hashing turns a detail into a fixed code, so it is not sent in readable form; Google and Meta can only compare it with codes made from details they already hold.

If you have declined advertising cookies, or you are in the European Economic Area, the United Kingdom or Switzerland and have not accepted them, your purchase is not reported to Meta from our server, and Google and Meta’s own tags treat it as you chose.

5. Who we share it with

We do not sell your personal data. We share it only with the companies that help us run the store, and only as much as each one needs:

• Razorpay, to process payments and refunds;
• Shiprocket and its courier partners, to deliver your order and collect returns. They receive your name, delivery address, phone number and email address, and may contact you about the delivery;
• Google, whose Firebase and Google Cloud services store our orders, accounts and subscriber list, and whose reCAPTCHA Enterprise service runs on every page to protect the Site, sign-in and order tracking from bots;
• Resend, which sends our order confirmation and shipping emails on our behalf;
• Vercel, which hosts the Site;
• Google and Meta, for analytics and advertising, as sections 3 and 4 describe; and
• our professional advisers, and government or law-enforcement authorities where the law requires it or to prevent fraud.

If GEN-E’s business is sold or merged, your information may pass to the new owner, who must go on protecting it as this policy describes.

6. Where your information is stored

Our service providers may store and process your information on servers in India or in other countries. Wherever it is held, we require them to keep it secure and to use it only to provide their services to us.

7. How long we keep it

• Orders, including checkouts that were never paid: for as long as tax, accounting, warranty and fraud-prevention needs require, even if you close your account.
• Checkout context (IP address, user agent, Meta browser identifiers): until the purchase has been reported to Meta, or for an unpaid checkout until it is closed.
• Ad click identifiers: up to 90 days in your browser; if you order, for as long as the order is kept.
• Your account: until you ask us to delete it.
• Newsletter and stock alerts: until you unsubscribe or ask us to delete your email address.
• Messages, photos and videos you send us: for as long as we need them to deal with your request, a claim or a complaint.
• Analytics and advertising data: for the period set in each provider’s retention settings.

When we no longer need information, we delete it or make it anonymous.

8. How we protect it

The Site is served only over an encrypted connection (HTTPS). Payments go through Razorpay, which is certified to the PCI DSS security standard. Orders are created only by our own server, and our database’s security rules restrict order and customer records to authorised GEN-E staff. No system is completely secure, but if a breach affects your information, we will tell you and the authorities as the law requires.

9. Your rights

You have the right to:

• get a summary of the personal data we hold about you, what we do with it and who we have shared it with;
• have inaccurate or incomplete data corrected, completed or updated;
• have your data erased, except what the law requires us to keep, such as order and tax records;
• withdraw any consent you have given, at any time: use Cookie preferences for cookies, and write to us to unsubscribe or for anything else;
• have a complaint about how we handle your data dealt with by our Grievance Officer; and
• nominate someone to exercise these rights for you if you die or become unable to act.

To use any of these rights, email contact@ridegene.shop from the address linked to your account or order. We may need to confirm your identity first. We acknowledge requests within 48 hours and respond within one month. If you are unhappy with how we handle your complaint, you can complain to the Data Protection Board of India.

10. Children

The Site is meant for adults. Orders must be placed by someone aged 18 or over, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us their details, email us and we will delete them.

11. Other websites

The Site links to other websites and services, such as Amazon, Flipkart and Google sign-in. Their own privacy policies apply to what you share with them.

12. Changes to this policy

We may update this policy from time to time, for example when our practices or the law change. The date at the top of this page shows when it last changed. If we make a significant change, we will highlight it on the Site.

13. Contact and Grievance Officer

For questions about this policy, to use your rights or to make a complaint, write to us or to our Grievance Officer. See also our complaints process.