Comprehensive data governance explaining our adherence to the Indian Digital Personal Data Protection (DPDP) Act 2023, EU GDPR, and California CCPA. We encrypt user identifiers, partner with PCI-DSS Level 1 payment processors, and guarantee zero unauthorized third-party sharing.
1. Executive Statement & Scope of Policy
MobileSkins (operated by Hitender Tanwar) ("MobileSkins", "we", "our", or "us"), is committed to upholding the highest standards of data confidentiality, user privacy, and digital trust. This Privacy Policy details the policies, procedures, and security mechanisms governing the collection, processing, storage, and cross-border transfer of personal information when you access our e-commerce portal (https://mobileskins.in), utilize our interactive SkinLab™ 3D customizer, or engage with our services.
This policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the General Data Protection Regulation (EU GDPR), and applicable international privacy frameworks.
2. Information We Collect
To provide high-precision device wraps and seamless order fulfillment, we collect specific categories of personal data:
- Order & Identity Identifiers: Legal customer name, shipping destination address, billing address, contact phone number, and transactional email address for order confirmation, GST invoicing, and parcel dispatch tracking.
- Authentication Credentials: Secure user identity tokens managed via Clerk authentication (supporting Google OAuth, Microsoft OAuth, Apple ID, and passwordless magic links). MobileSkins servers never store raw, unhashed user passwords.
- Device & Customization Telemetry: Selected smartphone/laptop make and model, selected wrap materials and textures, bespoke artwork or imagery uploaded to the SkinLab™ customizer, and browser viewport specifications.
- Technical & Network Data: Internet Protocol (IP) address, approximate geographic city/region, browser agent, operating system, and session attribution parameters (UTM parameters, referral sources).
3. Financial Information & Payment Security Standards
All digital financial transactions on MobileSkins are processed through authenticated, bank-grade payment gateways, including Razorpay and UPI rails. Razorpay is certified PCI-DSS (Payment Card Industry Data Security Standard) Level 1 compliant.
MobileSkins does NOT store, process, or transmit your credit/debit card numbers, CVV codes, UPI PINs, or net banking passwords. Financial authorization occurs directly within tokenized, encrypted iframes hosted by our PCI-DSS certified banking partners.
4. Cookie Governance & Google Consent Mode v2
MobileSkins operates an intelligent Cookie Consent Manager aligned with Google Consent Mode v2. Tracking pixels and non-essential analytical cookies remain in a strict denied state by default until you grant affirmative, explicit consent.
- Strictly Necessary Cookies: Essential for session state, shopping cart persistence, and security tokens. These cannot be disabled.
- Analytics Cookies: Optional telemetry via Google Analytics 4 (anonymized IP mode) to analyze traffic bottlenecks and improve page rendering speed.
- Marketing & Advertising Cookies: Meta Pixel and Google Ads conversion tags utilized solely when permitted to display personalized promotions on external advertising platforms.
You can adjust, revoke, or reconfigure your cookie consent preferences at any time by clicking the "Cookie Preferences" link located in the website footer.
5. Data Sharing & Third-Party Service Providers
We do not sell, rent, or trade your personal information to data brokers or unrelated third parties. Data is shared strictly on a need-to-know basis with trusted operational vendors under enforceable Data Processing Agreements (DPAs):
- Logistics & Fulfillment: Blue Dart Express, Delhivery, DTDC, and Shiprocket for parcel courier tracking and home delivery.
- Authentication Infrastructure: Clerk Inc. for secure token authentication.
- Transactional Communications: Meta WhatsApp Cloud API and Twilio for dispatch notifications, OTP verification, and shipment alerts.
- Hosting Infrastructure: Dedicated SOC-2 Type II compliant cloud nodes with AES-256 encryption at rest and TLS 1.3 encryption in transit.
6. User Data Rights & Empowerment
Under the DPDP Act 2023 and GDPR, you possess absolute rights regarding your personal information:
- Right to Access: You may request a complete summary of all personal data held about you.
- Right to Correction & Rectification: You may update inaccurate or incomplete addresses or contact details through your Account dashboard or support channels.
- Right to Erasure (Right to be Forgotten): You may request the permanent deletion of your account and personal identifiers, subject to statutory record retention obligations under Indian GST and tax laws.
- Right to Withdraw Consent: You may withdraw consent for promotional newsletters and analytical tracking at any moment.
To exercise any of these rights, contact our Data Protection Officer at hitender@gmail.com. We process verified requests within 7 business days.
7. Data Retention Schedule
We retain order records, tax invoices, and accounting telemetry for a statutory period of seven (7) fiscal years to comply with the Indian Goods and Services Tax (GST) Act and Companies Act, 2013. Marketing session cookies expire within 365 days or immediately upon cache clearance.
8. Children's Privacy Notice
MobileSkins is not directed toward individuals under the age of eighteen (18). We do not knowingly collect personal information from minors without verified parental consent. If we discover that personal data of a minor has been collected without parental consent, we take immediate steps to delete such data from our servers.
Questions or Grievances?
Our compliance team and Designated Grievance Officer respond to all statutory inquiries within 48 business hours.
