Privacy Policy

This Privacy Policy explains how Foxelpie India Pvt Ltd (CIN U72900GJ2020PTC118295) (“we”, “us”), as Data Fiduciary, collects, uses, shares and protects your personal data across our stores at sslstore.in and buyssl.in, in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and applicable rules.

Information we collect

We collect the details you provide to place an order and obtain a certificate — such as your name, email, phone, company, billing address, GSTIN (if provided) and validation contacts — along with certificate-request data (for example the domain and CSR) and technical data needed to process payments and issue certificates. If you apply for SEZ zero-rating, we also collect the SEZ / Letter-of-Approval details and the approval document you upload. We collect limited technical data (such as IP address and essential cookies) to operate and secure the Sites.

Lawful basis and consent

We process your personal data for the purposes below on the basis of your consent, given when you submit your details, and for the performance of our contract with you, and to meet our legal obligations. Where we rely on consent, you may withdraw it at any time (see “Your rights”); withdrawal does not affect processing already carried out or data we must retain by law.

How we use it

We use your information to process orders and payments; issue and manage certificates with the CA; raise GST invoices and credit notes; provide customer support; prevent fraud and secure the Sites; and meet our legal, tax and accounting obligations. We send transactional messages (order, validation, issuance, refund) related to your purchases; we do not send unrelated marketing without your consent.

Who we share it with

We share the minimum information necessary with: the relevant CA (through our certificate provider) to validate and issue your certificate; our payment gateways (such as Razorpay) to process payments and refunds; and our email provider to send transactional messages. Some of these processors may process data outside India; where they do, we take reasonable steps for its protection and transfer it only as permitted under the DPDP Act. We do not sell your personal data. We may disclose data where required by law or to protect our rights.

Security

We take reasonable technical and organisational security measures: integration secrets are stored encrypted at rest; sensitive documents such as SEZ approvals are stored with restricted access; full card details are handled by our payment providers and are never stored on our servers; and access is limited on a need-to-know basis. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access, alteration or loss.

Personal-data breach

In the event of a personal-data breach, we will take remedial steps and notify the Data Protection Board of India and affected individuals as and to the extent required under the DPDP Act and applicable rules.

Data retention

We keep invoices, credit notes and related records for as long as required under applicable tax and company law, and retain other personal data only for as long as needed for the purposes described above, after which it is deleted or anonymised.

Children’s data

The Sites are intended for users aged 18 and over and are not directed at children. We do not knowingly process the personal data of children; if we learn we have done so without the required parental consent, we will delete it.

Cookies

We use only the cookies needed to run the Sites — for example, to keep you signed in and to remember your cart — and analytics/consent cookies where you have accepted them via our cookie banner. We do not use cookies to track you across unrelated websites. You can control cookies through your browser and our consent banner.

Your rights

Subject to the DPDP Act and records we must retain for legal and tax purposes, you have the right to: access a summary of your personal data and how it is processed; request correction, completion, updating or erasure; withdraw consent; nominate another individual to exercise your rights in the event of death or incapacity; and raise a grievance about our handling of your data. To exercise any right, contact our Grievance Officer below; we may verify your identity before acting.

Grievance Officer

Under the DPDP Act, the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, you may contact our Grievance Officer: Saraswathy Kuganesan, Foxelpie India Pvt Ltd, Site No. 26 Laskar, Hosur Rd, Chikku Lakshmaiah Layout, Adugodi, Bengaluru, Karnataka 560029. Email: support@sslstore.in (support@buyssl.in for BuySSL.in); phone: +91 8010 083 083. We acknowledge within 48 hours and aim to resolve within 30 days.

Changes to this policy

We may update this policy from time to time; the current version with its “last updated” date is always published on the Sites.