Skip to content

Privacy Policy

Last updated: 8 August 2026

This policy explains what personal data Ryolite collects when you shop with us, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet our obligations under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules made under it.

1. Who is responsible for your data

Under the DPDP Act, Ryolite is the Data Fiduciary — we decide why and how your personal data is processed. You are the Data Principal.

  • Ryolite, Opposite Hotel Pratik Lodge, Saswad Road, Uruli Devachi, Pune, Maharashtra 412308, India
  • Data protection contact: contact@ryolite.in  |  +91 89567 13745

2. What personal data we collect

We collect only what we need to sell you a product and get it to your door.

Data Required? Why we need it
Name Required To address the order, the parcel and the GST invoice.
Mobile number Required on every order This is our main contact channel. The courier needs it to deliver, and we use it to confirm the order and tell you about dispatch or a failed delivery.
Email address Optional If you give it, we send the order confirmation and invoice to it. You can order without one.
Shipping and billing address Required To deliver the goods and to work out the correct GST treatment.
GSTIN Optional Only if you want the invoice raised against your business.
Order and payment record Collected automatically What you bought, the amount, the payment method and the payment reference — needed for the invoice, for tax records and to process a refund.
Account login details Optional Only if you choose to create an account. Passwords are stored in an encrypted, non-readable form.
Bulk / dealer enquiry details Optional Your name, phone, optional email and GSTIN, quantity and requirement, if you submit a bulk or dealer booking.
Newsletter email address Optional Only if you type your email into the “Stay in the loop” subscribe box on our home page. We store the address and the date you subscribed, on our own server, so we can send you offers, new launches and restocks. We do not pass it to any third-party mailing service, and you can ask us to remove it at any time.

We do not collect or store your card number, CVV, UPI PIN or net banking password. Those are entered on the payment gateway’s own secure pages and never reach our systems.

Our web server also keeps standard technical logs — IP address, browser type, pages requested and the time of the request — which are used to keep the site running and secure.

3. Why we process it, and on what basis

Under the DPDP Act we process your personal data for these specified, lawful purposes:

  • To fulfil your order — take payment, raise the invoice, pack and ship the goods, and keep you informed about delivery.
  • To provide customer support — answer your questions and handle returns, refunds and warranty claims.
  • To meet legal obligations — GST invoicing and record keeping, and responding to lawful requests from authorities.
  • To protect the store — detect and prevent fraudulent or abusive orders.
  • To send you offers and product news — only if you subscribed to our newsletter yourself. This is done on your consent, and you can withdraw it at any time by telling us to remove your address.

Where we rely on your consent, that consent is asked for in plain language at the point of collection, it is limited to the purpose stated, and you may withdraw it at any time (see section 7). Where processing is needed to perform the contract of sale or to comply with the law, it continues for as long as that purpose lasts.

We do not sell your personal data, and we do not rent or trade it to advertisers. We do not send marketing messages to customers who have not asked for them.

4. Who we share it with

We share the minimum data needed, only with parties who help us complete your order:

  • Our payment gateway (Razorpay) — receives the amount payable and the contact details needed to process and reconcile the payment, and to issue a refund. Razorpay handles your card, UPI and banking credentials directly under its own privacy policy; we never receive them.
  • Our courier and logistics partners — receive your name, delivery address and mobile number, because a parcel cannot be delivered without them.
  • Our messaging provider — if we send you order updates by SMS or WhatsApp, your mobile number and order reference are passed to the messaging service that delivers them.
  • Our web hosting provider — stores the website and its database on our behalf under a contract that requires them to protect it.
  • Government authorities — where we are required by Indian law to disclose information, including GST and tax records.

Each of these is bound by contract to use the data only for the service they provide to us, and to protect it. Some of these providers may process or store data on servers outside India. Where that happens we remain responsible for your data, and we only transfer it to countries the Central Government has not restricted under the DPDP Act.

5. How long we keep it

We keep personal data only for as long as the purpose it was collected for is still being served, and then erase it, except where the law requires us to keep it longer.

  • Order records, invoices and tax data — retained for the period required under GST and income tax law. Under Section 36 of the CGST Act, 2017 that is 72 months from the due date of the annual return for the relevant year. We cannot delete these earlier, even at your request, because we are legally required to hold them.
  • Delivery address and contact details tied to an order — kept with that order record for the same period, so we can support warranty and return claims and prove delivery.
  • Account details — kept while your account is open. If you close it, we delete the account and its login data, and retain only the order and tax records described above.
  • Bulk and dealer enquiries that do not become orders — kept while we are in discussion with you, and erased once the enquiry is closed.
  • Newsletter subscriptions — kept until you ask us to remove you, and erased when you do.
  • Server logs — kept for a short period for security and troubleshooting, then overwritten.

6. How we protect it

We take reasonable security safeguards to prevent a personal data breach. Traffic to the store is encrypted in transit, payment credentials are handled entirely by the payment gateway, passwords are stored hashed, and access to order data in the admin panel is restricted by role so that staff only see what their job requires. No system can be guaranteed perfectly secure, but if a personal data breach affects your data we will notify you and the Data Protection Board of India as the DPDP Act requires.

7. Your rights under the DPDP Act

As a Data Principal you have the right to:

  • Access — get a summary of the personal data we hold about you and how it has been processed, and the identities of those we have shared it with.
  • Correction and completion — have inaccurate or misleading data corrected, and incomplete data completed. If you spot a wrong phone number or address on a pending order, tell us quickly and we can usually correct it before dispatch.
  • Erasure — ask us to delete your personal data. We will erase it unless we are required to keep it to comply with a legal obligation, such as the GST record-keeping period described in section 5. Where that applies, we will tell you what we must retain and why.
  • Withdraw consent — where we process data on the basis of your consent, you can withdraw it at any time, as easily as you gave it. Withdrawal does not affect processing already carried out, and we will stop the affected processing and delete the data unless the law requires us to keep it.
  • Nominate — nominate another person to exercise these rights on your behalf if you die or become incapacitated.
  • Grievance redressal — complain to us about how we have handled your data, and receive a response.

How to make a request

Write to us at contact@ryolite.in, or call +91 89567 13745, with:

  1. your name and the mobile number used on the order;
  2. your order number, if the request relates to an order;
  3. what you want us to do — access, correct, complete, erase, or withdraw consent.

We may ask a question or two to confirm you are the person the data belongs to, so that we do not disclose or delete someone else’s data by mistake. There is no charge for making a request.

8. Complaints

If you are unhappy with how we have handled your personal data or your request, contact our data protection contact at contact@ryolite.in or +91 89567 13745 and we will look into it and respond to you. Please raise your grievance with us first and give us the chance to resolve it.

If we do not resolve it to your satisfaction, you may escalate the matter to the Data Protection Board of India, which is the authority set up under the DPDP Act to hear such complaints.

9. Children

This store is intended for adults. We do not knowingly collect the personal data of anyone under 18, and we do not profile children or direct advertising at them. If you believe a child has given us personal data, contact us and we will delete it.

10. Cookies

We use only the cookies the store needs in order to work — they remember what is in your cart, keep you signed in if you have an account, and carry you securely through checkout. If you block them, the cart and checkout will not function. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings at any time.

11. Links to other sites

When you pay, you may be taken to the payment gateway’s own pages, and our order-tracking links may take you to a courier’s website. Those sites are run by other companies under their own privacy policies, and this policy does not apply to them.

12. Changes to this policy

We may update this policy — for example if we add a payment method or change a service provider. The current version is always the one on this page, and the “Last updated” date at the top shows when it last changed. Where a change materially affects how we use your data, we will make that clear.

13. Contact

  • Email: contact@ryolite.in
  • Phone: +91 89567 13745
  • Post: Ryolite, Opposite Hotel Pratik Lodge, Saswad Road, Uruli Devachi, Pune, Maharashtra 412308, India