My Cart
All Category
Privacy Policy
Effective Date: 14 July 2017 | Last Updated: April 2025
Garuda Prakashan Pvt. Ltd. ("Garuda Prakashan", "we", "us", or "our") operates the websites garudabooks.in, garudalife.in, and related subdomains (collectively, the "Site"). This Privacy Policy explains how we collect, use, store, and protect your personal information, and describes your rights under applicable Indian law.
By registering on the Site or placing an order, you acknowledge that you have read this Privacy Policy and provide your free, informed, and unambiguous consent to the practices described herein, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Information Technology Act, 2000.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified prominently on the Site. Continued use of the Site after any update constitutes your acceptance of the revised policy. We will not retroactively make our practices less protective of personal data collected previously without your express consent.
1. Compliance with the Digital Personal Data Protection Act, 2023
This Privacy Policy is updated to comply with the Digital Personal Data Protection Act, 2023 (DPDPA), which governs the processing of digital personal data of individuals in India. Under DPDPA:
- We act as a Data Fiduciary — we determine the purpose and means of processing your personal data.
- You are a Data Principal — you have rights over your personal data as described in Section 6 below.
- We process your personal data only for lawful purposes with your consent, or as otherwise permitted by law.
2. Personal Data We Collect and Why
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Account & Identity | Name, email address, password (hashed) | Account creation, authentication, customer support | Until account deletion or 3 years of inactivity |
| Order & Transaction | Billing/shipping address, phone number, order history, payment method type | Order fulfilment, invoicing, returns, legal compliance | 7 years (GST and tax obligations under Indian law) |
| Device & Usage | IP address, browser type, pages visited, search terms | Site security, fraud prevention, performance analytics | 90 days (logs); 2 years (aggregated analytics) |
| Communications | Emails, support tickets, reviews | Customer support, dispute resolution | 3 years from last contact |
| Marketing preferences | Newsletter subscription status | Sending promotional emails (only with your consent) | Until you withdraw consent (unsubscribe) |
We do not collect sensitive personal data (financial account numbers, biometric data, health data) unless strictly necessary and with additional safeguards.
3. How We Collect Data
- Directly from you — when you register, place an order, submit a review, contact support, or sign up for newsletters.
- Automatically — via server logs, cookies, and similar technologies when you browse the Site.
- From third parties — payment processors (in tokenised form only), logistics partners (for delivery confirmation), marketplace sellers (if you purchase from a third-party seller on our platform).
4. Cookies and Similar Technologies
We use cookies and similar technologies for:
- Essential cookies — required for login sessions, cart functionality, and security. These cannot be disabled without breaking the Site.
- Analytics cookies — to understand how visitors use the Site (e.g., pages visited, session duration). Data is aggregated and not individually identifiable.
- Marketing cookies — to show relevant advertisements. These are only placed with your awareness as described in this policy.
You can disable non-essential cookies through your browser settings. Disabling essential cookies will affect Site functionality.
5. Sharing of Personal Data
We do not sell your personal data. We share it only as necessary:
- Logistics & delivery partners — name, address, phone for shipment delivery.
- Payment processors — transaction amount and reference only; we do not store full card details.
- Marketplace sellers — if you purchase from a third-party seller, your order details are shared with that seller to fulfil your order.
- Legal requirements — if required by law, court order, or government authority.
- Business transfers — in the event of a merger or acquisition, your data may be transferred to the successor entity under equivalent privacy protections.
6. Your Rights under the DPDPA 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to information — you may request a summary of the personal data we hold about you and the purposes for which it is being processed.
- Right to correction and erasure — you may request correction of inaccurate data or erasure of data that is no longer necessary for the purpose it was collected. Note: we may retain order data for 7 years as required by tax law.
- Right to withdraw consent — you may withdraw consent for marketing communications at any time by clicking "Unsubscribe" in any email or contacting us. Withdrawal does not affect lawful processing that occurred before withdrawal.
- Right to grievance redressal — you may lodge a complaint with our Grievance Officer (see Section 8). If your grievance is not addressed within 30 days, you may escalate to the Data Protection Board of India.
- Right to nominate — you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
To exercise any of the above rights, please contact our Grievance Officer.
7. Security of Your Personal Data
We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure — including HTTPS encryption, hashed passwords, and restricted access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in harm to you, we will notify you and the Data Protection Board of India as required under the DPDPA 2023.
8. Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the details of our Grievance Officer are as follows:
Name: Komal
Organisation: Garuda Prakashan Pvt. Ltd.
Email: contact@garudabooks.com
Response time: We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days.
You may contact the Grievance Officer to exercise your rights, raise a complaint, or seek clarification about this Privacy Policy.
9. Third-Party Links
The Site may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Children's Data
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact our Grievance Officer and we will delete it promptly.
11. How to Opt Out of Marketing
You may opt out of marketing emails at any time by clicking "Unsubscribe" in any email from us. Transactional emails (order confirmations, shipping updates) cannot be opted out of as they are necessary for the services you have purchased.
12. Governing Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of courts in New Delhi, India.
13. Contact Us
Garuda Prakashan Pvt. Ltd.
Gurugram, Haryana – 122001
Email: contact@garudabooks.com
