Privacy Policy
SuperBeez
www.superbeez.in
PRIVACY POLICY
Jurisdiction: Chhatrapati Sambhajinagar (Aurangabad), Maharashtra, India
Effective Date: April 2026 | Version 1.0 | Last Reviewed: April 2026
Governing Legal Framework
› Information Technology Act, 2000 (IT Act) & Amendment Act, 2008
› IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011
› Digital Personal Data Protection Act, 2023 (DPDPA)
› Consumer Protection Act, 2019 & E-Commerce Rules, 2020
› Indian Contract Act, 1872
› Payment and Settlement Systems Act, 2007 & RBI Guidelines
› Central Goods and Services Tax (CGST) Act, 2017
› Maharashtra Shops and Establishments (Regulation of Employment and Conditions of Service) Act, 2017
› IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
› Bharatiya Nyaya Sanhita, 2023 (successor to IPC) — cybercrime provisions
SECTION 1 - ABOUT THIS POLICY & THE COMPANY
1. Introduction
www.superbeez.in recognises the importance of your privacy and is committed to protecting your personal data. This Privacy Policy describes how SuperBeez collects, uses, stores, shares, and safeguards the personal information of its users, customers, and visitors, in full compliance with Indian law.
www.superbeez.in is a property of ALIGN STATIONERIES, an Indian company registered under the Companies Act, 2013, having its registered office at:
Registered Address: Shop no. 01, Qileark, VIP road, Near Gaikwad Hospital, Chhatrapati Sambhajinagar (Aurangabad), Maharashtra – 431001
GSTIN: 27BZBPA8940E1ZL
Website: www.superbeez.in
Email: syedtaha@superbeez.in
Customer Care: nomaansyed@superbeez.in
This Privacy Policy applies to all current and former visitors to our website, mobile application users, and online/offline customers. We reserve the rights of reviewing, adding, modifying, deleting and editing this privacy policy under Indian law for future updates. By visiting www.superbeez.in and/or using our services, you agree to this Privacy Policy. If you do not agree, please discontinue use of our platform immediately.
2. Scope of This Policy
This Policy applies to all personal data collected through: (a) the www.superbeez.in website and mobile application; (b) offline transactions, events, or customer interactions; (c) third-party platforms integrated with our services; and (d) any communications via phone, email, WhatsApp, or social media in connection with our services.
SECTION 2 - PERSONAL DATA WE COLLECT
3. Categories of Information Collected
SuperBeez collects the following categories of personal data, as defined under the Digital Personal Data Protection Act, 2023 (DPDPA) and IT (SPDI) Rules, 2011:
3.1 Contact Information - Full name, email address, mobile number, phone number, delivery address, city, state, PIN code, country, and IP address.
3.2 Payment & Billing Information - Billing name, billing address, and payment method details. We do NOT collect or store your credit card number, CVV, expiry date, or full debit card details on our servers. All payment card data is collected and processed exclusively by our PCI-DSS-compliant payment partner (e.g. Razorpay). UPI IDs and net banking credentials are similarly never stored by us.
3.3 Order & Transaction Data - Purchase history, product preferences, order status, invoice records, return/exchange requests, and delivery tracking information.
3.4 Demographic Information - Age, product preferences, survey responses, and other information voluntarily provided during use of our website.
3.5 Technical & Device Data - IP address, browser type and version, operating system, device type, device identifiers, referring website (how you arrived at our site), pages visited, time spent on pages, and the site you visit after leaving us.
3.6 User-Generated Content - Comments, reviews, queries, and any content you post on our platform or our social media pages.
3.7 Sensitive Personal Data or Information (SPDI) - Financial information (as limited above), passwords (stored only in encrypted form).
Legal Note: SuperBeez does not collect Aadhaar numbers unless specifically required by a central or state government mandate and only with your explicit consent.
4. Data of Minors
Our platform is not directed at individuals below 15 years of age. We do not knowingly collect personal data from children without verifiable parental or guardian consent, as required under Section 9 of the DPDPA, 2023. If we discover that a minor's data has been collected without appropriate consent, we will delete it immediately. Parents or guardians may contact us at nomaansyed@superbeez.in or syedtaha@superbeez.in
SECTION 3 - HOW WE COLLECT YOUR INFORMATION
5. Collection Methods
5.1 Directly from You - When you register an account, place an order, fill out a form, post a comment, contact us by phone or email, participate in a survey, or subscribe to our communications.
5.2 Passively / Automatically - We use tracking tools including Google Analytics, Google Search Console, browser cookies, web beacons, and pixel tags to collect information about your usage of our website and app.
5.3 From Third Parties - If you use integrated social media features (e.g., login via Google or Facebook), the third-party platform may share certain information with us such as your name and email address. We also receive data from payment gateways and logistics partners.
6. Cookies & Tracking Technologies
We use the following types of cookies on www.superbeez.in:
● Session Cookies - Temporary cookies that expire when you close your browser; used to maintain your session while browsing.
● Persistent Cookies - Stored on your device for a set period; used to remember your preferences and login details.
● Analytics Cookies - Used by Google Analytics and similar tools to understand how users interact with our website. Data collected is aggregated and anonymised.
● Marketing Cookies - Used to serve relevant advertisements, only with your prior consent.
You may disable cookies through your browser settings. However, please note that disabling essential cookies may affect the functionality of our website, including your ability to complete purchases.
SECTION 4 - USE OF YOUR PERSONAL INFORMATION
7. Purposes of Processing & Lawful Basis
We use your personal information for the following purposes. Each purpose is supported by a lawful basis under the DPDPA, 2023:
7.1 To Contact You - We may use your information to confirm purchases, send order confirmations, delivery updates, and for other transactional or promotional communications. [Lawful Basis: Contract; Consent]
7.2 To Respond to Requests & Queries - We use your information to respond to customer service requests, and general queries. [Lawful Basis: Contract; Legitimate Interest]
7.3 To Process Payments & Fulfil Orders - To process your transactions, coordinate delivery through our logistics partners, and manage returns/exchanges. [Lawful Basis: Contract]
7.4 To Improve Our Products & Services - We may use your data to personalise your experience, display relevant content and products, and improve our platform. [Lawful Basis: Legitimate Interest]
7.5 To Analyse Site Trends & Customer Interests - We may combine information we collect with data obtained from third parties to better understand usage trends and improve our platform. [Lawful Basis: Legitimate Interest]
7.6 For Security & Fraud Prevention - We use information to protect SuperBeez, our customers, and our platform from fraud, unauthorised access, and abuse. [Lawful Basis: Legitimate Interest; Legal Obligation]
7.7 For Marketing & Promotions - We may send you promotional offers, new product announcements, or special discounts via email, SMS, or WhatsApp - but only with your explicit prior consent. You may opt out at any time. [Lawful Basis: Consent]
7.8 To Send Transactional Communications - Order confirmations, shipping updates, payment receipts, and account-related notifications. [Lawful Basis: Contract]
7.9 For Legal & Regulatory Compliance - TDS compliance, responding to court orders, and compliance with directives from the Government of India, the State of Maharashtra, or municipal/local authorities in Chhatrapati Sambhajinagar. [Lawful Basis: Legal Obligation]
7.10 As Otherwise Permitted by Law - As required or permitted by applicable Indian law.
SECTION 5 - SHARING OF INFORMATION WITH THIRD PARTIES
8. When We Share Your Information
SuperBeez does not sell your personal data to any third party. We share your information only in the following limited and lawful circumstances:
8.1 Service Providers & Vendors - We share information with third-party vendors who perform services on our behalf, including payment processors (Razorpay), logistics and courier partners, cloud hosting providers, email/SMS service providers, and analytics providers. These vendors are contractually obligated to use your data only for the purpose of providing services to us and in accordance with applicable Indian law.
8.2 Business Partners - We may share your information with our authorised business partners who provide products or services listed on our platform. Partners handle your data as described in their own privacy policies.
8.3 Legal & Regulatory Compliance - We may disclose your information to comply with applicable law, including responding to court orders, subpoenas, directions from government agencies, regulatory authorities (including the Income Tax Department, GST authorities, Maharashtra Police, and local Chhatrapati Sambhajinagar Municipal Corporation authorities where applicable), or when investigating potential fraud or criminal activity.
8.4 Business Transfers - In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
8.5 With Your Consent - For any purpose not listed above, we will share your information only with your prior explicit consent.
8.6 Aggregated/Anonymised Data - We may share aggregated, non-personally identifiable data with partners, advertisers, or for research purposes. This data cannot be used to identify you individually.
SECTION 6 - MARKETING COMMUNICATIONS & OPT-OUT
9. Your Right to Opt Out
You have the right to opt out of receiving marketing emails, SMS messages, and WhatsApp communications from SuperBeez at any time.
● To opt out of marketing emails, click the 'Unsubscribe' link at the bottom of any promotional email we send, or email us at syedtaha@superbeez.in with the subject line 'Unsubscribe'.
● To opt out of SMS/WhatsApp marketing, reply 'STOP' to any message or contact us at syedtaha@superbeez.in.
● Please allow up to 10 (ten) business days for your opt-out request to be processed.
Please note: Even if you opt out of marketing communications, we will continue to send you essential transactional messages related to your orders, account, payments, and deliveries. These are necessary for the performance of your contract with us and cannot be opted out of while you remain a customer.
Legal Note: This opt-out right is consistent with Regulation 6 of the Telecom Commercial Communications Customer Preference Regulations (TCCCP), 2018, issued by TRAI, which governs commercial communications in India.
SECTION 7 - DATA RETENTION
10. How Long We Keep Your Data
We retain your personal data only for as long as is necessary for the purposes stated in this Policy, or as required by applicable law:
● Transaction records & tax invoices - 8 years (Income Tax Act, 1961; CGST Act, 2017).
● Customer account data - Duration of the active account + 3 years after account closure.
● Payment-related data - As required under RBI guidelines and PCI-DSS standards (only tokenised/reference data is retained; no raw card data is stored).
● Marketing & communication consent records - Until consent is withdrawn or the purpose is fulfilled.
● Legal hold data - For the duration of any ongoing legal, regulatory, or dispute resolution proceedings.
● Server logs and technical data - 90 days, unless required longer for security investigations.
Upon expiry of the applicable retention period, your data will be securely deleted, anonymised, or de-identified in accordance with the DPDPA, 2023, and SPDI Rules, 2011.
SECTION 8 - YOUR RIGHTS AS A DATA PRINCIPAL
11. Rights Under DPDPA, 2023 & SPDI Rules, 2011
As a Data Principal (the individual whose personal data is processed), you have the following rights under Indian law. To exercise any right, please contact us at nomaansyed@superbeez.in
11.1 Right to Access - You may request a summary of the personal data we hold about you, the purposes of processing, and the entities with whom it has been shared. [Section 11, DPDPA 2023]
11.2 Right to Correction & Completion - You may request correction of inaccurate or incomplete personal data we hold about you. [Section 12, DPDPA 2023]
11.3 Right to Erasure - You may request deletion of your personal data when it is no longer necessary for the original purpose, subject to any legal retention obligations. [Section 12, DPDPA 2023]
11.4 Right to Grievance Redressal - You may raise a privacy concern with our Grievance Officer and receive a reasoned response within the legally prescribed timeframe. [Section 13, DPDPA 2023]
11.5 Right to Nominate - You may nominate another individual to exercise your data rights in case of your death or incapacity. [Section 14, DPDPA 2023]
11.6 Right to Withdraw Consent - Where processing is based on your consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
11.7 Right to Opt Out of Marketing - You may withdraw consent for marketing communications at any time (see Section 6 above).
11.8 Right to Complain to the Data Protection Board - You may lodge a complaint with the Data Protection Board of India (once fully constituted under the DPDPA, 2023) if you believe your rights have been violated.
Legal Note: We will respond to all rights requests within 30 days of receipt. For complex requests, we may extend this by a further 30 days with written notice to you.
SECTION 9 - SECURITY OF YOUR INFORMATION
12. Security Measures
SuperBeez implements reasonable security practices and procedures as mandated under Rule 8 of the IT (SPDI) Rules, 2011, and Section 8(4) of the DPDPA, 2023. Our security framework includes:
● SSL/TLS encryption for all data transmitted between your browser/device and our servers.
● AES-256 encryption for sensitive data stored at rest.
● Role-based access controls - only authorised personnel have access to your data.
● Secure, PCI-DSS-compliant payment gateway integration - we never store raw card data.
● Regular security audits, vulnerability assessments, and penetration testing.
● Multi-factor authentication for internal administrative systems.
● An internal Incident Response Plan and a Data Breach Register.
While we take all reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use strong passwords and to notify us immediately if you suspect any unauthorised access to your account.
13. Data Breach Notification
In the event of a personal data breach that is likely to affect your rights or interests, SuperBeez shall notify the Data Protection Board of India and affected individuals in the manner and within the timelines prescribed under the DPDPA, 2023, and any Rules made thereunder. We also maintain an internal breach register as a matter of good practice.
SECTION 10 - THIRD-PARTY WEBSITES & LINKS
14. External Links
Our website may contain links to third-party websites, social media platforms, or partner portals. If you click on such a link, you will be taken to a website that we do not operate or control. This Privacy Policy does not apply to those third-party websites.
We strongly recommend that you read the privacy policy of any third-party website you visit. SuperBeez is not responsible for the privacy practices, content, or security of any external website.
SECTION 11 - E-COMMERCE & MARKETPLACE COMPLIANCE
15. Consumer Protection (E-Commerce) Rules, 2020
As an e-commerce entity operating in India, SuperBeez complies with the Consumer Protection (E-Commerce) Rules, 2020, framed under the Consumer Protection Act, 2019. Accordingly, we confirm:
● We do not engage in price manipulation, fake discounts, or deceptive practices that mislead consumers.
● We display clear and accurate product information, pricing (inclusive of all applicable taxes), and seller details.
● We maintain and publish a transparent Return, Exchange, and Refund Policy (available on our website).
● We offer multiple RBI-approved payment methods (UPI, credit/debit cards, net banking, wallets, COD).
● We do not use personal data collected from customers to provide unfair advantages to affiliated sellers.
● All personal data collected is used solely for purposes disclosed in this Privacy Policy.
16. Maharashtra State - Specific Compliance
SuperBeez, being headquartered and registered in Chhatrapati Sambhajinagar (Aurangabad), Maharashtra, additionally complies with:
● Maharashtra Shops and Establishments (Regulation of Employment and Conditions of Service) Act, 2017 — for all operational and employment-related data handled at our office.
● Maharashtra Goods and Services Tax Act, 2017 (MGST) — for state-level tax compliance.
● Directives of the Chhatrapati Sambhajinagar Municipal Corporation (CSMC) — where applicable to our local business operations.
● Maharashtra IT Policy, 2023 — promoting responsible and secure use of digital infrastructure.
SECTION 12 - GRIEVANCE OFFICER & DATA PROTECTION OFFICER
17. Contact Details
In accordance with the Information Technology Act, 2000, IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDPA, 2023, the contact details of our Grievance Officer and Data Protection Officer are provided below:
Grievance Officer
Name: Nomaan Syed
Designation: Founder
Email: nomaansyed@superbeez.in
Phone: 9503407065
Address: Town Hall, Chhatrapati Sambhajinagar (Aurangabad), Maharashtra - 431001
Hours: Monday to Sunday, 11:00 AM – 11:00 PM IST (excluding public holidays)
All privacy complaints and grievances will be acknowledged within 48 hours and resolved within 30 days of receipt, in accordance with applicable Indian law. If you remain dissatisfied with our resolution, you may escalate your complaint to the Data Protection Board of India, once it is fully operational.
SECTION 13 - UPDATES TO THIS PRIVACY POLICY
18. Policy Changes
SuperBeez reserves the right to update or revise this Privacy Policy at any time, to reflect changes in applicable law, our business practices, or the services we offer. The updated policy will be posted on www.superbeez.in with a revised effective date.
For material changes - those that significantly affect your rights or how we process your data - we will notify you via email or a prominent notice on our platform at least 7 days before the changes take effect. Continued use of our services after the effective date of the revised policy constitutes your acceptance of the updated terms.
We encourage you to review this Privacy Policy periodically. This Privacy Policy was last reviewed in April 2026.
SECTION 14 - GOVERNING LAW & JURISDICTION
19. Governing Law
This Privacy Policy and all matters relating to the privacy of your personal data shall be governed by and construed in accordance with the laws of the Republic of India, including the Information Technology Act, 2000; the IT (SPDI) Rules, 2011; the Digital Personal Data Protection Act, 2023; the Consumer Protection Act, 2019; the CGST Act, 2017; the Payment and Settlement Systems Act, 2007; and all other applicable central, state (Maharashtra), and local laws.
20. Jurisdiction
By using www.superbeez.in, your visit and any dispute arising over privacy or data protection under this Policy shall be subject to the exclusive jurisdiction of the competent courts located at Chhatrapati Sambhajinagar (Aurangabad), Maharashtra, India. Any dispute not resolved through our grievance mechanism may be referred to arbitration under the Arbitration and Conciliation Act, 1996, with the seat of arbitration at Chhatrapati Sambhajinagar, Maharashtra.
CONSENT & ACKNOWLEDGEMENT
By visiting www.superbeez.in, placing an order, registering an account, or submitting your personal information, you confirm that you have read, understood, and freely give your consent to the collection, processing, use, and sharing of your personal data as described in this Privacy Policy, in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and all applicable Indian laws.
For SuperBeez: _______________________________ Date: 4Th April 2026
Grievance Officer Signature: Nomaan
SuperBeez | www.superbeez.in | Privacy Policy v1.0 | Chhatrapati Sambhajinagar, Maharashtra, India | April 2026