Privacy policy

Lavanya Infotech, trading as Black Cord, operating from Vishwas Nagar, Shahadara, Delhi. We are the data fiduciary for the personal data described here, under India’s Digital Personal Data Protection Act, 2023.

When you order or request a quote: name, firm name, email address, phone number, delivery address, and GSTIN where you supply one.

When you create an account: the above, plus a password stored only as a cryptographic hash. We never store your password itself and cannot recover it.

When you pay: card and UPI details are entered directly with our payment gateway and never reach our servers. We keep only the gateway’s reference and the amount.

Automatically: a session cookie once you sign in, and basic technical information such as IP address and browser, used for security and rate limiting.

To fulfil orders and quotes, to issue invoices that satisfy GST requirements, to maintain your account and order history, and to prevent abuse of our forms and login.

We do not sell personal data. We do not use it to build advertising profiles and we do not share it with advertisers.

Our payment gateway, for processing payments. Our email provider, for order and quote correspondence. Our hosting and database providers, who store data on our behalf. Statutory authorities, where the law requires it.

Orders, invoices and the audit trail supporting them are retained for eight years, as required for tax and accounting purposes. Quote requests and enquiries are retained for three years. Account data is retained until you ask us to delete it.

You may ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to erase it where we are not required to keep it. You may nominate another person to exercise these rights on your behalf. Write to us and we will respond within the period the law allows.

We set one cookie, and only after you sign in: a session identifier that keeps you signed in. It is httpOnly and cannot be read by scripts. Your theme preference is stored in your own browser and is never sent to us. We run no advertising or third-party tracking cookies.

Data is transmitted over TLS and stored in a managed database with access limited to named administrators. Passwords are hashed with scrypt. Actions that change prices, roles or orders are written to an append-only audit log.