Last updated: 27 October 2026
This Data Protection Policy explains how Afojet Infotech ("we") protects personal data, and the rights you have under India's Digital Personal Data Protection Act 2023 (DPDP Act), the EU and UK General Data Protection Regulation (GDPR), and similar laws in other countries. It adds detail to our Privacy Policy.
1. Who is responsible
Afojet Infotech is the data fiduciary (India) and data controller (EU/UK) for the personal data handled on www.afojet.com.
Privacy contact and Grievance Officer: Manoj Vitthalbhai Moradia, afojet.com@gmail.com.
2. What we collect and why
| Data | Why we need it | Legal basis |
|---|---|---|
| Name, email, password (stored scrambled) | Your account, login, receipts | Contract |
| Mobile number, billing address, company, GSTIN | Invoices and tax records | Legal obligation (GST) |
| Orders, licence keys, websites using a key | Delivering and supporting what you bought | Contract |
| Support tickets and messages | Answering you | Contract / legitimate interest |
| IP address, login and security logs | Stopping fraud and abuse | Legitimate interest |
We collect only what these purposes need, and we never sell personal data.
3. How we protect it
- Mobile numbers, addresses, company names, GSTINs, billing details and IP addresses are encrypted as soon as they are saved. Only our Data Protection Officer, with a separate password, can open them — not even store administrators.
- Passwords are stored as one-way hashes; card details never reach our servers (payments are handled by Razorpay / PayPal).
- All traffic uses HTTPS. Access to personal data is logged.
4. How long we keep it
- Account data: while your account is open.
- Invoices and order records: 8 years, because Indian tax law requires it. After an erasure request they keep only what the law needs, encrypted.
- Contact-form messages: up to 2 years.
- Security logs: up to 1 year.
5. Your rights
You can ask us to:
- give you a copy of your personal data;
- correct or complete it;
- erase it (except what the law makes us keep);
- withdraw consent for any use that is based on consent;
- nominate another person to use these rights if you die or cannot act (DPDP Act);
- object to or restrict some uses, and receive your data in a portable format (GDPR).
Use My Account → Privacy & my data, or write to afojet.com@gmail.com. We answer within 30 days and do not charge for it.
6. Sharing and transfers
We share data only with services that help us run the store — hosting, email delivery, payment gateways and Google reCAPTCHA (spam protection) — under contracts that require them to protect it. Some of these providers may process data outside India or the EU; where the law requires it we use safeguards such as standard contractual clauses.
7. Children
Our products are for businesses and adults. We do not knowingly collect data from anyone under 18 without verifiable consent of a parent or guardian.
8. Data breaches
If a breach affects your personal data, we will inform you and the Data Protection Board of India — and, for EU/UK customers, the relevant supervisory authority within 72 hours — as the law requires.
9. Complaints
If you are unhappy with how we handled your data, please contact Manoj Vitthalbhai Moradia first at afojet.com@gmail.com. You may also complain to the Data Protection Board of India, or to the data protection authority in your country.
This policy is a starting draft. Please have it checked by a lawyer for your business.