1. Introduction
This Privacy Policy describes how Magic Investments ("we", "us", "our"), a retail clothing brand based in Varanasi, Uttar Pradesh, India, collects, uses, shares, and protects your personal information when you visit our website (subodhmagic.com) or opt in to receive communications from us.
This policy is aligned with the Digital Personal Data Protection Act, 2023 (DPDPA), TRAI regulations on commercial communications, and applicable consumer protection laws.
By submitting your details through any form on our website, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.
2. Information We Collect
When you submit the opt-in form or interact with our website, we may collect the following categories of personal information:
Information You Provide Directly
- Full Name: To personalise communications addressed to you.
- Mobile Phone Number: For SMS, WhatsApp, and RCS communications.
- Email Address: For email marketing and transactional communications.
- Location / City: To provide location-relevant offers and store information.
- Category (I Am): To understand your profile and tailor communications appropriately.
- Product/Service Interest: To send you relevant product recommendations and offers.
- Communication Preferences: Your opt-in or opt-out choices for marketing messages.
Information Collected Automatically
- Website Activity: Pages visited, time spent, links clicked, scroll depth (via analytics tools).
- Device Information: Browser type, operating system, device type, screen resolution.
- IP Address: Approximate geographic location, used for analytics and fraud prevention.
- Cookies and Similar Technologies: Session data, preferences, and analytics identifiers (see our Cookie usage below).
3. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Channels Used | Legal Basis |
|---|---|---|
| Customer support and enquiry responses | Phone, WhatsApp, Email, RCS | Consent / Legitimate interest |
| Order confirmations and shipping updates | SMS, WhatsApp, Email, RCS | Contract fulfilment |
| Marketing campaigns and promotional messages | Email, SMS, WhatsApp, RCS | Explicit marketing opt-in consent |
| New product and collection announcements | Email, SMS, WhatsApp, RCS | Explicit marketing opt-in consent |
| Festive offers and seasonal sales | Email, SMS, WhatsApp, RCS | Explicit marketing opt-in consent |
| Personalised product recommendations | Email, WhatsApp, RCS | Explicit marketing opt-in consent |
| Brand loyalty and referral programmes | Email, SMS, WhatsApp | Explicit marketing opt-in consent |
| Website analytics and performance improvement | Internal / Analytics tools | Legitimate interest |
| Fraud prevention and security | Internal systems | Legal obligation / Legitimate interest |
We will never sell, rent, or trade your personal information to unrelated third parties for their own marketing purposes.
4. RCS Messaging Communications
We use Rich Communication Services (RCS) to deliver rich-media messages to your mobile device, including product images, interactive buttons, carousels, and quick replies.
RCS messages are sent through verified business agent accounts registered with Google and participating Indian telecom carriers. Our brand identity is verified by the RCS aggregator and messages will clearly display our official brand name and logo.
Your mobile number may be shared with our authorised RCS messaging provider solely for the purpose of sending you RCS messages on our behalf. The provider is contractually obligated to protect your data and is prohibited from using it for any other purpose.
To opt out of RCS communications, reply STOP to any message or contact us as detailed in Section 11.
5. WhatsApp Notifications
We use the WhatsApp Business Platform (operated by Meta Platforms, Inc.) to send notifications to customers who have provided a WhatsApp-registered number and opted in.
Messages sent via WhatsApp may include order updates, promotional offers, product catalogues, and customer support conversations. Your number will be shared with WhatsApp's infrastructure; Meta's own privacy policy applies to the processing of data on their platform.
To opt out of WhatsApp messages, reply STOP to any WhatsApp message we send, or block our number.
6. SMS Notifications
We send SMS messages through TRAI-registered telemarketing infrastructure (DLT — Distributed Ledger Technology platform) for commercial communications. All promotional SMS messages are sent through registered sender IDs and pre-approved message templates as required by TRAI regulations.
To opt out of promotional SMS messages, reply STOP to any message or register your number on the National Do Not Call Registry (NDNC) at trai.gov.in.
7. Email Communications
We use your email address to send transactional emails (order confirmations, receipts) and, if you have opted in, marketing emails (offers, newsletters, product launches). Every marketing email includes a clear and functional unsubscribe link.
Email delivery may be processed through a third-party email service provider. This provider acts as a data processor on our behalf and is contractually restricted from using your data for any independent purpose.
8. Data Security
We are committed to ensuring the security of your personal data. We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction, including:
- Encryption of data in transit using TLS/HTTPS
- Access controls restricting data access to authorised personnel only
- Secure storage systems with regular security reviews
- Due diligence requirements for third-party service providers
- Staff training on data protection practices
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. In the event of a data breach that poses a significant risk to your rights, we will notify you and the relevant authorities as required by law.
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
| Data Type | Retention Period |
|---|---|
| Opt-in consent records (name, number, date, channel) | 5 years from date of opt-in (for regulatory compliance) |
| Customer purchase and order data | 7 years (for GST and accounting compliance) |
| Marketing email lists | Until opt-out + 1 year |
| Website analytics data | 26 months (standard analytics retention) |
| Customer support correspondence | 3 years after resolution |
After the applicable retention period, data is securely deleted or anonymised.
10. Third-Party Service Providers
We may share your personal data with the following categories of trusted third-party service providers who process data on our behalf:
- RCS Messaging Aggregators: For delivery of RCS business messages (registered with Google and telecom carriers).
- WhatsApp Business Solution Providers (BSPs): For delivery of WhatsApp notifications via Meta's platform.
- SMS Gateway / DLT-Registered Providers: For delivery of SMS under TRAI regulations.
- Email Service Providers: For transactional and marketing email delivery.
- Website Analytics Providers: For understanding website performance and visitor behaviour.
- Payment Gateway Providers: For secure processing of online payments (if applicable).
- Logistics and Courier Partners: For order fulfilment and delivery status updates.
All third-party providers are contractually obligated to:
- Process your data only on our documented instructions
- Implement appropriate security measures
- Not use your data for their own independent purposes
- Delete or return data upon termination of services
We do not sell, rent, or trade your personal information with unaffiliated third parties.
11. Your Rights
Under the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable Indian law, you have the following rights:
- Right to Access: Request a summary of personal data we hold about you and the purposes for which it is being processed.
- Right to Correction: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
- Right to Withdraw Consent: Withdraw your consent to processing at any time. Withdrawal will not affect the lawfulness of processing prior to withdrawal.
- Right to Grievance Redressal: Lodge a complaint with our Grievance Officer or with the Data Protection Board of India.
- Right to Nominate: Nominate another individual to exercise your rights on your behalf.
To exercise any of these rights, contact us using the details in Section 13. We will acknowledge receipt within 72 hours and respond substantively within 30 days.
12. Opt-Out Instructions
You may opt out of any category of communication at any time:
SMS & RCS
Reply STOP to any message from us. You will be removed from our messaging list within 7 business days.
Reply STOP to any WhatsApp message, or block our contact. Contact us by email to request removal.
Click the Unsubscribe link in any marketing email. You will be removed immediately and your preference will be honoured for all future campaigns.
All Channels
Contact us by email or phone with your name and registered mobile number / email address and request removal from all communications.
Transactional messages (e.g., order confirmation, shipping updates, payment receipts) cannot be opted out of as they are required for the fulfilment of your purchase or service request.
13. Cookies & Tracking
Our website uses cookies and similar technologies to improve your browsing experience, analyse traffic, and remember your preferences. Cookies may include:
- Essential Cookies: Required for basic website functionality.
- Analytics Cookies: Help us understand how visitors interact with the website (e.g., Google Analytics).
- Preference Cookies: Remember your choices such as popup opt-in status (stored in session storage).
By using our website, you consent to the use of cookies as described. You may disable cookies through your browser settings; however, this may affect the functionality of the website.
14. Children's Privacy
Our website and communications are not directed at children under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a person under 18 without verified parental consent, we will delete it promptly.
15. Contact & Grievance Officer
For privacy-related queries, data access requests, opt-out requests, or complaints, please contact our Grievance Officer:
- Brand: Magic Investments
- Location: Varanasi, Uttar Pradesh, India
- Website: subodhmagic.com
- Contact Page: www.subodhmagic.com/index.php/contact-us
We are committed to resolving your concerns promptly and transparently.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website or communications services after the effective date of the revised policy constitutes acceptance of the changes.