GDPR Policy

GDPR Policy

KeyRack Digital Solutions
Website: keyrack.in
Contact: +918417811789
Email: [email protected]

1. Introduction

KeyRack Digital Solutions ("we," "our," or "us") is committed to protecting and respecting your privacy. This General Data Protection Regulation (GDPR) Policy explains how we collect, use, store, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller: Vineet Chauhan (Proprietor)
Business Name: KeyRack Digital Solutions
Contact Information: [email protected] | +918417811789

2. What Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Account Information

• Full name
• Email address
• Phone number
• Billing address
• Company/organization name (if applicable)

2.2 Payment Information

• Payment method details (processed securely through our payment gateways)
• Transaction history
• Subscription information
• Invoice data

2.3 Technical Information

• IP address
• Browser type and version
• Device information
• Website usage data and analytics
• Cookies and tracking technologies

2.4 Communication Data

• Support tickets and correspondence
• Feedback and reviews
• Marketing communication preferences

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide our WordPress themes, plugins, WHMCS modules, PHP scripts, and premium subscription services
• Legitimate Interest: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and optional data processing
• Legal Obligation: To comply with tax, accounting, and legal requirements

4. How We Use Your Personal Data

We use your personal data for the following purposes:

4.1 Service Delivery

• Processing and fulfilling orders
• Managing premium subscription accounts
• Providing customer support
• Delivering digital products and updates

4.2 Payment Processing

• Processing payments through PhonePe, eMandate, and other payment gateways
• Managing subscription billing cycles
• Handling refunds and chargebacks
• Fraud prevention and security

4.3 Communication

• Sending order confirmations and receipts
• Providing technical support
• Sending important service updates
• Marketing communications (with consent)

4.4 Business Operations

• Analytics and service improvement
• Security monitoring
• Legal compliance
• Record keeping

5. Data Sharing and Disclosure

We may share your personal data with:

5.1 Service Providers

• Payment processors (PhonePe, eMandate providers, and international gateways)
• Cloud hosting services
• Email service providers
• Analytics providers
• Customer support tools

5.2 Legal Requirements

• When required by law or legal process
• To protect our rights, property, or safety
• To prevent fraud or abuse
• With your explicit consent

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. International Data Transfers

As we serve international customers, your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

7. Data Retention

We retain your personal data for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal, accounting, and reporting requirements
• Resolve disputes and enforce agreements

Retention Periods:

• Account data: Duration of account plus 7 years for tax purposes
• Payment data: 7 years from last transaction
• Marketing data: Until consent is withdrawn
• Technical logs: 12 months

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

8.1 Right of Access

Request confirmation of data processing and obtain a copy of your personal data.

8.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

8.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data under certain circumstances.

8.4 Right to Restrict Processing

Request limitation of data processing under specific conditions.

8.5 Right to Data Portability

Receive your personal data in a structured format and transfer it to another controller.

8.6 Right to Object

Object to processing based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

Withdraw consent for data processing at any time (where consent is the legal basis).

8.8 Right to Lodge a Complaint

File a complaint with a supervisory authority if you believe your rights have been violated.

9. How to Exercise Your Rights

To exercise any of your rights, contact us at:

Email: [email protected]
Phone: +918417811789
Subject Line: "GDPR Request - [Your Request Type]"

We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure payment processing through certified gateways
• Regular security assessments and updates
• Access controls and staff training
• Incident response procedures

11. Cookies and Tracking

We use cookies and similar technologies to:

• Ensure website functionality
• Analyze website usage
• Remember your preferences
• Provide personalized experiences

You can manage cookie preferences through your browser settings. For more details, please refer to our Cookie Policy.

12. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data immediately.

13. Updates to This Policy

We may update this GDPR Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Email notification to registered users
• Website notice
• Updated "Last Modified" date

14. Contact Information

For any questions, concerns, or requests regarding this GDPR Policy or our data practices, please contact:

KeyRack Digital Solutions
Proprietor: Vineet Chauhan
Email: [email protected]
Phone: +918417811789
Website: keyrack.in

Last Updated: 24-05-2025
Effective Date: 24-05-2025

This GDPR Policy is designed to comply with applicable data protection laws. We recommend consulting with legal counsel to ensure full compliance with your specific circumstances and jurisdictions.