Privacy Policy

1. Introduction

CopCars.in is owned and operated by Akash James, trading as CopCars (hereinafter “CopCars”, “we”, “us”, “our”). This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit copcars.in or make a purchase.

This Policy is published in compliance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011(“SPDI Rules”), framed under the Information Technology Act, 2000, and is drafted to be compatible with the requirements of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) which is expected to be enforced in phases from approximately 2027.

2. What Data We Collect

When you use CopCars.in, we may collect the following categories of personal data:

• Account data: your name and email address, provided by Google when you sign in with your Google account.
• Order and shipping data: full name, delivery address (line 1, line 2, city, state, pincode), phone number, and email address you enter at checkout.
• Order history: details of products you ordered, amounts paid, order status, and fulfilment updates.
• Payment data: payments are processed entirely by Razorpay. We do not receive or store your card number, CVV, UPI ID, net-banking credentials, or any other sensitive payment information. We retain only the Razorpay order ID and payment status for order management.
• Technical / usage data: IP address, browser type, device type, pages visited, and referral source, collected automatically to operate and improve the website.

3. How We Use Your Data

• To process and fulfil orders (including dispatching, tracking, and handling returns).
• To communicate order updates to you by email.
• To save your delivery addresses for faster future checkouts (with your consent).
• To authenticate your account via Google Sign-In.
• To operate, maintain, and improve the website.
• To comply with legal obligations, resolve disputes, and enforce our Terms & Conditions.

4. Legal Basis for Processing

We process your personal data on the following bases:

• Performance of a contract: processing is necessary to fulfil your order and deliver products to you.
• Consent: for saving your address for future orders (which you may withdraw at any time by deleting the saved address in your account).
• Legitimate interests: operating and securing the website, preventing fraud, and improving the service, balanced against your rights and interests.
• Legal obligation: where applicable Indian law requires us to retain or disclose data.

5. Sharing Your Data

We share your personal data only with the following third parties, to the extent necessary to provide our services:

• Razorpay Software Private Limited: payment processing. Razorpay receives the information required to process your payment and is bound by its own privacy policy and RBI regulations.
• Google LLC: account authentication via Google Sign-In. Google processes your authentication data under its own privacy policy.
• Courier / logistics partners: your name, delivery address, and phone number are shared with the courier service used to deliver your order.
• Hosting / infrastructure: the website is hosted on Vercel, Inc. infrastructure. Technical data may pass through Vercel's servers in the course of operating the website.
• Law enforcement / legal process: we may disclose your data if required by law, court order, or government authority.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

6. Cookies & Analytics

CopCars.in uses essential cookies and browser storage to operate the website (e.g. your cart items and authentication session). We may use analytics tools to understand aggregate usage patterns. We do not use tracking cookies for cross-site advertising. Your browser settings allow you to disable or delete cookies; doing so may affect some website functionality.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of 3 years to comply with applicable tax and commercial laws. You may request deletion of your account and associated data by contacting us (subject to retention obligations).

8. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including encrypted connections (HTTPS), access controls, and secure coding practices. However, no system is completely secure; you provide your data at your own risk.

9. Your Rights

Under applicable Indian law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent for uses based solely on consent (e.g. saved addresses).
• Request deletion of your account and personal data (subject to legal retention obligations).
• Raise a grievance with our Grievance Officer (see below).

To exercise these rights, contact us at the details in Section 11.

10. Children's Data

CopCars.in is not directed to children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will promptly delete it.

11. Grievance Officer (Data)

In accordance with Rule 5(9) of the SPDI Rules, 2011, we have appointed a Grievance Officer for data-related complaints:

Complaints will be acknowledged within 48 hours and resolved within one month of receipt.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. We encourage you to review this page periodically. Continued use of the website after a change constitutes acceptance of the revised Policy.