Privacy policy
This policy explains how ICardPrint collects, uses, shares and protects personal data when you use icardprint.com, in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Data we collect
- Account data: name, email address and password (stored only as a secure hash).
- Order data: organisation name, contact phone, delivery address and PIN code, order specifications and messages.
- Card data: artwork, logos, rosters (ID, name, class or department) and photographs you upload to be printed.
- Payment data: payment status and transaction references from Razorpay. Card, UPI and bank credentials are handled by Razorpay and are never received or stored by us.
- Technical data: IP address, browser details and essential security logs.
2. Why we use it
We use personal data only to create and manage your account, prepare quotes and proofs, print and deliver your order, process payments and refunds, provide support, prevent fraud, and meet legal, tax and accounting obligations. We do not sell personal data and do not use card data for marketing.
3. Consent and data of students and staff
By uploading a roster or photographs, you confirm that your organisation has the right to share them with us for printing, including any consent required from the individuals concerned or, for children, from their parents or guardians. We process such data only on your organisation's instructions and only to produce the cards.
4. Who we share data with
- Razorpay, to process payments and refunds.
- Courier and transport partners, who receive only the delivery name, address, phone number and parcel details.
- Our hosting provider, which stores data on secured servers.
- Government authorities, where required by law.
5. Security
Uploaded files are stored privately and are visible only to you and authorised staff. Rosters are stored encrypted. The website uses HTTPS encryption, and staff accounts require two-factor authentication. No system is perfectly secure, but we take reasonable security practices as required by law.
6. Retention
We keep card data only as long as needed to complete your order, handle reprints and resolve complaints, and then delete it unless you ask us to keep it for repeat orders. Invoices and transaction records are kept for the period required by tax and accounting law.
7. Your rights
You may ask to access, correct, update or erase your personal data, withdraw consent for future processing, or nominate another person to exercise your rights. Write to us using the details below. We may need to verify your identity before acting.
8. Cookies
We use only essential cookies for sign-in, security and form protection. We do not use advertising or tracking cookies.
9. Grievance officer
For any privacy concern, contact our grievance officer. See our grievance redressal policy for timelines.