Hexa Quordle

Menu

Privacy Policy

Privacy Policy

Last Updated: October 10, 2025

Hexa Quordle respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data under the Digital Personal Data Protection Act, 2023 (DPDPA), Information Technology Act, 2000 (IT Act), and GDPR (for EU residents). As a Data Fiduciary under DPDPA, we process data only with consent.

1. Information We Collect

  • Personal Data: Name, email, phone, address (from client forms).
  • Business Data: Product details, seller credentials (for listings).
  • Usage Data: IP address, browser info, site interactions (via cookies).
  • Sensitive Data: Financial info (e.g., payment details)—handled securely, stored in India only.
 

We do not collect health or biometric data unless essential and consented.

2. How We Use Your Data

  • Deliver services (e.g., listing optimization).
  • Process payments and communicate (e.g., updates via email/WhatsApp).
  • Improve services (e.g., analytics, with anonymization).
  • Comply with laws (e.g., audits).
 

Data use is purpose-limited; no selling to third parties.

3. Consent and Withdrawal

We obtain explicit, informed consent (e.g., via checkboxes) before processing. Withdraw anytime via [email link]; this may limit services. For children under 18, parental consent is required.

4. Data Sharing and Transfers

Shared only with: subcontractors (e.g., cloud providers like AWS India), with contracts ensuring DPDPA/GDPR compliance. Transfers outside India (e.g., to US/EU) use Standard Contractual Clauses (SCCs) or adequacy decisions. No transfers to high-risk countries without safeguards.

5. Data Security

We use encryption (AES-256), access controls, and regular audits. See our Security Compliance Statement for details.

6. Your Rights

  • Access, correct, or delete data (DPDPA Art. 11-13; GDPR Arts. 15-17).
  • Withdraw consent or object to processing.
  • Portability (machine-readable format).
  • File complaints with Data Protection Board of India (DPBI) or EU DPA.

Requests: Email info@hexaquordle.com response within 30 days.

7. Cookies and Tracking

We use essential cookies; non-essential require consent. Manage via browser settings.

8. Retention

Data retained only as needed (e.g., 7 years for tax compliance) or until consent withdrawal, then securely deleted.

9. Third-Party Links

Links to platforms (e.g., Amazon) have their own policies; we are not responsible.

10. Governing Law

Indian law (DPDPA/IT Act); for EU data, GDPR applies. Disputes in [Your City] courts.

By using our site, you consent to this Policy.