Privacy Policy & Cookie Disclosure
Superb Technologies (“we”, “our”, or “us”) is committed to protecting your privacy and personal data. This policy outlines how we collect, process, store, and safeguard digital personal data when you visit or purchase drone components, 3D printing equipment, and electronics through superbtech.in (the “Website”), in full accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable Indian e-commerce regulations.
1. Data Fiduciary Identity
Under the Digital Personal Data Protection Act, 2023, the entity responsible for determining the purpose and means of processing your personal data (the Data Fiduciary) is:
Entity Name: Superb Technologies
Primary URL: https://superbtech.in
Registered Address: B-10, Sansari lane-2, Lam Road, Nashik, Maharashtra, India - 422401
Operating Support Email: [email protected]
Customer Helpline: (+91) 8080964800 (Mon - Sat, 10:00 AM - 5:00 PM IST)
2. Personal Data We Collect
We collect only the minimum digital personal data strictly necessary to fulfill your purchases, service your account, and provide order logistics:
Identity & Contact Details
- Full Name and recipient name for shipments
- Delivery and billing street addresses with postal pincode
- Mobile phone number (for OTP verification, delivery updates, and courier dispatch)
- Email address (for order confirmations, GST invoices, and account recovery)
Order, Tax & Payment Data
- Ordered SKUs, quantities, and transaction values
- GSTIN and business trade name (voluntarily provided for B2B input tax credit)
- Payment gateway transaction references (Razorpay payment ID, order ID)
- Zero Raw Card Storage: We NEVER store debit/credit card numbers, CVVs, expiry dates, or UPI PINs. All payment authentication occurs directly on Razorpay’s PCI-DSS Level 1 certified gateway.
Account & Authentication Data
- Cryptographically hashed account passwords (one-way hashing, impossible to reverse)
- Google OAuth identifiers (email, profile name, and avatar URL) if you choose “Sign in with Google”
- Encrypted session tokens (
st_session) to maintain your authenticated login state
Technical & Diagnostic Data
- Internet Protocol (IP) address and broad geographic location (state/country level via Cloudflare)
- Browser type, device operating system, and screen resolution
- Aggregate page dwell times, component spec views, and route transitions to identify broken links or catalog performance issues
3. Purpose & Lawful Grounds for Processing
We process digital personal data only under valid legal grounds recognized by the DPDP Act (Sections 4, 6, and 7):
4. Cookies & Local Browser Storage Disclosure
Our website uses cookies and browser local storage to maintain your shopping cart, keep you logged into your account, secure checkout, and analyze aggregate store traffic. We do not sell or rent cookie data to third-party ad networks.
| Cookie / Storage Key | Provider | Lifespan | Classification | Function / Purpose |
|---|---|---|---|---|
| st_session | Superb Tech | 7 Days | Strictly Essential | Encrypted session token. Maintains your secure customer login state and authorizes order history access. |
| __st_checkout_attempt | Superb Tech | 24 Hours | Strictly Essential | Checkout idempotency guard. Prevents duplicate order placement or accidental double credit card/UPI charges. |
| google_auth_state / return_to | Superb Tech | 10 Minutes | Strictly Essential | Cryptographic CSRF validation token and redirect memory during Google OAuth authentication. Cleared immediately upon login. |
| localStorage: woo-cart | Superb Tech | Persistent | Strictly Essential | Preserves your cart items and quantities locally in your browser so items are not lost across pages or tabs. |
| localStorage: theme | Superb Tech | Persistent | Functional | Remembers your preferred user interface display mode (Light / Dark theme). |
| _ga / _ga_* | Google Analytics 4 | 2 Years | Analytics | Measures aggregate website traffic, popular product categories, bounce rates, and checkout funnel conversion drops. |
| st_vid / st_sid | Superb Tech | 1 Year / 30 Mins | Analytics | First-party telemetry indicators used to track aggregate product page dwell time and detect broken layout transitions. |
| rzp_device_id / Session | Razorpay | Session | Security / Payment | Device fraud risk scoring and payment token session management inside the secure checkout frame. |
How to Control Cookies via Browser Settings
You have the option to accept or decline cookies directly through your browser preferences (Chrome, Safari, Firefox, or Edge). Please note that if you choose to block strictly essential cookies (such as st_session or woo-cart), you will be unable to log in, add items to your cart, or complete purchases on our store.
5. Third-Party Service Providers (Data Processors)
We never sell or commercialize your personal information. We share personal data exclusively with trusted third-party service providers bound by strict confidentiality and data protection obligations:
- Shipping & Logistics Aggregators: We share consignee name, delivery address, phone number, and package details with Shiprocket and its verified courier partners (Delhivery, BlueDart, DTDC, Ekart, India Post) solely to transport and deliver your parcels.
- Payment Processing Aggregators: We share order amount, currency, and customer contact details with Razorpay Software Private Limited to process UPI, NetBanking, and Card payments under RBI guidelines.
- Cloud & Security Infrastructure: Cloudflare, Inc. provides edge caching, DDoS mitigation, and anti-scraping firewalls to protect customer accounts from automated attacks.
- Law Enforcement & Statutory Authorities: We disclose personal data only when required by applicable Indian law, court order, search warrant, or regulatory decree under valid legal process.
6. Data Retention Policy
We retain personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is mandated by Indian law:
- Tax & Commercial Invoices: Retained for a minimum of 8 years to comply with Section 36 of the Central Goods and Services Tax (CGST) Act, 2017 and Income Tax Department rules.
- Active Customer Accounts: Retained for the duration of your active account or until you submit a verified account deletion request.
- Temporary Telemetry & Logs: Technical session logs and anonymized diagnostic traces are purged on a rolling 90-to-365 day cycle.
7. Your Statutory Rights (DPDP Act, 2023)
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following enforceable legal rights:
To exercise any of these rights, please contact our designated Grievance Officer using the details below. We will verify your identity before fulfilling any request to prevent unauthorized access.
8. Grievance Redressal Mechanism & Contact Details
In compliance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and Section 13 of the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are provided below:
Grievance & Data Protection Officer
(+91) 8080964800
Superb Technologies
B-10, Sansari lane-2, Lam Road,
Nashik, Maharashtra, India - 422401
Monday to Saturday, 10:00 AM – 5:00 PM IST
- Acknowledgment: Your grievance or query will be acknowledged within 48 hours with a unique ticket reference.
- Resolution: Formal redressal and resolution shall be provided within 30 days from the receipt of the complaint.
- Escalation to Data Protection Board: If your grievance is not resolved satisfactorily within the stipulated timeline, you have the statutory right under the DPDP Act to file a complaint before the Data Protection Board of India (DPBI).
9. Protection of Children’s Data
Our products—including drone components, CNC parts, LiPo batteries, and 3D printing equipment—are intended for purchase by adults aged 18 years or older, or students operating under the supervision of a parent, legal guardian, or educational mentor. We do not intentionally process digital personal data of children under 18 years of age without verifiable parental consent.
10. Modifications to this Privacy Policy
We may revise this Privacy Policy periodically to reflect changes in our technical systems, legal obligations under the DPDP Act, or judicial directives. Any updates will be posted immediately on this page with an updated “Last Updated” date. We encourage you to review this page regularly to stay informed about how we protect your personal data.