Privacy policy

1. Introduction

Sony Music India Private Limited (“we”, “us” or “our”) values your privacy and is committed to safeguarding personal information relating to you (“you” or “your”).

 

Personal data refers to any information which can be used to identify you, such as your name, addresses, phone number, or billing information (“Personal Data”). This Privacy Policy explains what Personal Data we process, why we process it, how we use it, with whom we share your Personal Data, and your rights regarding your Personal Data, when you access, register on, browse and use our Website or purchase the Products.

 

This Privacy Policy must be read along with the Terms  (https://shop.stampeight.com/pages/terms-and-conditions). Capitalised terms not defined here shall have the same meaning as under the Terms. If there is a conflict between this Privacy Policy and a specific privacy notice, the terms of the specific privacy notice will prevail.

 

The Website is hosted on Shopify.Inc, which also provides us with certain features and/or services required to run the Website and enables the purchase of our Products. We request you to read Shopify's Privacy Policy to understand how your data may be processed.

 

2. What data do we process and why?

We may process your Personal Data to provide you access to the Website, including to help you create an account, manage your account, and purchasing our Products. In particular, we collect:

 

Data	How we use it and why
Contact details and profile information, such as full name, phone number, email address.	Creating and administering your account. Verifying your identity.  Communicating with you, including through email, SMS, phone or other means, to provide you with delivery or other order updates, regarding your interest in the Products; (providing you with information and sending marketing communications about other Products we believe may interest you; gathering feedback on the Products or Website, including through surveys. Informing you about updates to the Website, this Privacy Policy or the Terms Legal and regulatory purposes.
Shipping information, such as postal address, name and contact number	Taking and fulfilling orders, facilitating delivery, returns or exchanges of any Products purchased on the Website or refunds. Legal and regulatory purposes.
Payment and billing information, including billing details, payment records, payment status, order history, invoice information, refund details.	Processing payments and maintaining billing records and ensuring compliance with our contractual obligations. Enforcing the Terms, and protecting our legal rights, property and ensuring the safety of our personnel or any third party.  Fulfilling orders and providing customer support.  Legal and regulatory purposes.
Product information and interests, such as wishlisted items, Products added to cart, etc.	Improving the Website and Product listings. Personalizing your experience and recommendations.  Providing you with information and sending marketing communications about other Products we believe may interest you.
Service requests, including any tickets raised, complaints and any chat transcripts with customer care, including with any automated chat bots.	Improving the Website and Product listings. Fulfilling orders and providing customer support.  Providing technical support and troubleshooting. Legal and regulatory purposes.
Technical usage and information, such as records of our communication with you, activity on the Website such as login records, feature usage, profile updates, document uploads, device information, IP addresses, browser type, session logs, etc.	Improving the Website and Product listings. Ensuring security of the Website, monitoring for fraud, etc.  Personalizing your experience and recommendations.  Providing technical support and troubleshooting. Legal and regulatory purposes.

 

3. Where we collect your Personal Data from?

We collect your Personal Data: 

 (a) Directly from you: This includes any Personal Data that you share or upload on the Website or through official communication channels, etc.

 (b) Automatically: When you use our Website, we use automated means such as cookies and similar technologies to automatically collect certain technical and behavioural data about you, including your Personal Data, that helps us in improving your experience.

 (c) Third parties: We may also receive data, including Personal Data, about you from external sources, such as through our third-party integrations (including social media platforms and corresponding logins), analytics service providers, marketing and advertisement service providers, infrastructure providers as well as other public sources/platforms (such as public databases).

 

4. Who do we share your Personal Data with?

We share your Personal Data with third parties in accordance with this Privacy Policy and as required by law.

 

S. No.	Who we share the data with:	Why we share the data:
1.	Service Providers	We engage third-party service providers to perform various functions for us and support us in facilitating our operations and providing access to the Website/Products. These include providers of hosting and management services, customer relationship management, database storage, order fulfillment, sending emails and text messages (including via WhatsApp), and marketing and advertising services. These providers process your Personal Data only on our behalf and are contractually bound not to use it for any other purposes except as instructed by us or required by applicable law.
2.	Authorised Sellers	When you purchase the Products, your details are shared with our authorised sellers who will use such data to fulfil orders, deliver the Products, manage payments, etc. These authorised sellers are contractually bound not to use it for any other purpose.
3.	Legal and Regulatory Purposes	We may disclose your data with third parties (such as governmental authorities, law enforcement agencies, external legal counsels etc.) if:(a)   necessary to comply with applicable laws and regulations or directions of governmental authorities or law enforcement agencies, court judgments, decree or orders under any law in force;(b)   required to respond to a valid warrant or court orders;(c)   necessary to prevent, detect and prosecute any kind of fraudulent/illegal behaviour;(d)   to enforce our Terms or other policies;(e)   needed to investigate and defend ourselves against claims or allegations;(f)    necessary to protect our rights and safety, our customers, personnel or others;(g)   required by our auditors and legal advisors to assess our disclosure obligations and rights under this Privacy Policy; or(h)   permitted or required by law.
4.	Our Affiliates	We may share your data, including your Personal Data, with companies within our corporate group, including affiliates, subsidiaries, or businesses under common ownership and control, to provide, maintain, or improve the Website or Products. All affiliated companies are required to process your Personal Data in accordance with this Privacy Policy or similar data protection standards.
5.	Corporate Transactions / Change in Control	If we are involved in a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred as part of that transaction.
6.	With your consent	If you give explicit consent or make a specific request, we may share your data with other parties for purposes not covered in this Privacy Policy.

 

5. How long do we retain your Personal Data?

 

We retain any Personal Data we collect from you for as long as necessary for the activity for which it was collected and to fulfil the purposes outlined in this Privacy Policy. When Personal Data is no longer required for these purposes or other applicable obligations, we will securely delete or irreversibly anonymize it. Anonymized and aggregated information may be retained for analytics, research, or other legitimate business uses.

 

You may choose to delete your account and Personal Data by exercising this feature on the Website or by writing to the Grievance Officer. While we work to fulfil such deletion requests, we may need to retain certain Personal Data for a while longer for the following reasons:

 

· To perform our contractual obligations to which you are subject or to respond to your questions or provide necessary service or support;

· To prevent fraud, resolve complaints, address inquiries, or exercise/defend legal claims, including providing evidence in legal proceedings; or

· To comply with legal obligations, exercise our rights, resolve disputes, or for security and safety reasons, as permitted under the law (such as adhering to applicable statutes of limitations or regulatory investigations). 

 Do note that deletion may not be immediate and may require a reasonable period to propagate across systems, backups, and archives.

 

6. Your rightsYou have certain rights regarding your Personal Data:

(a) Right to access information about your Personal Data: You can ask us for a summary of your Personal Data, the processing activity, and the recipients with whom we have shared your Personal Data, along with a description of the Personal Data shared.

 (b) Right to seek correction and erasure of Personal Data: If you believe that the Personal Data we hold is inaccurate, incomplete or outdated, you can write to us. You may also request deletion of your data; however, in certain cases, we may need to retain it for legal or regulatory reasons.

 (c) Right to grievance redressal: You may raise a grievance if you object to any processing of your Personal Data or when you believe there has been a breach of your rights under this Policy by contacting our Grievance Officer.

 (d)  Right to nominate: You can designate another individual to exercise your rights under this Privacy Policy on your behalf in the event of your death or incapacity.

 

To exercise any of these rights or seek further information, you can reach out to our Grievance Officer. We reserve the right to verify your identity before processing your request, and not to respond to complaints that we believe are manifestly false, unfounded, or frivolous. Additionally, these rights may be limited in certain cases where we are legally required to process or retain your Personal Data. If your grievance remains unresolved, please be informed that you have the right to escalate it to the competent supervisory authority.

 

7. How do we protect your Personal Data?

We are committed to ensuring the security of the Personal Data we process, protecting it from unauthorized access, alteration, disclosure, or destruction. 

Our employees, agents, contractors, and third parties, who have access to your Personal Data for performance of business functions, are required to process your Personal Data in accordance with this Privacy Policy. 

While we make every effort to protect your Personal Data, we understand that no system can guarantee complete security. If you have any concerns, require assistance, or suspect that your interaction with us is no longer secure, please contact our Grievance Officer. 

 

8. Third-party links

Our Website may contain external links, and accordingly you are advised to verify the privacy practices of such other websites. We are not responsible for the manner of use or misuse of information made available by you at such other websites. We encourage you not to provide personal information, without assuring yourselves of the privacy policies of third-party links. Accessing or using these third-party options is done at your own discretion, and we highly recommend reviewing their privacy policies to understand how they treat your data.

 

9. Cookies and tracking technologies

When you utilise our Services, we may place a number of cookies on your browser. For example, we use cookies to understand visitor and user preferences, improve their experience, and track and analyse usage and other statistical information. Additionally, cookies allow us to bring customized features to you. You can control the use of cookies at the individual browser level. If you elect not to activate the cookie or to later disable cookies, you may still utilise our Services, but your ability to use some features or areas thereof may be limited. We may use any of the following categories of cookies:

 

· Essential Cookies: Essential cookies are sometimes called “strictly necessary” as without them we cannot provide the Services or basic functionality. For example, essential cookies help remember your preferences as you navigate the Services. Essential cookies also keep you logged into the Website. Without them the login functionality would not work.

· Analytics Cookies: These cookies track information about accessing to the Services so that we can make improvements and report our performance. For example: analyse visitor and user behaviour so as to provide more relevant content or suggest certain activities. They collect information about how visitors use the Website, the number of each User’s visits and how long a User stays on the Website. We might also use analytics cookies to test new ads, pages, or features to see how Users react to them.

· Functionality or Preference Cookies: Cookies are used to remember information you have entered or choices you make (such as your username, language or your region) on the Website. These preferences are remembered, through the use of the persistent cookies, and the next time you access the Website you will not have to set them again.

· Targeting or Advertising Cookies: These cookies are placed by third party advertising platforms or networks in order to, deliver ads and track ad performance, enable advertising networks to deliver ads that may be relevant to you based upon your activities (this is sometimes called “behavioural tracking” or “targeted” advertising). They may subsequently use information about your visit to target you with advertising that you may be interested in. For example, these cookies remember which browsers have visited our Website.

 

10. Contact us

You can reach out to our Grievance Officer if you have any queries about how your Personal Data is processed, if you want to withdraw your consent for any processing or exercise your rights under appliable data protection law.

Grievance Officer: 

Email: customercare@stampeight.com

 

11. Updates to this Privacy Policy

We reserve the right to modify, add, or remove portions of this Privacy Policy, at our sole discretion, including with respect to any updates mandated under the Digital Personal Data Protection Act, 2023 and any rules thereunder. We will make reasonable efforts to notify you of any material changes via notifications, SMS or email. Once the revised Privacy Policy is published on the Website, the changes will take effect immediately unless stated otherwise. Your continued use of the Website after such updates constitutes consent to the updated policy, to the extent permitted by law. Please take the time to periodically review this Privacy Policy for the latest information on our privacy practices.