Legal

PRIVACY POLICY

Effective Date: January 1, 2026 | Last Updated: January 1, 2026

Bluemetric Systems Pvt. Ltd. ("Company," "we," "us," or "our"), operating as Enduro Sports, is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://endurosports.shop and use our services.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and other applicable laws of India.

1. Data Controller Information

Entity Name	Bluemetric Systems Pvt. Ltd.
Trading As	Enduro Sports
Registered Address	No. 2621, 23rd Main, A Block, Sahakara Nagar, Bengaluru, Karnataka 560092, India
GSTIN	29AANCB9379B1Z6
Contact Email	privacy@endurosports.shop

2. Information We Collect

2.1 Personal Data You Provide

We collect information you voluntarily provide when you:

Create an account or register on our website
Place an order or make a purchase
Subscribe to our newsletter or marketing communications
Contact us through our customer support channels
Participate in surveys, promotions, or contests

Categories of personal data collected include:

Category	Examples
Identity Data	Full name, title, date of birth
Contact Data	Email address, phone number, delivery address, billing address
Transaction Data	Order details, purchase history, payment information (excluding card numbers)
Technical Data	IP address, browser type, device information, cookies
Usage Data	Pages visited, products viewed, time spent on site
Marketing Data	Communication preferences, interests

2.2 Automatically Collected Data

When you visit our website, we automatically collect certain information through cookies and similar technologies, including:

Device type and operating system
Browser type and version
IP address and approximate location
Pages visited and navigation patterns
Time and date of access
Referring website or source

3. Legal Basis for Processing (Consent)

Under the DPDP Act, 2023, we process your personal data based on your explicit consent, which you provide by:

Creating an account on our website
Placing an order for our products
Subscribing to our communications
Continuing to use our website after being notified of this policy

You have the right to withdraw your consent at any time by contacting us at privacy@endurosports.shop.

4. How We Use Your Information

We use your personal data for the following purposes:

4.1 Order Fulfillment

Process and manage your orders
Arrange delivery and shipping
Generate invoices and transaction records
Handle returns and refunds

4.2 Customer Service

Respond to your inquiries and support requests
Provide order updates and delivery notifications
Resolve complaints and disputes

4.3 Website Operations

Maintain and improve our website functionality
Ensure security and prevent fraud
Analyze usage patterns to enhance user experience

4.4 Marketing (with consent)

Send promotional emails and offers
Personalize product recommendations
Inform you about new products and sales

4.5 Legal Compliance

Comply with tax and accounting requirements
Respond to legal requests from authorities
Enforce our terms and conditions

5. Data Storage and Retention

5.1 Storage Location

Your personal data is stored on secure servers located in India, operated by reputable hosting providers with appropriate security certifications.

5.2 Retention Period

We retain your personal data for:

Active accounts: As long as your account remains active
Transaction records: 8 years from the date of transaction (for tax and legal compliance)
Marketing data: Until you opt out or withdraw consent
Support communications: 3 years from the last interaction

After the retention period, your data will be securely deleted or anonymized.

6. Data Sharing and Disclosure

We may share your personal data with:

6.1 Service Providers

Logistics partners: For order delivery (name, address, phone number)
Payment processors: To process transactions securely
Email service providers: For transactional and marketing communications
Analytics providers: To understand website usage

6.2 Legal Requirements

We may disclose your data when required by law, court order, or government authority, or to protect our legal rights.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business transaction. You will be notified of any such transfer.

We do NOT:

Sell your personal data to third parties
Store credit/debit card numbers on our servers (RBI Tokenisation Guidelines)
Share your data with advertisers without your consent

7. Your Rights Under DPDP Act

As a Data Principal, you have the following rights:

Right to Access: Request a summary of your personal data we hold
Right to Correction: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (subject to legal requirements)
Right to Withdraw Consent: Withdraw consent for data processing at any time
Right to Grievance Redressal: File complaints about our data handling practices
Right to Nominate: Nominate another person to exercise rights on your behalf in case of death or incapacity

To exercise your rights, please contact our Data Protection Officer at privacy@endurosports.shop. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. Types of cookies we use:

Cookie Type	Purpose	Duration
Essential	Website functionality, security, cart management	Session
Performance	Analytics and website improvement	1 year
Functional	Remembering preferences and settings	1 year
Marketing	Personalized content and ads (with consent)	1 year

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

SSL/TLS encryption for data transmission
Secure server infrastructure with firewall protection
Access controls limiting who can view personal data
Regular security audits and updates
Employee training on data protection practices

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our website is not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated through:

Email notification to registered users
Prominent notice on our website
Updated "Last Updated" date

Your continued use of our website after changes indicates acceptance of the updated policy.

13. Grievance Redressal

If you have any concerns about our data handling practices or wish to file a complaint, please contact our Grievance Officer:

Grievance Officer	Saraka Sreehari
Email	grievance@endurosports.shop
Response Time	Within 30 days of receiving complaint

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as established under the DPDP Act, 2023.

14. Contact Us

For any questions or concerns regarding this Privacy Policy, please contact us:

Email: privacy@endurosports.shop
Phone: +91 88844 03789
Address: Bluemetric Systems Pvt. Ltd., No. 2621, 23rd Main, A Block, Sahakara Nagar, Bengaluru, Karnataka 560092, India