LETHAL BLACK

Privacy Policy

A policy of Real Ascend Private Limited (operating "Lethal Black")

Real Ascend Private Limited (GSTIN: 32AAMCR5276Q1ZL), registered office at Old Door No. X/40B, (New No. XI/686), Pottakkattu Buildings, Seaport Airport Road, HMT Junction, Kalamassery, Cochin - 683503, Kerala, India, operating the "Lethal Black" brand and the website www.lethalblack.com (the "Website"), is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, and the rights available to you under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law. This Privacy Policy is incorporated into, and forms part of, our Terms & Conditions.

1. What Personal Data We Collect

We collect personal data that you provide directly, data generated through your use of the Website, and data needed to process and protect your orders:

•       Identity & contact data — name, email address, phone number, delivery and billing address.

•       Order & transaction data — products purchased, order value, payment method, payment/transaction status, invoice details, order history, and Cash-on-Delivery advance payment records.

•       Payment data — processed by our payment gateway partner(s); we do not store full card numbers or bank credentials on our own systems.

•       Warranty & support data — product serial numbers, proof of purchase, photographs/videos submitted for return, refund, or warranty claims (see our Return and Warranty Policies), and correspondence with our support team.

•       Account data — login credentials (stored in encrypted/hashed form via our platform provider), account preferences, and saved addresses, where you create an account.

•       Technical & usage data — IP address, device and browser type, pages viewed, referring pages, and interactions on the Website, collected via cookies and similar technologies (see Section 6).

•       Fraud-prevention data — order patterns, cancellation/refusal history, and verification records used to apply our Fair Usage & Anti-Fraud Policy (including the Cash-on-Delivery advance rule and one-strike restriction).

•       Marketing data — your preferences and interactions where you opt in to receive marketing communications, and data collected through advertising and analytics tools described in Section 6.

2. How We Use Your Personal Data

We use personal data only for the following purposes:

•       To process, verify, dispatch, and deliver your orders, including Cash-on-Delivery advance verification per our Cancellation, Return & Refund Policy and Fair Usage & Anti-Fraud Policy.

•       To process cancellations, returns, refunds, store credit, and warranty claims per our published policies.

•       To communicate with you about your order, account, or support requests, including via email, SMS, and WhatsApp.

•       To detect, investigate, and prevent fraud, abuse, and violations of our Terms & Conditions and Fair Usage & Anti-Fraud Policy — including identifying repeat cancellation/refusal patterns across orders.

•       To comply with legal, tax, and regulatory obligations, including GST invoicing and statutory record-keeping.

•       To improve the Website, our products, and customer experience, including through aggregated and anonymised analytics.

•       To send you marketing communications, only where you have opted in, and always with an option to unsubscribe.

3. Legal Basis for Processing

Under the DPDP Act, we process your personal data primarily on the basis of your consent (given when you place an order, create an account, or interact with the Website), and, where applicable, for the performance of a contract with you, compliance with a legal obligation (such as GST record-keeping), or our legitimate interest in preventing fraud and protecting our business, customers, and platform.

4. Who We Share Your Data With

We do not sell your personal data. We share personal data only with the following categories of recipients, solely for the purposes described in Section 2:

•       Payment gateway providers — to process online payments and COD advance payments securely.

•       Courier and logistics partners — to deliver orders, arrange return/warranty pickups, and provide tracking.

•       Our e-commerce platform provider — which hosts the Website and processes orders, accounts, and related data on our behalf.

•       Analytics and advertising partners — to understand Website usage and, where you have not opted out, to show relevant advertising (see Section 6).

•       Professional advisors and authorities — including legal, tax, and regulatory authorities where required by law, or law enforcement in cases of suspected fraud (see our Fair Usage & Anti-Fraud Policy).

Where any of these recipients are located outside India, we take reasonable steps to ensure your data continues to receive an appropriate level of protection, consistent with the DPDP Act.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy: for order and transaction data, this includes the period required by applicable tax and consumer protection law (generally up to 8 years for GST-related records); for warranty-related data, for the duration of the applicable warranty period plus a reasonable period thereafter; for fraud-prevention records, for as long as necessary to enforce our Fair Usage & Anti-Fraud Policy. Where you delete your account, we retain only what is legally required and delete or anonymise the rest.

6. Cookies & Tracking Technologies

The Website uses cookies and similar technologies to operate core functionality (such as your cart and login session), remember preferences, measure Website performance, and, where enabled, support analytics and advertising. You can control cookies through your browser settings; disabling non-essential cookies may affect some Website functionality. Where required by law, we will request your consent before setting non-essential cookies.

7. Data Security

We implement reasonable technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction, including encrypted payment processing via our payment gateway partners and access controls on internal systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; you also play a role in protecting your account by keeping your login credentials confidential.

8. Your Rights

Under the DPDP Act, subject to applicable exceptions, you have the right to:

•       Access the personal data we hold about you.

•       Correct inaccurate or incomplete personal data.

•       Request erasure of your personal data, where it is no longer necessary for the purposes it was collected, subject to our legal and record-keeping obligations.

•       Withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing carried out before withdrawal.

•       Nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

•       Register a grievance regarding our handling of your personal data (see Section 10).

To exercise any of these rights, contact us at Support@lethalblack.com. We will respond within a reasonable time and in accordance with the DPDP Act. We may need to verify your identity before actioning a request.

9. Children's Data

The Website is intended for use by individuals aged 18 and above, or by minors under the supervision of a parent or legal guardian who completes the purchase (see our Terms & Conditions, Section 2). We do not knowingly collect personal data directly from children in a manner inconsistent with the DPDP Act. If you believe a child has provided us personal data without appropriate consent, please contact us at the details in Section 10 and we will take appropriate action.

10. Grievance Officer & Contact

In accordance with the Consumer Protection (E-Commerce) Rules, 2020, the Information Technology Act, 2000, and the DPDP Act, our Grievance Officer for privacy-related concerns is:

•       Name: Saeem Samad

•       Email: Support@lethalblack.com

•       Phone: +91 827 84 84 284 (Monday–Saturday)

•       Registered Office: Old Door No. X/40B, (New No. XI/686), Pottakkattu Buildings, Seaport Airport Road, HMT Junction, Kalamassery, Cochin - 683503, Kerala, India

You may also lodge a complaint with the Data Protection Board of India, once constituted and operative under the DPDP Act, without prejudice to any other right or remedy available to you.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Effective Date” at the top of this document indicates when it was last revised. Material changes will be notified where feasible; continued use of the Website after changes are posted constitutes acceptance of the revised Policy.

12. Governing Law

This Privacy Policy is governed by the laws of India. Subject to your statutory rights, any disputes arising from this Policy are subject to the exclusive jurisdiction of the courts at Kochi, Ernakulam, Kerala, consistent with our Terms & Conditions.

13. Related Policies

This Privacy Policy should be read together with our Terms & Conditions, Fair Usage & Anti-Fraud Policy (which describes how order and cancellation data is used specifically for fraud prevention), Cancellation, Return & Refund Policy, and Warranty Policy (which describe what data is required to process a claim).