Privacy Policy

1Introduction & Legal Entity

This Privacy Policy governs the collection, processing, storage, and transfer of personal information by SONI COMPUTER (operating legally as Soni Computer & IT Solutions), located at Bhagwati Rd, Shikarpur, Narkatiaganj, District West Champaran, Bihar - 845455, India ("we", "our", "us", or "Data Fiduciary").

This policy applies to all visitors, buyers, enterprise clients, and institutional customers accessing our website (https://sonicomputer.com), mobile web applications, and in-store walk-in services. We strictly adhere to:

• The Digital Personal Data Protection Act, 2023 (DPDP Act).
• The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
• The Consumer Protection (E-Commerce) Rules, 2020 framed under the Consumer Protection Act, 2019.

2Categories of Personal Data We Collect

We collect only the minimum personal data strictly necessary to fulfill your orders, generate statutory tax invoices, provide OEM hardware warranty support, and service repair requests:

3Purposes and Legal Grounds for Processing

Your personal data is processed under legitimate statutory grounds:

• Contractual Performance: Processing checkout requests, dispatching hardware via verified couriers, managing store pickup, and sending real-time SMS/WhatsApp order status notifications.
• Legal & Tax Compliance: Issuing compliant GST tax invoices, preserving accounting audit trails under the Central Goods and Services Tax (CGST) Act, 2017, and complying with consumer protection mandates.
• Hardware Warranty & Service: Registering your device serial number with authorized brand principals (HP, Dell, Lenovo, Canon, Epson, CP PLUS) for 1-year to 3-year OEM on-site warranty claims.
• Security & Anti-Fraud: Preventing duplicate accounts, detecting unauthorized access, and validating Cash on Delivery (COD) phone authentications.

4Third-Party Disclosures & Data Sharing

We do not monetize, rent, or sell your personal data. We disclose information only to strictly audited service providers under non-disclosure obligations:

• Logistics Partners: National and regional carriers (e.g., Delhivery, Blue Dart, DTDC, India Post, and local Narkatiaganj delivery riders) receive only the recipient name, delivery address, and contact number.
• Payment Aggregators: RBI-licensed payment gateways for transaction authentication and refund settlements.
• Brand Warranty Networks: Authorized manufacturer service centers when required to activate OEM hardware warranties or dispatch technicians for on-site laptop repair.
• Statutory Authorities: Government departments, tax investigators, or law enforcement bodies only upon receipt of lawful summons or orders under Indian law.

5Your Statutory Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have enforceable statutory rights regarding your personal information:

6Data Retention & Security Measures

In adherence to the IT Rules, 2011 (Reasonable Security Practices), we maintain industry-standard administrative, technical, and physical safeguards:

• Encryption: All web traffic is strictly encrypted using TLS/HTTPS cryptographic protocols.
• Retention Standards: Transaction, GST tax invoice, and accounting records are maintained for a mandatory minimum period of 8 financial years as required by Indian taxation and auditing laws. Marketing communications data is retained only until consent is revoked.
• Access Controls: Store staff and technicians can only access customer records necessary for packaging, testing, or repairing assigned equipment.

7Cookies & Analytics Notice

We use session cookies and local storage to preserve your shopping cart state, maintain authentication tokens, and remember your location preferences. We also employ Google Analytics (Measurement ID: G-R7D5N6KK25) to gather aggregated, anonymized metrics (such as popular categories and page load performance). You can manage or disable cookies via your browser settings at any time.

8Children's Privacy (Section 9 DPDP Act)

Our online commerce platform is designed for individuals legally capable of entering into binding contracts under the Indian Contract Act, 1872 (18 years of age or older). We do not knowingly collect personal data of minors without verifiable parental or guardian consent. If you believe a minor has submitted personal details without parental permission, please contact our Grievance Officer immediately for prompt data purging.