our privacy Policy
Welcome to RUPS Packaging Industry, a registered Indian MSME manufacturing firm (hereinafter referred to as “We”, “Us”, or “Our”). This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal/ business data in accordance with Indian data protection laws, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, when you interact with us in your capacity as an employee, distributor, partner, vendor, or end customer.
This Privacy Policy is applicable to all present and former users (collectively, “You” or “Your”) accessing or using our services—whether through our website, communication channels, or in-person engagements. By using our services or providing your personal data, you consent to the practices described herein.
By using our services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.
1. Scope and Applicability
This Privacy Policy applies to:
- Employees
- Visitors to our website (rupscare.com)
- End users who purchase products directly from us
- Distributors, retailers and customers who partner with us
- Users who communicate or transact with us online or offline
- Job Applicants
By accessing our website or sharing your information with us, you agree to the practices described in this policy.
2. Information Collection
Mode of information collection
- We collect your information either directly from you through offline documentation and/or through online such as Website, Emails, WhatsApp etc.
- We may also collect information when you visit any of our offices to enquire about or avail our Services or attend conferences, seminars, webinars, or other events organised by us. You agree and acknowledge that such information is collected and processed for fulfilling purposes mentioned below and Consent to Our collection thereof.
Your data may be collected via:
- Forms on our website
- Phone calls, WhatsApp or email correspondence
- Event participation (conferences, expos)
- Offline registration or order processes
- Cookies and tracking on our digital platforms
International Data Transfer:-
- Rups primarily Stores & Process personal data within India. Where data may be transferred or processed outside India for IT Services. Cloud hosting or analytics it will be conducted in compliance within India and cross border data transfer regulations.
Information we process about You includes
- Personal data comprises all the details that we collect and process directly or indirectly about you as an individual / company, for instance personal information including but not limited to Your name, email address, mobile number and postal Address.
- We may also automatically collect information about the devices you use to interact our website. The information we automatically collect may include IP address, device identifier, web browser, and browsing information collected through cookies, web beacons, and other similar technologies (collectively “Cookies and Other Tracking Technologies”) on our Sites.
Types of Information Collected
Personal Information
- Name
- Address
- Contact details (email, phone)
- Aadhaar/PAN (where required for tax or verification)
- Bank details (for distributors/partners)
Business Information (B2B)
- Company name
- GSTIN / CIN
- Authorized signatory name and ID
Device & Usage Information
- IP address, browser type, device identifiers
- Usage logs, cookies, and session data
3. Lawful Basis of Processing
We process your data under the following legal grounds:
- Consent: Where we rely on your informed, freely given agreement (e.g., for marketing). In some cases, we ask you for your Consent to process your personal data, you can withdraw your Consent at any time, which will not affect the lawfulness of the processing before your Consent is withdrawn. However, your withdrawal of Consent will not impact Processing of your personal information by Us for legitimate purpose such as Processing in compliance with applicable laws or under instruction of government authorities.
- Legitimate Interest: We process certain data for the legitimate interests of the Company in compliance with applicable laws including notice from government authorities. These legitimate interests include, for example, contacting you to provide support or sending you marketing information (subject to applicable law); detecting, preventing, and investigating illegal activities and potential security issues; and maintaining and improving the Website and applications. The company will take all reasonable efforts while relying on its legitimate interests for Processing personal data only after balancing our interests and rights against the impact of the Processing on individuals.
- Performance of a Contract: For fulfilling supply agreements or service delivery. We also process personal data based on contractual necessity, where it is necessary for the performance of a contract or pre-contractual steps at your request.
- Legal Obligations: Compliance with tax, regulatory or government requirements. In some cases, we may have a legal obligation to process your personal data, such as in response to a tax, GST department, court or regulator order. We also may need to process your personal data to protect vital interests, or to exercise, establish, or defend legal claims.
4. Use of Personal Data
Your information is used for the following purposes:
- Fulfillment of product orders and delivery
- Distributor/vendor registration and management
- Payroll and employee management (for staff)
- Invoice generation, returns processing, and refunds
- Compliance with regulatory and audit requirements
- Customer service and after-sales support
- Marketing and business communication (with consent)
- Website enhancement and service improvement
5. Data Sharing & Disclosures
Your personal data processed by Us will only be accessible by a limited list of recipients on a need-to-know basis or where required by law.
- Within our organization: Within our organization, access to your data is limited to those persons who as per company’s internal policies and procedures are authorized and require access in order to provide you with the Products and Services, and to respond to your inquiries.
- Government agencies under applicable laws and regulations: We may access, preserve, and disclose information about you to government authorities, if we believe Disclosure is in accordance with or required by, applicable law, regulation, legal process, or audits. We may also disclose information about you if we believe that your actions are grossly inconsistent with our policies, and/or it affects the rights, property and reputation of the Company or others.
- Transfer of business: If we (or our assets) are merged, amalgamated, acquired, transferred or if we go out of business, enter bankruptcy, or go through some other change of control, personal information could be one of the assets transferred to or acquired by a Third party.
- Financial Institutions (for Payment Reconciliation): We may share your personal and transactional data with authorized financial institutions such as banks, payment gateways, and payment service providers for the purposes of processing payments, verifying transactions, issuing invoices, facilitating refunds, and reconciling our financial accounts. This data may include:
- Your name and contact details
- Payment method information (e.g., UPI ID, bank account number, masked card details)
- Transaction amount and date
- Order ID or invoice reference
We do not sell or rent your personal data.
6. Children and Vulnerable Individuals
We do not knowingly collect personal data from individuals under 18 without parental/guardian consent. Special categories such as data from persons with disabilities are processed only with lawful guardian approval.
.
7. Data Retention
Your personal data will be retained only as long as:
- Necessary for the stated purpose (transaction, compliance, audit)
- Required by applicable Indian laws (e.g., 8 years for financial records)
- Consent remains valid
After this period, your data is securely deleted or anonymized.
8. Your Rights
Under Indian privacy standards, you may:
- Access your data
- Request correction or deletion
- Withdraw previously given consent
- Object to certain processing activities
- Lodge complaints via our grievance redressal mechanism
To exercise your rights, email: [email protected]
9. Data Security Measures
We follow reasonable security practices as required under Indian IT rules, including:
- SSL encryption for data transmission
- Role-based access control
- Secure cloud hosting (in India or compliant jurisdictions)
- Regular data audits and internal reviews
In the event of a data breach, we will notify affected users and authorities as required.
10. Use of Cookies
Our website uses cookies for:
- Improving navigation and experience
- Analytics and traffic analysis
- Retargeting advertisements
You may disable cookies via browser settings, although this may affect functionality.
11. Third-Party Links
We are not responsible for the privacy policies of external websites linked from our platform. Please review their privacy terms before use.
12. Grievance Redressal
In accordance with Rule 5(9) of the IT Rules, 2011, please contact our Grievance Officer for any complaints or requests:
Name: Rajeev Minhas
Email: [email protected]
Phone: +91 – 98108 41635
Address: A – 196, Sector 83, Phase II, Noida – 201305
We aim to resolve all complaints within 30 days.
13. Changes to this Policy
This policy may be updated periodically. The latest version will always be available at www.rupscare.com/privacy. Continued use of our services after updates constitutes acceptance.
14. Governing Law and Jurisdiction
This Privacy Policy is governed by the applicable laws of India, including but not limited to:
- The Information Technology Act, 2000 (particularly Section 43A and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011);
- The Digital Personal Data Protection Act, 2023, which governs the processing of personal data in India;
- The Indian Contract Act, 1872, in relation to contractual obligations with users, vendors, and partners.
All disputes or claims arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts in Noida, Uttar Pradesh, India.