Subidha Furniture is committed to safeguarding customer personal data in strict compliance with the **Digital Personal Data Protection (DPDP) Act, 2023**, and the Information Technology Act, 2000.
1. Information We Collect
In executing retail sales, installment subscriptions, rental agreements, and deliveries, we collect:
**Identity Data**: Full name, masked Aadhaar (last four digits only), PAN, Voter ID, Driving License, customer photograph, and signature.
**Contact Data**: Physical delivery address, permanent residential address, mobile phone number, WhatsApp contact, and email address.
**Financial Records**: Payment mode, transaction reference numbers (UTR / UPI Ref), bank account details (solely for deposit refunds and commission payouts), and receipt records.
Need transaction-specific confirmation?
Please confirm invoice, EMI, refund, warranty, delivery, and compliance terms with the branch before payment.
**Technical Data**: IP address, session timestamps, and portal authentication logs.
2. Data Protection & Zero-Leakage Architecture
**Aadhaar Masking**: In compliance with UIDAI regulations and the DPDP Act, full 12-digit Aadhaar numbers are never stored in plaintext. Only masked versions showing the last 4 digits are retained.
**Access-Controlled Media Vault**: Customer KYC documents and ID uploads are stored in isolated, access-controlled media roots with authenticated token requirements.
**No Commercial Sale of Data**: Subidha Furniture never sells, rents, monetizes, or trades customer data to third-party telemarketers or external advertising networks.
**Role-Based Access Controls (RBAC)**: Internal staff access is strictly segregated. Cashiers view collection queues; delivery drivers view dispatch contacts; only authorized administrators access full KYC documentation.
3. Purpose of Data Processing
Customer data is processed exclusively for legitimate business purposes:
Execution and administration of Direct Sale, Lucky Plan EMI, Rent, and Lease contracts;
Processing payments, issuing tax invoices, and delivering official digital receipts;
Verifying premises tenancy and asset custody security for rental/lease arrangements;
Scheduling delivery, routing vehicles, and executing physical handover verification;
Fulfilling statutory taxation, GST reporting, and financial audit obligations.
4. Statutory Data Retention Limits
**Financial and Tax Records**: Tax invoices, payment receipts, credit notes, and contract accounting records are retained for a minimum of eight (8) statutory years in compliance with the Income Tax Act, 1961, and CGST Act, 2017.
**Transient Operational Data**: Unregistered lead enquiries and website session logs are purged after twelve (12) months.
5. Customer Data Rights
Under the DPDP Act, customers enjoy the right to:
Review and download a complete transcript of their personal and commercial profile;
Request correction of inaccurate or outdated contact information;
Withdraw consent for promotional communications (service notices remain mandatory);
Request data erasure upon contract completion and satisfaction of statutory retention obligations.
Legal usage note
Published policy text is for customer clarity, operational governance, and statutory compliance.
Contracts, tax invoices, receipts, and audited delivery records remain the canonical transaction source.
For contract-specific clarifications, contact the Subidha Furniture showroom administration.