Privacy Policy

Your Privacy, Our Responsibility

At Desitales-2, your personal information is treated with the same care we give to every book we dispatch — wrapped carefully, handled with respect, and never shared without your knowledge.

” This Privacy Policy describes how Desitales-2 (“we”, “us”, “our”), operating at desitales-2.com, collects, uses, stores and protects the personal information you share with us when you visit our website, create an account, place an order, or interact with our services in any way.

By using our website or services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our platform. This policy is governed by the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India. “

Our Privacy Promise

Desitales-2 is India’s premium online bookstore, headquartered at Prahlad Street, Ansari Road, Ansari Nagar (W), New Delhi — 110029. We are committed to being fully transparent about what data we collect, why we collect it, and how it is used.

” Our simple promise: We collect only the data we genuinely need to serve you well. We never sell your personal information to third parties. We never share your reading habits or preferences without your explicit consent. “

This policy applies to all users of desitales-2.com, our mobile applications, and any other digital touchpoint operated by Desitales-2, including membership services, newsletters, and order management systems.

Information We Collect

We collect information in three ways — information you give us directly, information collected automatically, and information from trusted third parties.

Type of Data	What It Includes	How Collected
Identity Data	Full name, username, date of birth	Account registration
Contact Data	Email address, phone number, delivery address, PIN code	Order placement, account creation
Financial Data	Payment method type, transaction ID (we do not store card numbers)	Checkout via secure payment gateway
Order Data	Books purchased, order history, wishlist, returns	Your interactions with the store
Profile Data	Reading preferences, genre interests, language settings, membership plan	Account preferences & membership sign-up
Usage Data	Pages visited, search queries, clicks, time on site, device type	Automatically via cookies & analytics
Communication Data	Emails, WhatsApp messages, contact form submissions, reviews	When you contact us directly
Marketing Data	Newsletter subscription, promotional preferences, opt-in/out status	Newsletter sign-up, checkout opt-in

“We never collect: Aadhaar numbers, PAN card details, bank account credentials, passwords in plain text, or any sensitive personal data beyond what is necessary for order fulfilment and account management.“

How We Use Your Data

We use the information we collect only for legitimate, clearly defined purposes. We never use your data for purposes beyond what is listed below without seeking fresh consent from you.

• Order Fulfilment — To process, pack, dispatch and deliver your book orders to the correct address, and to manage returns, refunds and exchanges.

• Account Management — To create and maintain your Desitales-2 account, manage your membership plan, and provide access to order history and wishlist.

• Payment Processing — To securely process payments via our third-party payment gateways (Razorpay, PayU, etc.) and verify transactions. We never store card details on our servers.

• Personalised Curation — To provide book recommendations, curated reading lists, and personalised content based on your reading profile and purchase history — only if you have opted into this feature.

• Customer Support — To respond to your queries, resolve complaints, and improve our service quality based on your feedback.

• Marketing & Newsletters — To send you book recommendations, sale alerts, festival offers, and editorial newsletters — but only if you have explicitly opted in. You may unsubscribe at any time.

• Legal Compliance — To comply with applicable Indian laws, court orders, and regulatory requirements under the IT Act 2000 and DPDP Act 2023.

• Analytics & Improvement — To understand how our website is used, identify technical issues, and improve the browsing and purchasing experience for all users.

Sharing Your Data

• We do not sell, rent, or trade your personal information with any third party for commercial purposes — ever. We share your data only in the following limited and necessary circumstances:

• Delivery Partners — We share your name, phone number, and delivery address with logistics partners (India Post, Delhivery, Bluedart, etc.) solely to fulfil your order.

• Payment Gateways — Secure payment processing is handled by PCI-DSS compliant third-party gateways. We share only the transaction information they require to complete payment.

• Technology Service Providers — We use trusted vendors for hosting, email delivery, SMS alerts, and analytics. These vendors process data on our behalf and are contractually bound to protect it.

• Legal Requirements — We may disclose your information to law enforcement or government authorities if required by a valid court order or legal obligation under Indian law.

• Business Transfers — In the unlikely event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction. You will be notified before this occurs.

“We never share your reading preferences, book purchase history, or personal profile with advertisers, data brokers, or marketing agencies.“

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and understand how our website is used.

Cookie Type	Purpose	Can Be Disabled?
Essential Cookies	Login sessions, shopping cart, checkout security	No — required for the site to function
Preference Cookies	Language settings, reading profile, display preferences	Yes — via browser settings
Analytics Cookies	Google Analytics — page views, traffic sources, user behaviour	Yes — via cookie consent banner
Marketing Cookies	Retargeting ads, personalised promotions on partner platforms	Yes — via cookie consent banner

You can manage or disable non-essential cookies via the cookie consent banner displayed on your first visit, or at any time through your browser settings. Disabling cookies may affect some features of our website.

Data Security

Protecting your personal data is a technical and organisational priority at Desitales-2. We implement the following safeguards:

• All data transmitted between your browser and our servers is encrypted using — SSL/TLS (HTTPS) — protocols.

• Passwords are stored using — one-way cryptographic hashing — they cannot be read or recovered by anyone, including our own team.

• Payment card data is processed exclusively by — PCI-DSS Level 1 certified — payment gateways. We never see or store your full card number.

• Access to personal data is restricted to authorised Desitales-2 personnel on a strict need-to-know basis.

• Our systems are regularly audited for vulnerabilities and updated with the latest security patches.

• In the event of a data breach that affects your personal information, we will notify you and the relevant authorities within — 72 hours — as required by law.

Please note: No method of transmission over the internet is 100% secure. While we use commercially reasonable means to protect your data, we cannot guarantee absolute security. We encourage you to use a strong, unique password for your Desitales-2 account.

Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy, or as required by applicable Indian law.

Data Category	Retention Period	Reason
Account & Profile Data	Duration of account + 2 years post-deletion	Legal & audit obligations
Order & Transaction Data	7 years from date of transaction	GST and tax compliance (India)
Communication Records	3 years from date of communication	Dispute resolution
Analytics & Usage Data	26 months (Google Analytics default)	Performance analysis
Marketing Preferences	Until you unsubscribe or request deletion	Consent-based marketing

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be linked back to you.

Your Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of all personal data we hold about you at any time.

• Right to Correction: Ask us to correct any inaccurate or incomplete personal data.

• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.

• Right to Object: Object to processing of your data for marketing or profiling purposes.

• Right to Portability: Receive your data in a structured, machine-readable format.

• Right to Withdraw Consent: Withdraw consent for marketing communications or data processing at any time.

To exercise any of these rights, please email us at info@desitales-2.com with the subject line “Privacy Rights Request”. We will respond within 30 days of receiving your request, in accordance with the DPDP Act 2023.

Children’s Privacy

Desitales-2 is a general-audience platform and does not knowingly collect personal data from children under the age of 18 years without verifiable parental consent.

Our children’s books category is intended for parents and guardians purchasing on behalf of minors. If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us immediately at info@desitales-2.com. We will promptly delete such information from our records.

“For schools and libraries: If you are placing bulk orders on behalf of an educational institution involving student data, please contact us directly to discuss our institutional data processing agreement.”

Third-Party Links

Our website may contain links to third-party websites, including publisher pages, author websites, payment gateways, and social media platforms. These links are provided for your convenience.

Desitales-2 is not responsible for the privacy practices or content of any third-party website. We encourage you to read the privacy policy of every website you visit. Our Privacy Policy applies solely to information collected on desitales-2.com and our affiliated digital properties.

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page.

• Display a prominent notice on our homepage for 30 days.

• Send an email notification to all registered account holders, where the change materially affects how we use your data.

Your continued use of Desitales-2 after any policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may deactivate your account by contacting us at info@desitales-2.com.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, Desitales-2 has appointed a Grievance Officer to address any concerns regarding the processing of your personal data.

Detail	Information
Name	Data Protection Officer, Desitales-2
Address	Prahlad Street, Ansari Road, Ansari Nagar (W), New Delhi — 110029
Email	info@desitales-2.com
Phone	011 – 2327 3387
Response Time	Within 30 days of receiving your grievance
Working Hours	Monday – Saturday · 9:00 AM – 7:00 PM IST