Privacy Policy Effective Date: December 1, 2025 Nirmal Solutions ("we," "our," or "us") operates the website nirmal.solutions and provides digital products. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website and purchase our products. We are committed to protecting the privacy of our Indian customers and operating in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) when it comes into effect. 1. Information We Collect We may collect the following types of information from you: A. Personal Data (DPDP Act definition) This includes information that can be used to identify you directly or indirectly: Identity Data: Name, email address, phone number, and mailing address (for billing/invoicing purposes). Transaction Data: Details about products you have purchased from us and payment method details (though payment processing is handled securely by third-party gateways; we do not store full credit card information). Account Data: Username and password (encrypted). B. Usage and Technical Data This information is collected automatically when you use our website: Log Data: Your Internet Protocol (IP) address, browser type, operating system, referring/exit pages, and timestamps. Tracking Data: Information about how you use our website, such as pages visited and links clicked, collected via Cookies and similar technologies. (See Section 5). 2. How We Use Your Information We use the collected information for various purposes, which are considered "legitimate uses" under the DPDP Act: To Provide Products: To process your purchases, deliver the digital products you have bought, and manage your account. To Communicate: To send you invoices, confirmations, important updates, and respond to your inquiries. To Improve Our Service: To analyze usage data, troubleshoot, and improve the functionality and offerings of nirmal.solutions. For Marketing (with Consent): To send you promotional emails about new products, special offers, or other information we think you may find interesting, only if you have explicitly opted-in. For Legal Compliance: To comply with legal obligations, prevent fraudulent transactions, and enforce our terms and conditions. 3. Data Retention We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, typically for the duration of your account and a reasonable period thereafter to meet legal or accounting requirements. 4. Disclosure of Your Information We do not sell, trade, or otherwise transfer your Personal Data to outside parties, except in the following limited circumstances: Service Providers: We may share your data with trusted third-party vendors who perform services on our behalf, such as payment gateways (for processing transactions), hosting providers, and email service providers. These parties are obligated to keep your information confidential and secure. Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, or ensure the safety of our users or the public. Business Transfers: In the event of a merger, sale, or asset transfer, your Personal Data may be transferred to the new owner. 5. Cookies and Tracking Technology What are Cookies? Cookies are small files stored on your device that help us remember your preferences and understand how you use our website. Use of Cookies: We use cookies to: Remember items in your shopping cart. Understand and save your preferences for future visits. Compile aggregate data about site traffic and site interaction. Your Choice: You can choose to have your device warn you each time a cookie is being sent, or you can choose to turn off all cookies through your browser settings. If you turn cookies off, some features will be disabled, and some of our services may not function properly. 6. Your Data Principal Rights (Under DPDP Act) As a resident of India, you are a "Data Principal" and have the following rights regarding your Personal Data: Right to Access: You have the right to request access to the Personal Data we hold about you. Right to Correction/Grievance: You have the right to request the correction or completion of inaccurate or incomplete Personal Data. Right to Erasure (Withdrawal of Consent): You have the right to withdraw your consent to the processing of your Personal Data, which may necessitate the deletion of your data, provided there is no legal necessity for us to retain it. Right to Grievance Redressal: You have the right to seek redressal for any grievance relating to the exercise of your rights. (See Section 8). To exercise any of these rights, please contact us using the details provided below. 7. Security of Your Data We implement a variety of security measures to maintain the safety of your Personal Data. This includes using Secure Socket Layer (SSL) technology to encrypt sensitive information like payment details during transmission. Despite our efforts, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. 8. Grievance Redressal / Contact Us If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact our Grievance Officer: Email: support@nirmal.solutions Address: [40/585, Khatu path, Salisbury park, Pune, 411037, Maharashtra, India] We aim to respond to all legitimate requests within 30 days of receipt. 9. Changes to This Privacy Policy We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.