Privacy Policy
Last updated: November 2026
CompStore® (compstore.in) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile application, and related services.
What data we gather and how
Information you provide
- Account information — Name, email address, phone number when you create an account
- Order information — Shipping address, billing details, payment information when you place an order
- Contact submissions — Name, email, phone number, and message when you reach out to us
- WhatsApp — Your WhatsApp number and the messages you send us, when you place or ask about an order on WhatsApp
Information collected automatically
- Sign-in and device records — IP address, browser type, operating system, device type, and sign-in times. We use these to keep accounts secure and as proof of who placed an order
- Usage data — Pages visited, time spent on pages, referring URLs
- Cookies — Session cookies for authentication and preferences
Purpose of data collection
- Process and fulfil your orders
- Send order status updates via email and SMS
- Manage your account and provide customer support
- Send OTP codes for authentication
- Respond to your enquiries via the contact form
- Improve our website, products, and services
- Comply with legal obligations
We do not sell your personal information
We may share your information with:
- Payment processors — To process your transactions securely
- Courier partners — Name, phone number, and address for order delivery
- Email/SMS providers — To send transactional notifications
- Law enforcement — When required by law or to protect our rights
How we protect your data
- Encrypted data transmission (HTTPS/TLS)
- Secure password hashing
- Session-based authentication with automatic expiry
- Role-based access controls for staff
- CSRF, XSS, and rate-limiting protections
While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. Our servers and database backups are located in India. If a data breach affects you, we will inform you and the authorities as required by law.
Essential cookies only — no tracking
- Authentication — To keep you logged in during your session
- Security — CSRF protection tokens
We do not use third-party advertising or tracking cookies.
What we hold, why, and for how long
| Data | Why we keep it | How long |
|---|---|---|
| Account details | To run your account and support you | While your account is active |
| Orders, quotations, invoices and approvals | Tax and accounting law, warranty and disputes | Up to 8 years, even after your account is closed |
| IP address and device records at sign-in and when you place an order | Security, and proof of who placed an order | Up to 3 years in full. After that we keep only a reduced form that no longer shows the full IP address, for as long as the related order record is kept |
| WhatsApp number and ordering messages | To verify you and process orders placed on WhatsApp | Kept with the related order records. Short-lived technical message identifiers are removed within days |
| Contact form messages | To reply to you | As long as needed to deal with your request |
We may keep data for longer where the law requires it or where it is needed to deal with a complaint, dispute or legal claim.
Control over your personal data
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data by contacting us. We will act on your request within a reasonable time, but we must keep what the law requires, such as order and tax records and security evidence
- Withdraw consent for marketing communications at any time
Data Retention: See the table above. We keep personal information only for the periods shown, unless the law requires longer.
Children's Privacy: Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
Changes: We may update this Privacy Policy from time to time. Continued use of our services after changes constitutes acceptance of the updated policy.
Additional data collected for authorised business partners
If you register as an authorised dealer partner, we collect and process additional business information required to operate the partner programme:
Business information collected
- Company details — Business name, GST type, GSTIN, PAN, and registered business address
- Contact person — Name, email, and phone number of the authorised representative
- Quotation and transaction data — Products quoted, quantities, pricing, payment terms, and order history
- Performance data — Quotation activity, conversion metrics, and incentive programme progress
How we use partner data
- Verify eligibility and process partner registration approval
- Provide access to the partner portal, wholesale catalogue, and custom pricing
- Process and fulfil quotations and orders
- Calculate and administer incentive rewards
- Generate GST-compliant invoices and maintain tax records as required by Indian law
- Send transactional notifications (quotation status, approvals, rejections)
Partner business data — including GSTIN, PAN, and transaction records — is retained for as long as required by applicable Indian tax and commercial law, even after a partner account is closed.
Grievance Officer: Ujjwal Samdaria. We acknowledge complaints within 48 hours and resolve them within one month.