Privacy Policy

Photomax ("we", "us"), a business based in New Delhi, India, is the data fiduciary for personal data collected through photomax.in. This policy explains what we collect and why, in line with the Information Technology Act, 2000, the SPDI Rules, 2011 and the Digital Personal Data Protection Act, 2023.

1. Information we collect

• Account & contact details: name, email, phone number and password (stored only as a secure hash).
• Order & delivery details: shipping and billing address, order history, and any GST number you provide for invoicing.
• Payment information: payments are processed by Razorpay. We receive a payment status and a transaction reference — we do not store your full card number, UPI PIN or CVV.
• Usage data: IP address, device and browser type, pages viewed and referring URLs, collected through cookies and similar technologies.
• Communications: messages you send us through the contact form, email, chat or reviews.

2. How we use your information

• to process, fulfil and deliver your orders and issue invoices;
• to provide customer support, handle returns, refunds and warranty claims;
• to send transactional messages (order confirmation, dispatch and delivery updates);
• to detect and prevent fraud, and to keep the Site and your account secure;
• with your consent, to send offers and product news — you can opt out at any time;
• to comply with tax, accounting and other legal obligations.

3. Legal bases

We process your data to perform our contract with you (order fulfilment), to comply with legal obligations (tax records), for our legitimate interests (fraud prevention, service improvement), and on the basis of your consent (marketing, non-essential cookies).

4. Sharing your information

We share personal data only with:

• Logistics partners (e.g. courier companies) to deliver your order;
• Payment gateway (Razorpay) to process payments and refunds;
• Technology providers that host our website and database and send our transactional email, under confidentiality obligations;
• Authorities when required by law, court order or to protect our rights.

We do not sell your personal data.

5. Cookies

We use essential cookies to keep you signed in and remember your cart. With your consent we also use analytics cookies to understand how the Site is used. You can control cookies through your browser settings; disabling essential cookies may break parts of the Site.

6. Data retention

We keep order and invoice records for at least eight years to meet tax and accounting requirements. Account data is kept while your account is active and for a reasonable period afterwards. You can ask us to delete your account at any time, subject to records we must retain by law.

7. Security

We use HTTPS encryption in transit, hashed passwords, access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the authorities of any breach as required by law.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, withdraw consent, or object to certain processing. To exercise these rights, email contact@photomax.in. We may need to verify your identity before acting on a request.

9. Children

The Site is not directed at children under 18. We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules thereunder, the Grievance Officer can be reached at contact@photomax.in, Photomax, 36/12, Basement, East Patel Nagar, New Delhi, Delhi 110008. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.

11. Changes

We may update this policy. The current version is always available on this page, with the "last updated" date at the top.