Privacy Policy
Shri Balaji Overseas Trading Company ("Pala-G India", "we") explains how we handle personal information when you use palagindia.com, place orders, or contact us. This policy addresses the Digital Personal Data Protection Act, 2023 ("DPDP Act") where it applies, together with other applicable Indian law. It is not legal advice.
This document is an electronic record under the Information Technology Act, 2000. Use of the Website is also governed by our Terms & conditions.
1. Data fiduciary / who we are
For personal data processed in connection with this Website and our retail or enquiry services, the data fiduciary is Shri Balaji Overseas Trading Company, K-1, Ashok Vihar Phase 3, Block D, Sawan Park, New Delhi 110052, India.
Email: Ourpalag@gmail.com
Phone / WhatsApp: +91 79048 72241
2. Personal data we may collect
- Identity & contact: name, phone, email, delivery and billing addresses.
- Transaction: order details, payment status (payment credentials are handled by payment partners).
- Communications: messages you send via WhatsApp, email, forms, or RFQ flows.
- Technical: IP address, device/browser type, cookies or similar identifiers, approximate location from IP, and usage logs — as typical for hosting and security.
3. Purposes and legal bases
We process personal data for purposes including:
- Processing and delivering orders, and providing customer support.
- Communicating transactional updates (order, shipment, service).
- Complying with law (e.g. tax, GST invoicing, regulatory requests).
- Improving the Website, analytics, and (where permitted) marketing and retargeting.
- Preventing fraud, abuse, and security incidents.
Depending on context, we rely on your consent (where required), performance of a contract, compliance with legal obligation, or legitimate interests consistent with applicable law.
4. Marketing, SMS, and TRAI
We send promotional communications only in line with applicable law, including TRAI guidelines for commercial communications. You may opt out of promotional channels where the law provides an opt-out; transactional and service-related messages may continue where permitted. Details are coordinated with our Terms & conditions.
5. Cookies and similar technologies
We and our partners use cookies, pixels and similar technologies for essential site function, analytics and advertising — Google Analytics 4 and Google Ads (including Google Signals), the Meta (Facebook) Pixel, and Microsoft Clarity (session recordings and heatmaps, with sensitive fields masked). Analytics and advertising cookies are set only if you click "Accept All" on our cookie banner; "Essential Only" keeps them off. Before you choose, Google's tag may send limited cookieless signals (no cookies or advertising identifiers) that Google uses to model aggregate measurement. You can change or withdraw your choice at any time via "Cookie Settings" in the website footer. Details are in our Cookie Policy.
6. Sharing and processors
We share personal data with service providers (payment gateways, logistics, hosting, email/SMS/WhatsApp tooling, analytics) strictly for the purposes above. We do not sell your personal data. We may disclose information if required by law, court order, or to protect rights, safety, and security. Payment data is handled by Razorpay under PCI-DSS; we never see or store full card numbers, CVV, or UPI PINs.
Our checkout and delivery partner Shiprocket (Fastrr checkout; Bigfoot Retail Solutions Pvt Ltd, India) processes your contact, address and order details to complete checkout and delivery, and may send order events (for example, a completed purchase) to Meta and Google for advertising measurement. With your consent, limited event data may also be shared with Meta through its Conversions API and with Google through its measurement tools; where identifiers such as email or phone are shared for this purpose, they are hashed.
7. Cross-border transfers
Some tools (e.g. global cloud or ad platforms) may process data outside India. Where the DPDP Act or other law requires safeguards for transfers, we rely on permitted mechanisms as applicable.
8. Retention
We retain data only as long as needed for the purposes above, including statutory retention for tax and commercial records, then delete or anonymise where feasible.
9. Security
We implement reasonable technical and organisational measures suited to our operations. No method of transmission over the internet is completely secure.
10. Your rights
Under the DPDP Act and other applicable law, you may have rights to access, correction, erasure, grievance redressal, and nomination. To exercise rights or raise concerns, contact us at the email above. We may verify your identity before responding. You may also use the grievance mechanism described by law as we publish updates to this policy.
Where we rely on your consent, you may withdraw it at any time — for cookies, via "Cookie Settings" in the website footer; otherwise by emailing us. Withdrawal does not affect processing carried out before it. If your grievance is not resolved, you may complain to the Data Protection Board of India in accordance with the DPDP Act.
11. Children
The Website is not directed at persons under 18. We do not knowingly collect personal data from children without lawful parental consent. If you believe we have, contact us and we will take appropriate steps.
12. Changes
We may update this policy; the "Last updated" date on this page will change. Material changes may require additional notice or consent where the law requires.
Last updated: September 2026