Your Data, Your Rights
Privacy Policy
How we collect, use, and protect your personal information.
Last updated: 10 May 2026
ARCPLAY Private Limited ("we", "us", "ARCPLAY") operates the website arcplay.co.in and the GridHero brand. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. Data We Collect
| Data | Purpose |
|---|---|
| Email address | Account login, order confirmations, launch notifications |
| Phone number | Order updates, delivery coordination |
| Name | Shipping label, account personalisation |
| Delivery address | Order fulfilment |
| Order history | Order tracking, returns, customer support |
2. How We Use Your Data
- Processing and delivering your orders
- Sending order confirmations and shipping updates
- Managing your wishlist and account
- Notifying you about new product launches (only if you consented)
- Responding to your support queries
We do not sell your data, use it for targeted advertising, or share it with third parties for marketing purposes.
3. Third-Party Service Providers
We share limited data with trusted service providers solely to operate our platform:
- Email delivery provider — sends order confirmations and login codes
- SMS delivery provider — sends OTP codes for phone verification
- Payment gateway — processes payments securely
- Hosting provider — stores and serves our website
These providers process data only on our behalf and under contractual obligations. They do not have independent rights to use your data.
4. Data Retention
- Account data — retained while your account is active
- Order data — retained for 7 years (tax and legal compliance)
- OTP codes — deleted immediately after verification or expiry (5 minutes)
5. Your Rights
Under the DPDP Act, you have the right to:
Access
View all data we hold about you via your account page
Correction
Update your name, email, phone, address from your profile
Erasure
Request deletion of your account and personal data
Withdraw Consent
Stop receiving notifications at any time
6. Withdraw Consent or Delete Data
- Edit or delete your profile from My Account
- Email us at compliance@arcplay.co.in to request full data deletion
We will process deletion requests within 72 hours. Order records may be retained in anonymised form for legal compliance.
7. Data Security
- Encrypted connections (HTTPS) for all data in transit
- Hashed passwords and signed authentication tokens
- Access controls limiting data access to authorised personnel only
8. Children's Data
Our services are not directed at children under 18. We do not knowingly collect data from minors without verifiable parental consent.
9. Grievance Officer
For any privacy concerns or complaints:
Email: compliance@arcplay.co.in
Response time: Within 72 hours
10. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance.
ARCPLAY Private Limited · CIN: U26409UP2025PTC238489 · Ghaziabad, Uttar Pradesh, India