GPU Mart · Policies
This Privacy Policy explains how RDP Computers Private Limited collects, uses, shares, and protects personal data through GPU Mart, and your rights under Indian data-protection law.
1. Data fiduciary
RDP Computers Private Limited operates GPU Mart and is the data fiduciary for personal data processed through the Site, within the meaning of the Digital Personal Data Protection Act, 2023 (DPDP Act). This policy also reflects our obligations under the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). Data-protection contact: privacy@rdp.in.
2. Personal data we collect
- Identity & contact: name, business email, phone, company, designation, billing/shipping address.
- Transaction: orders, quotations, invoices, GSTIN, and payment references (we do not store full card numbers).
- Technical & usage: IP address, device/browser data, and cookies (see the Cookie Policy).
- Communications: enquiries, RFQ documents, and support interactions.
3. Purposes and lawful basis
We process personal data to provide quotations and fulfil orders, manage accounts and support, process payments and issue GST invoices, comply with legal obligations, prevent fraud and secure the Site, and — with consent — send relevant business communications. Under the DPDP Act we rely on your consent and on certain legitimate uses permitted by law; for contractual dealings we process data as necessary to perform the contract.
4. Notice and consent
Where we rely on consent, we seek it through a clear notice describing the data and purposes. You may withdraw consent at any time (see your rights below); withdrawal does not affect prior lawful processing and may limit our ability to provide certain services.
5. Sharing and disclosure
We share personal data only as needed with: logistics and installation partners; payment processors; OEMs/vendors for warranty and RMA; IT, hosting, and analytics providers (data processors acting on our instructions); and professional advisers. We may disclose data where required by law or to protect rights and safety. We do not sell personal data.
6. International transfers
Where data is transferred outside India (for example to OEMs or cloud providers), we apply safeguards consistent with applicable law and transfer only as permitted under the DPDP Act and any government notifications.
7. Retention
We retain personal data only as long as necessary for the purposes above and to meet legal, tax, accounting, and warranty requirements, after which it is deleted or anonymised.
8. Security
We maintain reasonable security practices and procedures, including encryption in transit, access controls, and secure payment handling, consistent with the SPDI Rules and the DPDP Act. No method is fully secure; we work to limit, detect, and respond to risks, and will notify affected persons and the authority of a reportable personal-data breach as required by law.
9. Your rights (Data Principal rights)
Subject to applicable law you may request access to and a summary of your data, correction, completion, updating, or erasure; withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and grieve about our processing. To exercise these rights, contact privacy@rdp.in; if unsatisfied, escalate to our Grievance Officer (Contact & Grievance). You may also approach the Data Protection Board of India as provided by law.
10. Children
The Site is for business buyers and not directed at children. We do not knowingly process the personal data of children except as permitted by law.
11. Grievance Officer
For privacy grievances, contact Omprakash, GPU Mart Operations Manager at grievance@rdp.in, +91 720 794 8743. We acknowledge within 48 hours and aim to resolve within one month (30 days).
12. Changes
We may update this policy; the current version and its date are published here.