गोपनीयता नीति

This Privacy Policy explains how THE RIGHT ENERGY (“we”, “us”, “our”), based in Indore, Madhya Pradesh, India, collects, uses, shares and protects your personal data when you visit therightenergy.net, place an order, book a consultation or contact us.

We act as the data fiduciary for this personal data under the Digital Personal Data Protection Act, 2023, and follow the Information Technology Act, 2000 and the rules made under it. By using the website or placing an order, you consent to the processing described here.

2.1 When you place an order

• Your name and mobile number.
• Your email address, if you choose to give it.
• Your delivery address, city, state and PIN code.
• The items you ordered, the amount, the payment method and the order reference.

2.2 When you pay online

Online payments are processed by our payment gateway (named in section 5, “Who we share it with”). Your card, UPI, netbanking or wallet details are entered in the gateway's secure payment window and go directly to the gateway. We never see or store them. We receive only the payment status, a payment reference and the amount.

2.3 When you contact us or book a consultation

If you message us on WhatsApp, email us, call us or book a consultation, we receive whatever you choose to share: your name, number, email address and the content of your message, including anything personal you tell our consultant.

2.4 Automatically

Like every website, our hosting provider records basic technical data when you load a page: your IP address, browser type, the page requested and the time. We use this only for security and to keep the site running.

When you first visit, we ask whether we may use measurement cookies. Until you accept, none are set and nothing is sent to Google or Meta. You can change your answer at any time with the “Cookie choices” link at the bottom of every page. The site works fully if you decline.

If you accept, two services are used:

• Google Analytics, to understand in aggregate how the site is used: which pages are visited, roughly where visitors are, and what kind of device they use.
• The Meta Pixel and Meta's Conversions API, to measure whether our advertising on Facebook and Instagram leads to visits and orders. They receive the pages and products you view, items added to the cart, the start of checkout and completed orders with their value, together with your IP address, browser details and Meta's own browser cookie. For a completed order we also send your email address and mobile number in hashed (scrambled, one-way) form, so that Meta can match the order to an advertisement without us handing over the details themselves.

Google and Meta process this data on their own servers under their own privacy policies. We do not sell your personal data.

The site keeps a few things in your own browser so that it works: the contents of your cart, your choice of language, your cookie choice and, if you log in, your session. These stay on your device, are not sent to us until you place an order, and can be removed at any time by clearing your browser's site data.

When you pay online, the payment gateway's window may set its own cookies to prevent fraud and complete the payment. Those are governed by the gateway's own privacy policy.

• To process, pack, dispatch and deliver your order.
• To take payment, or to arrange collection for Cash on Delivery.
• To send you order, dispatch and delivery updates by WhatsApp, SMS, phone or email.
• To arrange and conduct a consultation you have booked.
• To answer your questions and handle returns, refunds and complaints.
• To issue invoices and keep the accounting and tax records the law requires.
• To detect and prevent fraud and misuse of the website.

We do not sell your personal data. We do not use it for advertising, and we do not send marketing messages unless you have asked us to.

We share personal data only with those who need it to complete your order or to keep the website running:

• Razorpay Software Private Limited, our payment gateway: your name, contact number, email address and order amount, to process your payment.
• Blue Dart Express Limited, our delivery partner: your name, delivery address and mobile number, to deliver your order and, for Cash on Delivery, to collect payment.
• Our website hosting and infrastructure provider, which processes technical data on our behalf.
• WhatsApp (Meta Platforms), only when you choose to message us there.
• Our authorised consultant, for a consultation you have booked.
• Our accountants and professional advisers, under a duty of confidentiality.
• Government, tax or law-enforcement authorities, where the law requires it.

Some of these providers may process data on servers outside India. Where that happens, it is done in accordance with applicable Indian law.

• Order, invoice and payment records: for as long as tax and accounting laws require, which is currently at least six (6) years after the end of the financial year of the order.
• Enquiries and consultation correspondence: up to two (2) years after the last contact, unless you ask us to delete them sooner.
• Technical logs: for a short period needed for security and troubleshooting.

When the period ends, we delete the data or remove what identifies you from it.

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Ask what personal data we hold about you and how it has been used.
• Ask us to correct, complete or update it.
• Ask us to erase it, where we are not required by law to keep it.
• Withdraw your consent to further processing.
• Nominate another person to exercise these rights if you die or become incapacitated.
• Complain to us, and then to the Data Protection Board of India if you are not satisfied.

To exercise any of these rights, write to contact@therightenergy.net from the email address or mobile number used for your order. We will respond within a reasonable time. We may need to confirm your identity first, and we cannot delete records that the law requires us to keep.

This website is intended for adults. We do not knowingly collect personal data from anyone under eighteen (18). If you believe a minor has given us personal data, please tell us and we will delete it.

The website is served over an encrypted (HTTPS) connection. Payment details are handled entirely by our payment gateway, which is PCI DSS compliant. Access to order information is limited to those who need it to fulfil your order. No method of transmission or storage is perfectly secure, but if we learn of a breach affecting your personal data we will inform you and the authorities as the law requires.

Our website links to Blue Dart's tracking page, to WhatsApp and to our social media profiles. Those services have their own privacy policies, and we are not responsible for how they handle your data.

We may update this policy as our practices or the law change. The date at the top of the page shows when it was last revised. Material changes will be made clear on the website.

If you have a complaint about an order, a consultation, or the way we handle your personal data, write to our Grievance Officer at contact@therightenergy.net with the subject line “Grievance”, your name, your contact number and your order reference, if any.

We acknowledge every grievance within forty-eight (48) hours of receiving it and aim to resolve it within one (1) month, as the Consumer Protection (E-Commerce) Rules, 2020 require.