Policies

Privacy policy

Last updated: 8 October 2026

At Autopartwala, we value your privacy. This notice explains what personal data we collect when you visit our website, buy from us or contact us, why we use it, who we share it with, and your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other Indian law.

1. Who is responsible for your data

Anay Autoparts Retail Private Limited, which runs Autopartwala, decides how your personal data is used: we are the "Data Fiduciary" under the DPDP Act. Our address is Shop No. 7, 3rd Floor, Building No. 1139, Street No. 10, Naiwala, Karol Bagh, New Delhi - 110005, India. Contact details are at the end of this notice.

2. What we collect

Account: your name, email address, phone number and password (stored only in scrambled, hashed form). An account is needed to place an order.
Addresses: delivery and billing addresses, with a phone number for the courier and, if you add one, a company name.
Orders: what you buy, prices, how you paid (online or cash on delivery), delivery and tracking updates, GST invoices, and cancellation or return requests with the reasons, notes and, for cash on delivery refunds, the UPI ID you give us.
Your bikes: the bike you select to filter parts, and bikes you save in My garage.
Messages: what you tell us when you call, email or message us.
Technical data: your IP address, browser and device details, which our servers receive when you visit, and the cookies described below.

We don't collect card numbers, UPI PINs or bank passwords: you enter them with Razorpay, our payment gateway, and we only receive the payment status and reference.

3. Why we use it, and on what basis

We use your data for the purposes below. Most of it you give us to buy from us, which the DPDP Act treats as a legitimate use for that purpose; the rest we use with your consent, or because the law requires it.

Creating your account and signing you in.
Processing, packing, shipping and delivering orders; checking cash on delivery for your PIN code.
Handling cancellations, returns, refunds and warranty claims.
Sending emails about your account and orders: confirmation, shipping with tracking, delivery, cancellations, refunds, password reset and a welcome email.
Showing parts that fit your bike.
Answering your questions and complaints.
Issuing GST invoices and keeping tax and accounting records, as the law requires.
Keeping the site secure and preventing fraud and misuse.

We don't sell your personal data, and we don't send you marketing emails.

4. Who we share it with

Razorpay (payment gateway): the order amount and the name, email and phone number for the payment, to process online payments and refunds.
Shiprocket and its courier partners: your name, delivery address, phone number and parcel details (including any cash on delivery amount), to deliver your order and send delivery updates.
Our hosting and network providers: the servers that run the website and the network that delivers its pages. Our order system, search and email servers run on our own servers there; our emails are sent from our own mail server, not a third-party email service.
Authorities: government, tax or law enforcement bodies when the law requires it.

Each of them may use your data only to do that work for us (Razorpay and the couriers also follow their own legal obligations).

5. Cookies and browser storage

We use only the cookies the store needs to work, and no advertising cookies:

Cart: remembers your shopping cart.
Login session: keeps you signed in.
Selected bike: remembers the bike you chose, and whether you closed the "Choose your bike" prompt.
Cache id: a random id, kept for a day, so pages show your own cart and account.

Your browser also keeps your recent searches and the last PIN code you checked, so you needn't type them again; these are stored only in your browser. Razorpay's payment window may set its own cookies when you pay online.

We don't use third-party analytics or advertising trackers. We count how often our own promotional banners are shown and clicked, as anonymous totals per banner, with nothing that identifies you.

6. How long we keep it

Account, addresses and saved bikes: while you have an account. When you ask us to delete your account, we erase them, except what we must keep by law.
Orders, invoices and payment records: as long as tax and company law requires: at least 72 months from the due date of the annual GST return for that year (section 36 of the CGST Act, 2017), and eight financial years for books of account (section 128 of the Companies Act, 2013).
Support messages and technical logs: only as long as needed to resolve your query, keep the site secure, or meet a legal requirement.

7. Your rights

Under the DPDP Act you can:

ask for a summary of the personal data we hold about you and how we use it, and who we've shared it with;
ask us to correct, complete, update or erase it;
withdraw consent you have given (this doesn't affect what we did before, or orders you've placed);
nominate someone to exercise your rights if you die or become unable to;
have your complaints about your data handled by us (see below).

You can update your name, email, phone number, addresses and saved bikes yourself in My account. For anything else, email us from the address on your account at support@autopartwala.com. We may need to confirm it's you before acting. We acknowledge requests within 48 hours and respond within one month.

8. Children

Our store is meant for adults and isn't directed at children. We don't knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian. If you believe a child has given us personal data, contact us and we'll delete it.

9. Security

We protect your data with reasonable security safeguards: an encrypted (HTTPS) connection, hashed passwords, access to customer data limited to our staff who need it to run the store, and regular backups. If a personal data breach affects you, we'll tell you and the Data Protection Board of India as the law requires.

10. Where your data is stored

Your data is stored on servers run for us by our hosting provider, and with Razorpay and Shiprocket for the parts they handle. If any of it is processed outside India, it is only where Indian law allows.

11. Grievance Officer and complaints

For questions, requests or complaints about your personal data, contact our Grievance Officer. We acknowledge complaints within 48 hours and resolve them within one month of receiving them. More on the grievance redressal page.

Grievance Officer: [Name of Grievance Officer], Anay Autoparts Retail Private Limited
Email: support@autopartwala.com
Phone: 1-800-201-1019
Address: Shop No. 7, 3rd Floor, Building No. 1139, Street No. 10, Naiwala, Karol Bagh, New Delhi - 110005, India

If you're not satisfied with our response, you can complain to the Data Protection Board of India.

12. Changes to this notice

When we change this notice, we update this page and the "Last updated" date. If a change affects how we use data you've already given us, we'll tell you by email.