Legal & Transparency
Your Privacy is Our Priority
At Easi Steps, we handle your personal information with care, transparency, and full compliance with India’s privacy laws.
Introduction
Welcome to Easi Steps (“we,” “us,” or “our”), an online general store at www.easistep.com. We are committed to protecting the personal information of every visitor and customer who interacts with our store.
This Privacy Policy describes how we collect, use, store, share, and protect your personal data. It applies to all users of our website and related services.
Our commitment: We never sell your personal information. Your data is used solely to process your orders, improve your experience, and keep you informed about Easi Steps.
By visiting our website or placing an order, you agree to this Privacy Policy. This policy complies with India’s Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).
Personal Data We Collect
Information You Provide
- Account Details: Name, email address, and password when you register.
- Order Information: Billing name, shipping address (house/flat no., street, city, state, PIN code), and phone number.
- Payment Data: UPI IDs and payment preferences. Card/banking credentials are processed directly by Razorpay and never stored on our servers.
- Support Communications: Messages or queries submitted via email, WhatsApp Business, or our contact form.
- Feedback & Reviews: Product reviews, ratings, and survey responses you voluntarily submit.
Information Collected Automatically
- Device & Browser Data: IP address, browser type, operating system, and device type.
- Browsing Behaviour: Pages visited, products viewed, items added to cart, search terms, and time spent on site.
- Approximate Location: Derived from your IP address to show relevant shipping options, PIN codes, and applicable GST.
- Cookies & Pixels: Data collected via cookies and the Meta (Facebook/Instagram) Pixel — see Section 7.
- Referral Source: The website, ad, or link that brought you to Easi Steps.
Information From Third Parties
- Payment Gateways: Transaction status and confirmation from Razorpay.
- Delivery Partners: Shipment tracking and delivery confirmations from our courier services.
- Meta Platforms: Anonymised audience data from Facebook and Instagram ad interactions.
How We Use Your Information
| Purpose | Description |
|---|---|
| Order Processing | Confirm, pack, dispatch, and track orders; generate GST invoices and receipts. |
| Payment Handling | Initiate and verify transactions via Razorpay, UPI, or Cash on Delivery. |
| Customer Service | Respond to queries, resolve complaints, process returns and refunds. |
| Account Management | Create and secure your account; enable order history and saved addresses. |
| Fraud Prevention | Detect and block fraudulent orders, fake accounts, and payment abuse. |
| Marketing | Send promotional emails and WhatsApp updates — with your consent only. |
| Personalisation | Show relevant product recommendations and offers based on your activity. |
| Analytics | Understand site traffic, popular products, and conversion performance. |
| Legal Compliance | Meet GST, income tax, consumer protection, and other Indian regulatory requirements. |
Payments & Transactions
Easi Steps accepts the following payment methods:
We never store your card numbers or UPI credentials. All online transactions are processed exclusively through Razorpay, a PCI-DSS certified payment gateway regulated by the RBI. We only receive a transaction ID and payment status.
Cash on Delivery (COD)
For COD orders, your address and phone number are shared with our delivery partner for delivery and cash collection only. No financial data is stored for COD orders.
Refunds
Approved refunds are returned to the original payment method within 5–7 business days via Razorpay. COD refunds are issued by bank transfer; the details provided are used solely for the refund and then deleted.
Third-Party Tools & Integrations
We use the following services to operate, market, and improve our store:
Meta (Facebook) Pixel
Tracks visits and conversions to measure ad performance and build custom audiences.
Instagram Ads
Delivers targeted ads on Instagram based on your browsing activity and interests.
WhatsApp Business
Sends order updates, shipping notifications, and handles customer support queries.
Razorpay
Processes all online payments securely. RBI-regulated and PCI-DSS certified.
Google Analytics
Tracks website traffic and performance metrics to improve the shopping experience.
Delivery Partners
Receive your name, address, and phone number to fulfil and deliver your orders.
You can opt out of Meta Pixel tracking via your Facebook Ad Preferences. To stop WhatsApp marketing messages, reply “STOP” at any time.
How We Share Your Information
We do not sell, rent, or trade your personal data. Sharing only occurs to the extent necessary to run our store and serve you effectively.
With Service Providers
- Razorpay: Your name, email, phone, and order amount to process payments.
- Courier Partners: Your name, phone, and full delivery address for order fulfilment.
- Email & Messaging Platforms: Your email/phone for transactional notifications and marketing (if opted in).
- Cloud Hosting: For secure website operation and data storage under data processing agreements.
For Legal Reasons
We may disclose your data to government authorities, law enforcement, or courts as required by Indian law (IT Act, GST compliance, or court orders), or to protect our legal rights and the safety of our customers.
Business Transfers
If Easi Steps undergoes a merger, acquisition, or business sale, customer data may be transferred. You will be notified by email and website notice before any such transfer takes effect.
Cookies & Tracking Technologies
We use cookies and similar technologies to keep our store running smoothly, remember your preferences, and measure our marketing effectiveness:
You can manage non-essential cookies at any time through our cookie banner or your browser settings. Disabling strictly necessary cookies will affect checkout functionality.
Data Retention
We retain personal data only as long as needed or required by Indian law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Profile | Account duration + 2 years | Dispute resolution, fraud prevention |
| Order Records | 8 years | GST compliance & Income Tax Act |
| Payment Records | 8 years | RBI regulations & financial audits |
| Support Communications | 3 years from last contact | Consumer dispute resolution |
| Marketing Consent | Until withdrawal + 2 years | DPDP Act 2023 compliance |
| Analytics/Cookie Data | 13–26 months | Per Google Analytics settings |
| Meta Pixel Data | Per Meta’s retention policy | Ad performance & audience matching |
After retention periods expire, data is permanently deleted or anonymised so it can no longer be linked to you.
Data Security
We implement appropriate security measures under the IT (Reasonable Security Practices) Rules, 2011:
- SSL/TLS Encryption: All data between your browser and our website is encrypted via HTTPS/SSL.
- PCI-DSS Payments: Razorpay handles all card and UPI transactions under RBI-mandated PCI-DSS Level 1 certification. We never store your card details.
- Access Controls: Only authorised staff access customer data on a strict need-to-know basis.
- Secure Storage: Data is stored on secured servers with firewalls, intrusion detection, and regular patches.
- Breach Response: In the event of a breach, we will notify you and the relevant Indian authorities as required by the DPDP Act 2023.
No internet transmission is 100% secure. If you suspect unauthorised access to your account, contact us immediately at support@easistep.com.
Your Privacy Rights
Under the DPDP Act, 2023 and Indian regulations, you have the following rights. We respond to all valid requests within 30 days.
Right to Access
Request a summary of the personal data we hold about you.
Right to Correct
Update or correct inaccurate information we hold about you.
Right to Erasure
Request deletion of data that is no longer needed.
Withdraw Consent
Withdraw consent for marketing or non-essential processing at any time.
Right to Grievance
Raise a complaint with our Grievance Officer or the Data Protection Board of India.
Nominee Rights
Designate a nominee to exercise your data rights per DPDP Act 2023.
To exercise any right, email support@easistep.com with your name, registered email, and your request. We may verify your identity before processing.
Children’s Privacy
Our website is not directed at children under 18 years. Under the DPDP Act, 2023, we do not knowingly collect personal data from minors without verifiable parental consent.
If you are a parent or guardian and believe your child has shared data with us, contact support@easistep.com immediately. We will investigate and delete such data promptly.
Third-Party Links
Our website may link to third-party sites such as Facebook, Instagram, or partner pages. This Privacy Policy applies only to www.easistep.com.
We are not responsible for the content or privacy practices of external websites. Please review the privacy policy of any third-party site you visit via our store.
Marketing & Communications
With your consent, we may contact you through the following channels:
- Email: Newsletters, discount codes, and new product announcements.
- WhatsApp Business: Order updates and occasional promotional messages.
- Instagram & Facebook Ads: Retargeted ads based on your activity on our site via Meta Pixel.
How to Opt Out
- Click “Unsubscribe” in any marketing email.
- Reply “STOP” to any WhatsApp Business message.
- Manage ad preferences via Facebook / Instagram Settings → Ad Preferences.
- Email support@easistep.com to be removed from all marketing lists.
Opting out of marketing will not affect essential communications such as order confirmations, payment receipts, shipping updates, or account security alerts.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, services, or Indian privacy laws (including the DPDP Act 2023). When we make material changes:
- The “Last Updated” date on this page will be revised.
- A notice will appear on our website for at least 30 days.
- For significant changes, a notification will be sent to your registered email address.
Your continued use of our website after the updated policy’s effective date constitutes your acceptance.
Contact & Grievance Officer
For any privacy concerns, data requests, or complaints under the DPDP Act 2023, reach out to us. We acknowledge requests within 48 hours and resolve within 30 days.
© Easi Steps. All rights reserved. | www.easistep.com
Terms & Conditions · Refund Policy · Shipping Policy
Compliant with the IT Act 2000, IT (Reasonable Security Practices) Rules 2011, DPDP Act 2023, and RBI Guidelines. Last reviewed: . This document is for informational purposes and does not constitute legal advice.