Privacy Policy

Access — Privacy Policy

Last Updated: March 9, 2026

This Privacy Policy explains how Access ("we", "us", "our", or "Access"), the brand name under which we operate the website accessworld.in and our physical retail store at Phoenix Palladium Mall, Mumbai, collects, uses, processes, stores, shares, and protects your personal data. This Policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules") of India.

By using our website, visiting our store, or purchasing our products, you consent to the practices described in this Privacy Policy. Please read this Policy carefully before using our services.

1. Who We Are (Data Fiduciary)

Access is the Data Fiduciary responsible for your personal data. We have been in the premium electronics retail business since 1999 and operate both an online store (accessworld.in) and a physical retail store.

Contact Information:

Business Name: Access
Registered Address: Phoenix Palladium Mall, Lower Parel, Mumbai, Maharashtra 400013, India
Email: phoenix@accessinfoworld.com
Phone: +91 9870599153 / +91 8169410934
Grievance Officer Email: phoenix@accessinfoworld.com

2. Personal Data We Collect

We collect the following categories of personal data:

a) Information You Provide Directly:

Full name
Email address
Phone number
Shipping and billing address
Payment information (processed securely via GoKwik and Shopify Payments — we do not store card details)
Order history and preferences
Product reviews and feedback (via Judge.me)
Communications with our customer support team
Information submitted via the "Request a Product" form

b) Information Collected Automatically:

IP address
Browser type and version
Device information (device type, operating system)
Pages visited, time spent on pages, and navigation patterns
Referring website or source
Cookie identifiers and session data

c) Information from Third-Party Sources:

Shopify (e-commerce platform)
GoKwik (checkout and payment processing)
Google Analytics (website analytics)
Facebook Pixel (advertising measurement)
Microsoft Advertising (advertising measurement)
Judge.me (product reviews)

3. Purpose of Data Processing

We process your personal data for the following specific and lawful purposes:

Purpose	Data Used
Processing and fulfilling your orders	Name, address, phone, email, payment info
Shipping and delivery via our logistics partners	Name, address, phone
Communicating order updates and delivery status	Email, phone
Providing customer support and resolving queries	Name, email, phone, order history
Managing product returns and exchanges	Name, order details, address
Sending promotional offers and marketing communications (only with your consent)	Email, phone
Improving our website experience and performance	Device info, browsing data, cookies
Measuring advertising effectiveness	Cookie identifiers, browsing data
Preventing fraud and ensuring payment security	IP address, device info, payment metadata
Displaying product reviews on our website	Name (or display name), review content
Compliance with legal and tax obligations	Transaction records, invoices

We do not process your personal data for any purpose beyond what is stated above. If we need to use your data for a new purpose, we will seek your consent before doing so.

4. Lawful Basis for Processing

Under the DPDPA, we process your personal data based on:

Consent: For marketing communications, cookies (non-essential), and advertising pixels. You may withdraw consent at any time.
Legitimate Use (Section 7, DPDPA): For fulfilling orders you have placed, providing customer support, and complying with applicable laws.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies. Here is what we use and why:

Essential Cookies (Always Active):

Shopify session cookies — required for cart functionality, login, and checkout
Security cookies — fraud prevention and site protection

Analytics Cookies (With Consent):

Google Analytics (G-4MTFMYTXZ1) — helps us understand how visitors use our site
Microsoft Advertising (MC-DNTN8BQGCT) — measures ad performance

Advertising Cookies (With Consent):

Facebook Pixel (683335189387184) — measures ad effectiveness and enables retargeting
Google Ads (AW-877002392) — conversion tracking for advertising

You can manage your cookie preferences through the cookie consent banner displayed on our website. You may also disable cookies through your browser settings, though this may affect website functionality.

6. Data Sharing and Disclosure

We share your personal data only with the following categories of recipients, and only to the extent necessary for the stated purposes:

a) Service Providers (Data Processors):

Shopify Inc. — e-commerce platform hosting and order management
GoKwik — checkout optimization and payment processing
Shiprocket / logistics partners — order shipping and delivery
Judge.me — product review collection and display
Google LLC — analytics and advertising
Meta Platforms (Facebook) — advertising measurement

b) Legal and Regulatory: We may disclose your data if required by law, court order, or government authority, or to protect our legal rights.

c) Business Transfers: In the event of a merger, acquisition, or sale of business assets, your personal data may be transferred as part of the transaction. We will notify you of any such transfer.

We do not sell your personal data to any third party. We do not share your data with third parties for their independent marketing purposes.

7. Cross-Border Data Transfers

Some of our service providers (such as Shopify, Google, and Meta) may process your data outside India. We ensure that any such transfer is in compliance with the DPDPA and that adequate data protection measures are in place. We will not transfer your data to any country restricted by the Government of India under Section 16 of the DPDPA.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Order and transaction data: 8 years (as required under Indian tax and accounting laws)
Customer account data: Until you request deletion or close your account
Marketing consent records: Until you withdraw consent
Website analytics data: 26 months (Google Analytics default)
Customer support communications: 3 years from resolution

When data is no longer required, we securely delete or anonymize it.

9. Your Rights as a Data Principal

Under the DPDPA, you have the following rights:

a) Right to Access: You may request a summary of your personal data being processed and the processing activities.

b) Right to Correction: You may request correction of any inaccurate or misleading personal data.

c) Right to Erasure: You may request deletion of your personal data when it is no longer necessary for the purpose it was collected, subject to legal retention requirements.

d) Right to Withdraw Consent: You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

e) Right to Grievance Redressal: You may raise a complaint with our Grievance Officer. If unsatisfied with our response, you may approach the Data Protection Board of India.

f) Right to Nominate: You may nominate another individual to exercise your rights in case of your death or incapacity.

How to Exercise Your Rights: Send an email to phoenix@accessinfoworld.com with the subject line "Data Privacy Request". We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

SSL/TLS encryption across the entire website (HTTPS enforced)
Cloudflare CDN and security protection
Shopify's PCI-DSS compliant payment infrastructure
GoKwik's secure payment gateway
Access controls limiting employee access to personal data
Regular security reviews of third-party integrations

In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals promptly, as required under the DPDPA.

11. Children's Data

We do not knowingly collect personal data from children under the age of 18 without verifiable parental consent. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at phoenix@accessinfoworld.com.

12. Return and Exchange Policy

Please note our product return and exchange policy, which is relevant to data processing for order management:

We do not offer returns. All sales are final.
Sealed products in sellable condition may be exchanged. Contact our customer support team for exchange requests.
Warranty claims are handled per the manufacturer's warranty policy. Contact us for assistance.

For exchange or warranty requests, we may need to process your order details, product information, and contact information.

13. Third-Party Links

Our website may contain links to third-party websites (brand websites, payment gateways, social media platforms). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal data.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. The "Last Updated" date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated Policy.

15. Grievance Officer

In accordance with the DPDPA, we have appointed a Grievance Officer to address your concerns regarding data privacy:

Name: Hitanshu Shah
Email: phoenix@accessinfoworld.com
Phone: +91 8424040700
Response Time: Within 30 days of receiving your request

If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India as established under the DPDPA.

16. Governing Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules thereunder. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts in Mumbai, Maharashtra.

Access Phoenix Palladium Mall, Lower Parel, Mumbai, Maharashtra 400013 Email: phoenix@accessinfoworld.com Phone: +91 9870599153 | +91 8169410934 Website: accessworld.in