PRIVACY POLICY

Website: mycustomsong.in
Last Updated: November 2025

1. INTRODUCTION

Your privacy is important to us. This Privacy Policy explains how mycustomsong.in (“We,” “Us,” “Our”) collects, uses, discloses, and safeguards your information when you visit our website and use our services.

Legal Basis: This Privacy Policy is designed to comply with:

  • The Information Technology Act, 2000
  • The Digital Personal Data Protection Act, 2023 (DPDPA)
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

2. INFORMATION WE COLLECT

Information You Provide Directly:

  • Full name
  • Email address
  • Contact phone number (optional)
  • Payment information (credit/debit card, digital wallet details) – processed by third-party payment gateways
  • Custom song specifications and preferences
  • Account login credentials
  • Communication records with our support team
  • Feedback and inquiries

Information Collected Automatically:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring website
  • Cookie data
  • Device identifiers
  • Approximate geographic location (city-level)

Sensitive Personal Data (Specifically Handled):

While we generally do not collect sensitive personal data, if provided, it will be processed only with explicit consent and with enhanced security measures.

3. PURPOSES OF DATA COLLECTION AND PROCESSING

We use your information for the following purposes:

  • Service Delivery: Creating, customizing, and delivering your Custom Songs
  • Account Management: Maintaining your user account and profile
  • Payment Processing: Processing transactions and maintaining payment records
  • Communication: Responding to inquiries, providing customer support, and sending service-related notifications
  • Service Improvement: Analyzing usage patterns to enhance our services (in anonymized form)
  • Refund Processing: Handling refund requests and related documentation
  • Legal Compliance: Complying with applicable laws, regulations, and legal obligations
  • Fraud Prevention: Detecting and preventing unauthorized access or fraudulent activities
  • Email Marketing: Sending newsletters and promotional content (only with opt-in consent)

4. LEGAL BASIS FOR PROCESSING

We process your data based on the following legal bases:

  • Contractual Necessity: Processing necessary to perform our services and fulfill your order
  • Explicit Consent: Where you have provided clear, informed, and voluntary consent
  • Legal Obligation: Where required by applicable laws or regulatory authorities
  • Legitimate Interests: To protect security, prevent fraud, and improve our services

5. DATA RETENTION

  • Account Data: Retained for the duration of your account and 2 years after account closure
  • Transaction Data: Retained for 7 years as per tax and financial compliance requirements
  • Customer Support Records: Retained for 2 years
  • Marketing Communications: Retained until you unsubscribe or withdraw consent
  • Website Usage Data: Retained for up to 12 months in anonymized form
  • Deleted Data: Permanently removed from active systems; may exist in backup systems for 30 days

You may request deletion of your personal data at any time, subject to legal retention obligations.

6. DATA SHARING AND DISCLOSURE

We DO NOT sell your personal data.

Your information may be shared with:

  • Payment Processors: Credit card processors and digital payment gateways to process your payments
  • Email Service Providers: To send you notifications and communications
  • Legal Authorities: When required by law, court orders, or regulatory authorities
  • Business Partners: With your explicit consent and only for specified purposes
  • Service Providers: Third-party vendors who assist in service delivery (all bound by confidentiality agreements)

Data will NOT be shared with:

  • Marketing agencies (unless you opt-in)
  • Social media platforms (unless you authorize)
  • Any commercial third parties for profit

7. INTERNATIONAL DATA TRANSFERS

Currently, our service operates within India. If in future we expand to international jurisdictions, all international data transfers will comply with applicable laws and will be conducted securely with appropriate safeguards.

8. YOUR DATA RIGHTS (DPDPA Compliance)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Right to Access: Request access to your personal data and receive a copy
  • Right to Correction: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data (subject to legal obligations)
  • Right to Grievance: File a grievance with our Data Protection Officer if your rights are violated
  • Right to Withdraw Consent: Withdraw consent for data processing at any time
  • Right to Grievance Redressal: Submit complaints to the Data Protection Board of India

To exercise these rights, contact: ashxos@gmail.com

9. COOKIES AND TRACKING TECHNOLOGIES

What are Cookies?
Cookies are small data files stored on your device that help us remember your preferences and analyze usage patterns.

Types of Cookies We Use:

  • Essential Cookies: Required for website functionality
  • Analytical Cookies: Track usage patterns to improve our services (Google Analytics)
  • Preference Cookies: Remember your settings and preferences
  • Marketing Cookies: Track interactions with promotional content

Your Cookie Choices:
You can control cookie settings through your browser. Disabling cookies may affect website functionality.

10. THIRD-PARTY SERVICES

Our website may contain links to third-party websites and services. We are not responsible for their privacy practices. Please review their privacy policies before providing information.

Third-Party Services Used:

  • Payment gateways and processors
  • Email communication platforms
  • Website analytics tools
  • Hosting providers

11. SECURITY MEASURES

We implement industry-standard security measures to protect your data:

  • Encryption: SSL/TLS encryption for data in transit
  • Secure Servers: Data stored on password-protected, monitored servers
  • Access Controls: Limited access to personal data restricted to authorized personnel
  • Regular Audits: Periodic security assessments and updates
  • Data Minimization: Collection of only necessary information

Limitations: No method of transmission over the internet is 100% secure. While we use reasonable security measures, we cannot guarantee absolute security.

12. DATA BREACH NOTIFICATION

In the event of a data breach affecting your personal information:

  • We will notify you without unreasonable delay (within 72 hours where feasible)
  • Notifications will be sent to your registered email address
  • We will provide information about the breach and remedial actions taken
  • We will report to relevant authorities as required by law

13. CHILDREN’S PRIVACY

Our service is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If we discover we have collected such data, we will delete it immediately. For users aged 13-18, parental consent is required.

14. POLICY UPDATES

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of significant changes by:

  • Posting the updated policy on our website with the “Last Updated” date
  • Sending you an email notification
  • Requesting renewed consent if required

Your continued use of the service after updates constitutes acceptance of the updated Privacy Policy.

15. COMPLAINT AND GRIEVANCE REDRESSAL

If you have concerns about our data handling practices:

  1. Contact Us First:
  2. Regulatory Complaint:
    • You can file a complaint with the Data Protection Board of India if your grievance is not resolved
  3. Consumer Protection:
    • You can also file a complaint with district consumer disputes redressal commissions under the Consumer Protection Act, 2019

16. DATA PROTECTION OFFICER (DPO)

For privacy-related inquiries:
Email: ashxos@gmail.com
Response Time: Within 30 days

17. CONTACT INFORMATION

For questions about this Privacy Policy:
Email: ashxos@gmail.com
Website: https://mycustomsong.in/