Privacy Policy

This Privacy Policy describes how Pietobillo Solutions Private Limited (“Pietobillo,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when individuals visit or make a purchase from shop.pietobillo.com (the “Website”), and the rights available under applicable laws including India’s Digital Personal Data Protection Act, 2023 and draft DPDP Rules 2025, and other applicable global privacy laws where relevant.

Who we are

Pietobillo Solutions Private Limited operates health-tech and foot-care commerce and services for diabetic foot and related care, including retail of products such as diabetic socks and insoles via the Website.

Scope

This Policy applies to personal data collected via the Website, order checkout, payment processing, shipping and returns workflows, customer support, email/SMS marketing, and analytics/cookies.

What data we collect

• Identity and contact: name, billing and shipping address, email, phone, and country/state for order fulfillment and support.
• Account data: username, password, order history, saved addresses, preferences if account creation is enabled.
• Transaction data: cart contents, order totals, currency, payment method, masked card or UPI reference tokens from payment gateways (we do not store full card details).
• Technical data: device, browser type, IP address, referral URL, pages viewed, session identifiers, and cookie consent status for security, performance, and analytics.
• Marketing data: email/SMS opt-ins, campaign interactions, and unsubscribe preferences.
• Support data: communications with support and grievance channels, including attachments or photos provided for order issues.

How we collect data

• Directly during browsing, checkout, returns, support, and marketing sign-ups.
• Automatically via cookies, pixels, SDKs, and similar technologies for essential site functions, analytics, fraud prevention, and personalization subject to consent where required.
• From third-party providers (e.g., payment gateways, shipping partners) to confirm payment/fulfillment status and fraud screening results.

Why we process data (lawful bases)

• Contractual necessity: to provide the Website, process orders, payments, shipping, returns, and customer support.
• Consent: for marketing communications, certain analytics/cookies, and where laws require express consent; consent can be withdrawn any time.
• Legitimate interests: to secure the Website, prevent fraud, improve services, and perform aggregated analytics balanced against privacy rights.
• Legal obligations: to comply with tax, accounting, consumer protection, and grievance redressal requirements.

How we use data

• Order lifecycle: process orders, take payment, arrange shipment, handle returns/refunds, and send order updates.
• Site operations and security: enable core features, remember preferences, detect abuse/fraud, and maintain uptime.
• Analytics and improvement: measure traffic and sales funnels, troubleshoot, and enhance user experience using aggregated insights.
• Marketing: send product updates, offers, and recommendations, only if opted in; unsubscribe anytime.

Cookies and similar technologies

Essential cookies operate for cart, checkout, and security. Analytics/advertising cookies or pixels are used with consent where required; a cookie notice/consent banner and controls are provided to manage preferences.

Sharing and disclosures

• Payment processors to securely process transactions and prevent fraud; sensitive payment data is processed by the gateway and not stored by us.
• Shipping and logistics partners to deliver orders and manage returns.
• IT, hosting, and analytics providers under contractual safeguards for security and confidentiality.
• Government and regulators if legally required or to protect rights, safety, or enforce terms.
• Business transfers in mergers, acquisitions, or asset sales, subject to continued protection of personal data.

We do not sell personal data. Advertising or analytics partners receive only the data necessary for their services under applicable consents and controls.

International transfers

Where data is transferred outside India, appropriate safeguards consistent with DPDP and international standards are used, such as contractual clauses, vendor due diligence, and necessity for contract performance.

Data retention

Personal data is retained only as long as necessary for the purposes in this Policy, including statutory tax and accounting periods, dispute resolution, and fraud prevention, subject to evolving DPDP Rules.

Rights under DPDP and other laws

• Access personal data and understand processing.
• Request correction or updating of inaccurate or incomplete data.
• Request deletion when no longer needed or where consent is withdrawn and no other legal basis applies.
• Withdraw consent for processing based on consent, without affecting prior lawful processing.
• Lodge a complaint with the Data Protection Board of India or relevant authority, after first contacting our grievance channel.

Children’s data

The Website is not intended for children below the age threshold defined by applicable law; children’s data is not knowingly collected and is deleted if discovered.

Security

Administrative, technical, and organizational measures are implemented to protect personal data, including encryption in transit, access controls, and vendor assessments; incident response procedures are maintained.

Grievance redressal

Third-party links and platforms

The Website may link to third-party sites (e.g., payment gateways, logistics tracking, or corporate pages); those sites have their own privacy policies and controls, and their practices are not controlled.

Changes to this Policy

This Policy may be updated to reflect legal, technical, or business changes; the “Last updated” date will change accordingly, and material changes may be communicated through the Website or by email where appropriate.

How to contact us

• Privacy & rights requests: [email protected]
• Grievances: contact the Grievance Officer at the details above
• Corporate information and terms are available on Pietobillo’s main site

Cookie notice summary

Essential cookies operate by default for security, cart, and checkout. Analytics/advertising cookies are used with consent where required; cookie preferences can be updated anytime via the on-site banner or footer link.