Privacy Notice & Data Protection Policy

Last Updated: October 12, 2026
Website Operated by: Nurture IT Pvt. Ltd.

This Privacy Notice is provided by Laptop World (a retail division of Nurture IT Pvt. Ltd., hereinafter referred to as “Laptop World”, “we”, “our”, or “us”) in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”).

This notice informs you, the Data Principal, regarding the collection, use, storage, processing, cross-border transfer, and protection of your digital personal data when you interact with our website or physical retail operations in Bengaluru.

1. Scope and Website Operations Disclaimer

Our website (laptopworld.co.in) serves primarily as a digital product catalog and reference showcase for branded laptops, accessories, and store solutions. We do not facilitate direct online financial checkout on this website; transactions, hands-on demos, warranty processing, and device deliveries are coordinated directly through our physical showroom or authorized enterprise channels.

2. Itemised Personal Data We Collect, Purposes, and Retention (Section 5 Compliance

Under Section 5 of the DPDP Act and Rule 3 of the DPDP Rules, 2025, we itemise below the exact categories of personal data collected, the specific operational purpose for each, and the corresponding retention timelines:

Category of Personal Data	Channels of Collection	Specified Purpose of Processing	Lawful Basis
Identity & Contact Data: Name, Mobile Number, Email Address	Website Inquiry Forms, In-Store Walk-ins, Phone Inquiries	Responding to product inquiries, quotation requests, store visit scheduling, and after-sales communication.	Consent (Section 6)
Billing & Commercial Data: Full Name, Phone Number, Billing Address (if requested), GSTIN (for B2B retail buyers)	In-Store Point-of-Sale (POS) Checkout Counter	Issuing tax invoices, fulfilling statutory tax records, recording hardware serial sales, and managing manufacturer warranties.	Legal Obligation / Section 4 & 7
Service & Device Diagnostics Data: Device Make/Model, Hardware Serial Number, Fault Description, Temporary Device PIN/Password	In-Store Service Desk, Repair Intake Worksheets	Diagnosing hardware/software issues, component replacement, post-repair testing, and returning equipment to the customer.	Performance of Service / Consent (Section 6)
Technical & Browsing Data: IP Address, browser type, device information, non-essential cookies (gated)	Automated web logs, Google Analytics (Consent Mode v2)	Website functionality, aggregated performance monitoring, and defense against malicious network activity.	Legitimate Uses (Security) / Consent (Cookies)
Promotional Communications: Mobile Number, Name	Opt-in Checkout Box, Customer Sign-up Sheets	Sending optional WhatsApp or SMS updates regarding seasonal offers, new product launches, or AMC/service reminders.	Explicit Consent (Section 6)

3. Trackers, Cookies, and Consent Withdrawal (Section 6 & Section 6(4))

We respect your digital privacy through automated technical controls:

Default-Denied Tracking: All non-essential scripts – including analytics, tag managers, and session-recording tools (such as Google Tag Manager, Google Analytics, Hotjar, or similar third-party plugins) – remain blocked by default until you affirmatively grant permission via our consent banner. You can view the real-time, complete list of active scripts and cookies anytime in our Cookie Policy.

Consent Withdrawal: In accordance with Section 6(4) of the DPDP Act and Rule 3(c)(i), withdrawing consent is as simple as granting it. You can modify or revoke your cookie choices at any time by clicking the “Cookie Preferences” or “Manage Consent” link permanently available in the footer of every page.

4. Service & Maintenance Data Security

When customers hand over laptops, desktops, or storage media for diagnosis and repair at Laptop World:

Device Access Credentials: Temporary passwords or PINs requested during repair intake are collected solely to facilitate component benchmarking and OS verification. Such credentials are restricted exclusively to the technician servicing the hardware and are securely expunged from intake slips upon equipment return. Customers are strongly advised to back up sensitive files and utilize temporary guest accounts or reset passwords following service completion.
Data Confidentiality: Technicians are strictly prohibited from copying, viewing, altering, or transferring personal files, images, or documents residing on customer drives during the servicing workflow.

5. Promotional Communications Policy

We respect your communication channels:

We do not initiate unsolicited commercial calls, emails, or WhatsApp broadcasts.
Promotional WhatsApp or SMS updates are sent only to customers who have provided an explicit affirmative opt-in.
Any promotional message transmitted by Laptop World includes a clear, immediate opt-out directive (e.g., replying “STOP” or using an automated unsubscribe link). Upon receiving an opt-out instruction, promotional messaging ceases immediately.

6. Cross-Border Data Processing (Section 16 Compliance)

While our core retail databases, invoicing systems, and hosting servers reside within the Republic of India, certain digital web analytics services (such as Google Tag Manager / Google Analytics) are operated by entities headquartered in the United States. In accordance with Section 16 of the DPDP Act and Rule 15 of the DPDP Rules, 2025, your data is only transferred to overseas cloud infrastructure that complies with data security safeguards and is not located in any restricted territories notified by the Central Government of India.

7. Policy on Children’s Personal Data (Section 9 Compliance)

Our website and retail services are strictly designed for adults (individuals who have reached the age of 18) looking for consumer or commercial computing hardware.

We do not knowingly solicit, collect, or process personal data from children under the age of 18.
We do not conduct behavioral monitoring, user tracking, or targeted advertising directed at children.
If we discover that personal data of a minor has been submitted without verifiable parental consent in accordance with Rule 10, we will erase such data immediately upon notification.

8. Your Statutory Data Principal Rights (Section 11–14 Compliance)

Under Chapter 3 of the DPDP Act, 2023, you have the following enforceable rights:

Right to Access (Section 11): You may request a summary of the personal data we hold about you and the processing activities undertaken.
Right to Correction & Updating (Section 12): You may ask us to correct, complete, or update any inaccurate or obsolete personal data.
Right to Erasure (Section 12): You may request the deletion of your personal data when the specified business purpose is completed, subject to mandatory statutory retention laws (e.g., GST records).
Right to Withdraw Consent (Section 6(4)): You may withdraw consent previously granted for marketing or non-essential communication at any time.
Right to Nominate (Section 14): In the event of death or incapacity, you have the right to designate a nominee to exercise your data rights on your behalf.
Right to Grievance Redressal (Section 13): You have the right to an accessible, responsive mechanism to resolve any data privacy disputes.

How to Exercise Your Rights: You may submit a formal request to exercise any of these rights by emailing our Data Protection & Grievance Officer at [grievance@nurtureit.in] with the subject line “Data Principal Rights Request”. Please state your registered email or phone number to verify your identity pursuant to Rule 14(5).

9. Grievance Redressal Officer (Section 8(10) & Rule 9 Compliance)

In accordance with Section 8(10) of the DPDP Act and Rule 9 & Rule 14(3) of the DPDP Rules, 2025, our designated Data Protection & Grievance Officer is published below to handle all data protection concerns:

Name: Indrajit C
Designation: Data Protection & Grievance Officer
Company: Laptop World (A Division of Nurture IT Pvt. Ltd.)
Grievance Email: grievance@nurtureit.in / dpo@nurtureit.in
Corporate Office (Primary Postal Address for Grievances):
50, 9th A Main Rd, 1st Stage, Indiranagar, Bengaluru, Karnataka 560038
Branch / Retail Store Address:
59, Sampige, East Park Road, 15th Cross Rd, Malleshwaram, Bengaluru, Karnataka 560003
Working Hours: Monday to Friday, 10:00 AM – 7:00 PM IST. Saturday, 10:00 AM – 5:00 PM IST
Service Level Agreement (SLA): We will acknowledge receipt of your complaint or rights request within 48 hours and provide a complete resolution within 30 days.
Escalation: If you are not satisfied with our redressal, you have the right to register a complaint with the Data Protection Board of India (DPBI).

10. Amendments & Updates

This Privacy Policy may be updated periodically to reflect operational, technological, or regulatory developments under Indian law. The date of the most recent revision will always be displayed at the top of this document.