Privacy Policy

Last Updated: September 1, 2025

This Privacy Policy describes how Ravel Corporate Advisors Pvt Ltd (“we,” “us,” or “our”), operating indiandsc.com (the “Site”), collects, uses, shares, and protects your personal information. By using the Site, you consent to these practices in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and other applicable Indian laws.

We are committed to protecting your privacy and processing data only as necessary for our services, including Class 3 Digital Signature Certificates (DSCs) and USB tokens.

1. Data Controller and Contact

• Data Controller: Ravel Corporate Advisors Pvt Ltd
• Address: 1st Floor, Koppan Arcade, Palakkad – Ponnani Rd, near Royal Enfield, Pattambi, Kerala 679306
• Email: [email protected]
• Phone: 7994725511

For data protection queries, contact us at the above details.

2. Types of Data We Collect

We collect the following categories of personal data:

• Personal Identification Information: Name, email, phone number, address, date of birth, gender, and other details provided during checkout, account registration, or order placement. When you place an order, we automatically create an account using your email address if none exists, to facilitate order tracking and KYC processes.
• KYC Documents: For DSC issuance, we collect government-issued IDs (e.g., Aadhaar, PAN, passport), proof of address, photographs, and other verification documents uploaded via the Site.
• Payment Information: Billing details, credit/debit card numbers, UPI IDs, or bank details (processed securely via third-party gateways).
• Order Information: Purchase history, shipping details, and preferences.
• Device and Usage Data: IP address, browser type, device information, pages visited, time spent, and referral sources (collected automatically via cookies, log files, and tools like Google Analytics).
• Other Data: Communications with us, feedback, or marketing preferences.

We collect minimal data necessary for our services and obtain your explicit consent where required under the DPDP Act.

3. How We Collect Data

• Directly from You: Via forms, uploads, checkout, or communications. During checkout, your email and other details are used to create an account automatically if you don’t have one, enabling order management and KYC verification.
• Automatically: Through cookies and tracking technologies (e.g., for analytics and fraud prevention).
• From Third Parties: Payment processors or certifying authorities during KYC verification.

4. Purposes and Legal Basis for Processing

We process your data based on:

• Consent: For marketing or non-essential cookies (you can withdraw anytime).
• Contract Fulfillment: To process orders, issue DSCs, verify KYC, create and manage your account, and deliver products.
• Legitimate Interests: To improve the Site, prevent fraud, and analyze usage.
• Legal Obligations: Compliance with government regulations for DSC issuance.

Specific uses:

• Create and manage user accounts automatically during checkout to track orders and facilitate KYC for Class 3 DSC issuance.
• Verify identity and process KYC for DSC applications.
• Fulfill orders, handle payments, and ship physical tokens.
• Communicate order updates, support queries, or promotional offers (with opt-in).
• Enhance Site functionality and security.
• Comply with audits or legal requests.

5. Sharing Your Data

We share data only as necessary:

• With certifying authorities (e.g., eMudhra, Capricorn) for DSC issuance.
• Payment gateways (e.g., Razorpay, PayU) for transactions.
• Shipping partners for physical deliveries.
• Service providers (e.g., Google Analytics, WooCommerce) for analytics and operations.
• As required by law, such as to government bodies or in response to legal processes.

We do not sell your data. All sharing complies with DPDP Act requirements for data fiduciaries.

6. Data Security and Retention

We use industry-standard measures (e.g., encryption, firewalls, access controls) to protect your data, including account and KYC details, from unauthorized access, loss, or breach. Account data and KYC documents are stored securely and accessed only by authorized personnel.

Data is retained only as long as necessary: e.g., account and order data for 5 years for legal compliance; KYC for the validity period of the DSC plus statutory requirements. You can request deletion thereafter via the “My Account” section or by contacting us.

In case of a data breach, we will notify you and authorities as per DPDP Act.

7. Your Rights Under DPDP Act

You have the right to:

• Access, correct, or update your data, including account details, via “My Account” or by contacting us.
• Withdraw consent (where applicable).
• Request deletion or restriction of processing.
• Nominate a person for data handling in case of incapacity.
• Lodge complaints with the Data Protection Board of India.

To exercise rights, email us at [email protected]. We respond within reasonable timeframes.

8. Cookies and Tracking

We use cookies for essential functions (e.g., shopping cart, account management), analytics, and marketing. You can manage preferences via browser settings. See our Cookie Policy for details.

9. International Transfers

Data is primarily processed in India. If transferred outside (e.g., to cloud providers), we ensure adequate safeguards per DPDP Act.

10. Children’s Privacy

The Site is not for individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Policy. Changes will be posted with the new date. Continued use constitutes acceptance.

12. Contact Us

For questions or complaints, contact us at:
Ravel Corporate Advisors Pvt Ltd
1st Floor, Koppan Arcade, Palakkad – Ponnani Rd, near Royal Enfield, Pattambi, Kerala 679306
Email: [email protected]
Phone: 7994725511