Privacy Policy & Data Protection

This Privacy Policy explains how SOX N SOX ("we," "our," "us"), operating under Involute Institute of Industrial Training, collects, uses, protects, and discloses personal data when you visit soxnsox.in, purchase our bamboo and diabetic socks, create an account, or contact our customer support team.

We operate in strict adherence to the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Reserve Bank of India (RBI) payment security directives.

By visiting our website or submitting personal data, you acknowledge and consent to the practices described in this policy.

We collect only the minimum necessary data required to process orders, facilitate doorstep delivery, and provide personalized customer assistance:

• Directly From You: When you register an account, checkout as a guest, submit an inquiry through our Contact Us form, write a verified customer review, or subscribe to our Sock Club newsletter.
• Automated Website Technologies: As you navigate soxnsox.in, standard web servers and secure cookies log browsing sessions to preserve your shopping cart, maintain security tokens, and analyze page load speeds.
• Logistics & Payment Service Providers: Our integrated courier networks (Blue Dart, Delhivery) update us with package delivery milestones, and payment gateways confirm transaction settlement tokens.

Your personal information is used strictly for legitimate commercial and operational purposes:

• Order Fulfillment & Dispatch: Processing payments, preparing shipping labels, packing socks, and executing doorstep delivery via our courier partners.
• Real-Time Notifications: Transmitting order confirmation receipts, GST invoices, and AWB dispatch tracking links via SMS, WhatsApp, and email.
• Customer Care & Warranty Assistance: Assisting you with sizing recommendations, diabetic foot comfort inquiries, replacement scheduling, or return authorizations.
• Fraud Detection & Security: Verifying Cash on Delivery orders, verifying billing credentials, and safeguarding our web servers against malicious bot attacks.
• Statutory Tax & Legal Compliance: Complying with Indian Goods and Services Tax (GST) invoicing requirements, accounting auditing, and regulatory mandates.

We disclose necessary personal information strictly to vetted operational partners bound by confidentiality and security covenants:

• Logistics & Courier Partners: Blue Dart Express, Delhivery, Xpressbees, and DTDC receive your name, shipping address, and mobile number solely to execute package delivery and contact you upon doorstep arrival.
• Payment Gateway Operators: RBI-licensed entities (such as Razorpay, Cashfree, and affiliated Indian banking networks) process financial payments through encrypted, tokenized channels.
• Communication Infrastructure: Telecom partners and SMS gateways authorized under TRAI regulations to transmit transactional OTPs, order updates, and dispatch tracking links.
• Legal & Regulatory Authorities: We may disclose data when strictly mandated by Indian law, judicial summons, or to comply with statutory tax investigations.

Cookies are small data files placed on your device to ensure smooth website operation:

• Essential Session Cookies: Required to keep items in your shopping cart, authenticate user logins, and enforce Cross-Site Request Forgery (CSRF) security.
• Preference Cookies: Remember your preferred currency (INR), locale (English), and display settings for future visits.
• Analytics Cookies: Help us understand aggregate visitor flows and popular sock categories to continuously optimize user experience.

You can manage, restrict, or delete cookies via your browser settings (Chrome, Safari, Firefox, Edge). Note that disabling essential session cookies may prevent items from persisting in your cart or impede checkout completion.

We enforce multi-tiered administrative, technical, and physical safeguards:

• End-to-End Encryption: All data transmitted between your web browser and our servers is encrypted using modern 256-bit Secure Sockets Layer (SSL/TLS 1.3).
• Restricted Database Access: Customer records are stored in hardened database instances protected by firewalls, with access restricted strictly to authorized operations personnel.
• Retention Schedules: We retain order records and GST tax invoices for 7 years in compliance with the Indian Companies Act and Goods and Services Tax Act. Routine temporary session data is expunged on an ongoing basis.

As a Data Principal under Indian law, you possess explicit rights regarding your personal information: