Privacy Policy

Focusnext (“we”) decides why and how your personal data is processed when you use this website or buy from our store, and is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). We also follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

• Account details: your mobile number (to sign you in with a one-time code), and your name and email address if you add them.
• Order details: delivery and billing addresses, the items you buy, amounts, payment method and payment status, and delivery tracking. We receive a payment reference from Razorpay — never your full card number, CVV or UPI PIN.
• Messages: what you tell us when you call, WhatsApp, email or raise a complaint.
• Technical data: your IP address when you request a login code (to stop abuse), and the basic information browsers send, such as device and browser type, in our server logs.

We use your personal data only for these purposes:

• to sign you in, take payment, deliver your order and show your order history;
• to send order confirmations and delivery updates by WhatsApp or SMS, and login codes by SMS;
• to handle cancellations, returns, refunds, warranty claims, repairs and complaints;
• to prevent fraud and keep the website and your account secure;
• to issue GST invoices and keep the accounting and tax records the law requires.

We do not sell your personal data. We’ll only send you offers or promotions if you ask us to, and you can stop them at any time by contacting us.

We process your data because you give it to us to place an order or create an account (a legitimate use under section 7 of the DPDP Act), with your consent, or where the law requires it. You can withdraw consent at any time by contacting us; this won’t affect anything we did before, and we may still need some data to complete an order you have placed or to meet legal obligations.

We share only what each service provider needs to do its job, and they must protect it:

• Razorpay — payments and the checkout where you enter your address;
• courier and logistics partners — your name, phone number and delivery address, to deliver your order;
• messaging providers — Meta’s WhatsApp Business Platform for order updates, and an SMS provider for login codes;
• cloud providers — the hosting, database and storage services that run this website;
• authorities — government bodies, courts or law enforcement when the law requires us to.

Some of these providers may store or process data outside India, as the DPDP Act permits.

We use only what the website needs to work:

• a secure sign-in cookie that keeps you logged in for up to 30 days, and a second cookie that only notes that you are signed in;
• your browser’s local storage to remember your cart on that device.

We don’t use advertising or cross-site tracking cookies. Clearing your browser’s data signs you out and empties your cart.

The website uses HTTPS encryption. Login codes are stored only in scrambled (hashed) form and expire within minutes, sign-in sessions expire automatically, and access to customer data is limited to staff who need it. No system is perfectly secure, but if a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

We keep account and order details while your account is active and for as long as needed to provide warranty and after-sales support. Invoices and accounting records are kept for the period required by GST and tax laws. Login codes are deleted soon after use. When data is no longer needed, we delete or anonymise it.

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who we have shared it with;
• ask us to correct, complete, update or erase your data (unless we must keep it by law, for example invoices);
• withdraw your consent;
• nominate someone to exercise these rights if you die or become unable to;
• have your grievance addressed by us, and then, if you are not satisfied, complain to the Data Protection Board of India.

You can update your name and email yourself in My Account. For anything else, contact our Grievance Officer below. We may need to confirm your identity first.

Our website is meant for adults. We don’t knowingly collect data from anyone under 18 without a parent’s or guardian’s consent; if you believe a child has given us personal data, contact us and we’ll delete it.

For questions, requests or complaints about your personal data, contact:

We acknowledge complaints within 48 hours and resolve them as soon as possible, and within one month. See Grievance Redressal for the full process.

We will update this page when our practices change; the date at the top shows the latest version. Significant changes will be highlighted on the website.