Privacy Policy

This policy applies to everyone who visits Qwikure, creates an account, contacts us, or purchases a service package. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices) Rules.

The data fiduciary responsible for your data is QWIKURE ECOM PRIVATE LIMITED, Plot No. - 4/2, Sector 1, Huda Techno Enclave, Hi-Tech City, Madhapur, Hyderabad, Rangareddy, Telangana - 500081..

We collect only what a service business needs to invoice you and deliver the work:

• Identity and contact data — name, email address, mobile number, and business name where you provide one.
• Billing data — billing address, city, state and PIN code, required for a GST-compliant invoice.
• Order data — the packages you bought, amounts, order numbers, payment status and transaction references.
• Project brief data — the goals, audience notes and asset references you submit so the work can be delivered.
• Account data — if you create an account, an encrypted (hashed) password. We never store your password in readable form.
• Technical data — IP address, browser type, device type, pages visited and referring source, collected through analytics.

We do not collect or store card numbers, CVV, UPI PINs, net-banking credentials or any payment instrument details.

• To create, process and fulfil your order, and to deliver the service package you paid for.
• To raise a tax invoice and meet our GST and accounting obligations.
• To communicate about your order — confirmations, briefs, delivery, and support replies.
• To operate and secure the website, prevent fraud, and debug problems.
• To improve the service catalogue and site experience using aggregated, non-identifying analytics.
• To send marketing emails only where you have opted in — every one carries an unsubscribe link.

We process your data on the basis of the consent you give when you submit a form, place an order or subscribe, and where processing is necessary to perform the contract created by your purchase, or to meet a legal obligation such as tax record-keeping.

You may withdraw consent at any time by writing to us. Withdrawal does not affect processing already carried out, and we may need to retain certain records to meet statutory obligations.

We do not sell your personal data. We share it only with parties who help us run the business, and only to the extent required:

• Payment gateway — to process your UPI payment and confirm its status.
• Email and hosting providers — to send transactional email and host the website.
• Analytics providers — where enabled, in aggregated or pseudonymous form.
• Specialists delivering your package — restricted to the brief and access needed to do the work.
• Government or law enforcement — where required by a valid legal process.

Payments are processed by a licensed third-party payment gateway. The transaction happens on their infrastructure and inside your own UPI app. We receive only the outcome — success, failure or pending — plus a transaction reference and the amount.

In line with the RBI's card tokenisation guidelines, no card or bank account data is stored on our servers at any point.

• Order and invoice records — retained for a minimum of eight financial years as required by Indian tax law.
• Account data — retained while your account is active, and deleted on request unless a legal obligation applies.
• Project brief and delivery files — retained for 12 months after delivery so you can request them again, then deleted.
• Marketing consent records — retained until you unsubscribe, plus a short period to honour the unsubscribe.

• The site is served over HTTPS/TLS, so data in transit is encrypted.
• Passwords are stored only as one-way hashes and are never recoverable, even by us.
• Access to customer data is limited to the people who need it to deliver your work.
• Payment credentials never touch our servers.

No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as required under the DPDP Act.

Under the DPDP Act you may:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct data that is inaccurate, incomplete or out of date.
• Erase data we no longer need for the purpose it was collected for, subject to legal retention rules.
• Withdraw consent for any processing based on it.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Complain to our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.

Write to us with your request and we will respond within 30 days. We may ask you to verify your identity first.

We use a small number of cookies:

• Essential — to keep your session and cart working. These cannot be switched off without breaking the site.
• Analytics — to understand which pages are useful. These run only where analytics is enabled and, where required, after you consent.

Your cart is stored in your browser's local storage, not on our servers, and clearing your browser data removes it.

Our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy as our services or the law change. The "last updated" date at the top always reflects the current version, and material changes will be highlighted on this page.

For any privacy question, data request or complaint:

• Support: info@qwikure.com
• Grievance Officer (Gudise Subbarayudu and Yarraballe Pillikandla Chinna Yallaiah): grievance@qwikure.com
• Registered address: Plot No. - 4/2, Sector 1, Huda Techno Enclave, Hi-Tech City, Madhapur, Hyderabad, Rangareddy, Telangana - 500081.

This policy is governed by the laws of India.

See the full grievance redressal process →