Privacy Policy

Privacy & Policy

REALM CORP. (" NUWOD ", " we ", " us ", " our "), operating www.nuwod.com and any associated mobile applications (collectively, the " Platform "), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data, and describes your rights, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 , and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using the Platform, you consent to the collection and use of your information as described in this Policy.

Data Fiduciary

For the purposes of the DPDP Act, 2023, REALM CORP. is the Data Fiduciary responsible for determining the purpose and means of processing your personal data collected through the Platform.

Information We Collect 

Information You Provide

Name, email address, phone number, delivery/billing address;
Account credentials (username, password — stored in encrypted/hashed form);
Payment-related information (processed via third-party payment gateways; NUWOD does not store full card numbers or CVV);
Order history, preferences, wishlist, and product reviews;
Communications with our customer support team;
Information submitted via forms (e.g., contests, newsletters, feedback).

Information Collected Automatically 

 Device information (IP address, browser type, operating system);
 Usage data (pages visited, time spent, click patterns) via cookies and similar tracking technologies;
 Approximate location (derived from IP address or shared explicitly), used to improve delivery estimates and content relevance.

 
Information from Third Parties

Information from payment gateways confirming transaction status;

Information from social login providers (e.g., Google), if you choose to sign in via such services, limited to what you authorise them to share;

Delivery status updates from our logistics/courier partners

Purpose and Legal Basis for Processing 

We process your personal data for the following purposes, on the basis of your consent (which you may withdraw at any time, subject to Section 9) or as otherwise permitted under the DPDP Act (e.g., for compliance with legal obligations):

Processing and fulfilling your orders, including shipping, returns, and refunds;

Creating and managing your account;

Customer support and grievance redressal;

Sending order updates, transactional alerts, and (with your consent) marketing communications;

Improving our Platform, products, and user experience through analytics;

Fraud prevention, security, and legal compliance;

Personalising product recommendations and content.


Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage. You can control cookie preferences through your browser settings; disabling certain cookies may affect Platform functionality. Where required, we will present a cookie consent banner allowing you to manage non-essential cookies


Sharing and Disclosure of Information

We do not sell your personal data. We may share your information with:

Logistics and courier partners , to fulfil deliveries;

Payment gateways and banks , to process transactions, in compliance with RBI data localisation and security norms;

Brand partners/manufacturers , solely for warranty registration or claims, where applicable and with your knowledge;

Service providers engaged for hosting, analytics, customer support, and marketing, bound by confidentiality obligations;

Legal and regulatory authorities , where required under applicable law, court order, or to protect our legal rights;

Business transferees , in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.

Any third party processing your data on our behalf does so under contractual obligations consistent with this Policy and the DPDP Act.


Data Storage and Security

We implement reasonable security practices and procedures as mandated under the IT Act, 2000 and applicable rules, including encryption of sensitive data, access controls, and secure servers.

Your data is primarily stored on servers located in INDIA.

While we take reasonable steps to protect your data, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.


Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, comply with legal, tax, and accounting obligations (including under the Consumer Protection Act, 2019 and applicable GST laws), or resolve disputes. Account data is retained until you request deletion, subject to statutory retention requirements.


Your Rights Under the DPDP Act, 2023

As a Data Principal, you have the right to:

Access a summary of the personal data we hold about you and the processing activities undertaken;

Correction and updating of inaccurate or incomplete personal data;

Erasure of personal data that is no longer necessary for the purpose it was collected, subject to legal retention requirements;

Grievance redressal , by contacting our Grievance Officer/Data Protection Contact (Section 11);

Withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing carried out prior to withdrawal;

Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

To exercise these rights, please write to us at brands@realminc.in . We will respond within the timelines prescribed under the DPDP Act and its rules.


Withdrawal of Consent