Privacy Policy

SuperKey Private Limited

Effective Date: 17 October 2026

Website: https://superkey.in/

1. Introduction and Scope

This Privacy Policy applies to SuperKey Private Limited (“SuperKey”, “Company”, “we”, “us” or “our”), including our websites, online checkout, customer support channels, IT services, digital products, subscriptions and physical products, as applicable.

Our websites include https://superkey.in/ and https://checkout.superkey.in/.

This policy should be read with our Terms of Service, Refund and Returns Policy, applicable subscription terms, product terms and any service agreement relevant to your transaction.

The information we collect depends on how you interact with us, which services you use, which products you purchase and which payment methods are available for your transaction.

2. Products and Services Covered

Depending on availability and the particular offering, our business may include the following IT services, digital services and products:

• Website design, development, redesign and maintenance.
• Software development, custom software and business applications.
• Mobile application development and maintenance.
• IT support, technical assistance, troubleshooting and consulting.
• Cloud services, hosting, domain-related services and server support.
• Digital marketing, search engine optimisation and online promotion.
• Artificial intelligence solutions, automation and workflow tools.
• Cybersecurity and related technology services, where offered.
• CRM, ERP and other business software solutions.
• UI/UX design, graphic design and digital creative services.
• IT training, implementation, integration, configuration and other IT services.
• Digital products, software licences and subscription-based services.
• Android phones, iPhones and other electronic products, where offered.

The list above describes categories of services and products that may be offered. It does not guarantee that every service, product, feature or payment option is available at all times.

3. Personal Information We Collect

3.1 Identity and contact information

We may collect your name, email address, telephone number, business name, contact preferences and other details you provide when creating an account, submitting an enquiry, requesting a quotation or contacting us.

3.2 Billing, delivery and transaction information

Depending on the transaction, we may collect billing and delivery addresses, order details, invoice information, tax details where applicable, order references, transaction amounts, payment status, refund status and related customer service records.

3.3 Account and service information

If you use an account, software service, subscription or customer portal, we may process account identifiers, login-related records, subscription status, service preferences, configuration details and information required to provide the requested service.

3.4 Project files and business information

For IT projects and professional services, you may provide project specifications, business documents, website content, designs, files, software requirements, technical information and communications. We use this information to assess requirements, perform agreed work, provide support and manage the customer relationship.

Please provide only information you are authorised to share. Do not send passwords, payment authentication secrets or sensitive third-party information through ordinary email or other unsecured channels.

3.5 Website and technical information

When you access our website, we or our service providers may process information such as IP address, browser type, operating system, device category, language, referring page, pages visited, timestamps, diagnostic logs and website interaction data. We use such information for relevant purposes such as website operation, analytics, troubleshooting and security.

3.6 Communications and support information

We may retain enquiries, emails, support tickets, complaint details, feedback and communications through channels used to contact us, to the extent reasonably necessary to respond, deliver services, maintain records and resolve issues.

3.7 Information received from other parties

Where appropriate and permitted by law, we may receive order confirmations from payment providers, delivery updates from logistics partners, verification results from authorised providers and information supplied by a customer or their authorised representative.

4. How We Use Personal Information

We may use information for the following purposes, as applicable:

• Responding to enquiries and providing quotations or proposals.
• Creating and managing customer accounts and service requests.
• Delivering IT services, software, digital products and electronic products.
• Managing projects, technical support, maintenance and service updates.
• Processing orders, payments, invoices, deliveries, returns and refunds.
• Administering subscriptions, renewals, cancellations and service entitlements.
• Facilitating eligible EMI or instalment transactions through relevant providers.
• Sending transaction confirmations, service notices and important updates.
• Maintaining website functionality, troubleshooting and improving user experience.
• Preventing fraud, abuse, unauthorised transactions and security incidents.
• Managing complaints, disputes and customer support.
• Complying with applicable tax, accounting, consumer protection and other legal requirements.
• Sending promotional communications where permitted by law and subject to applicable preferences and consent requirements.

5. Lawful Processing and Consent

We process personal information in accordance with applicable law. Depending on the circumstances, the applicable legal basis may include consent, steps requested before entering into a contract, performance of a contract, compliance with legal obligations or another lawful basis recognised by applicable law.

Where consent is required, we will seek it through an appropriate process. Where consent can lawfully be withdrawn, you may use the relevant withdrawal method or contact us. Withdrawal does not affect processing lawfully carried out before withdrawal and does not prevent processing that is independently permitted or required by law.

We will apply the data protection provisions and commencement requirements relevant to the processing activity and the law in force at the time.

6. IT Services and Customer-Provided Data

When delivering IT services, we may process customer information and project materials to perform the agreed work, configure systems, resolve technical issues, provide support, maintain services and fulfil contractual obligations.

Customers must ensure that they have the necessary rights, permissions and lawful authority to provide any personal data, content or documents supplied to us. Customers should not provide more information than is reasonably necessary for the relevant service.

Where we process personal data on behalf of a business customer, the parties should establish their respective responsibilities, processing instructions, security requirements, confidentiality obligations and deletion or return arrangements through the applicable agreement, where appropriate.

We do not obtain ownership of customer content merely because it is provided for a project. Rights in deliverables, software, licences, designs and other materials are governed by the applicable contract and intellectual property law.

7. Products, Orders, Delivery and Warranty

We may sell physical electronic products, including Android phones, iPhones and other electronics, and may also supply digital products and software-related services.

To fulfil an order, we may process your name, contact details, billing or delivery address, order information, payment status and relevant delivery instructions.

Where necessary, order information may be shared with suppliers, delivery partners, authorised service centres, warranty providers and other parties involved in fulfilment or after-sales support.

Product specifications, availability, delivery estimates, warranty coverage, returns, replacements and refunds are governed by the relevant listing, invoice, warranty terms and published policies. Nothing in this Privacy Policy is intended to remove consumer rights that cannot lawfully be excluded.

8. Subscriptions and Recurring Payments

Depending on the service, we may offer daily, weekly, monthly, yearly or custom-duration subscriptions. Auto-renewal or recurring billing may be available for eligible plans where the necessary payment arrangements and customer authorisation are in place.

Subscription information may include your selected plan, price, billing frequency, start date, renewal date, payment status, service entitlement, cancellation request and related transaction records.

• The applicable checkout or offer should disclose the subscription price, billing period, duration and material renewal terms before purchase.
• Recurring payments will be processed only through the applicable payment arrangement and required authorisation.
• Renewals will follow the disclosed plan terms and applicable payment-provider requirements.
• You may request cancellation using the method stated for the relevant service or subscription.
• The effect of cancellation on access, future billing and refunds depends on the applicable terms and law.
• We may send service notices, renewal reminders, billing confirmations and failed-payment notifications where appropriate.

Cancelling a future renewal does not automatically make an earlier payment refundable. Refund eligibility is determined by the applicable refund policy, service terms and mandatory law.

Where a third-party provider manages a recurring payment mandate, its authorisation, authentication and processing requirements may also apply.

9. EMI and Instalment Payments

EMI or instalment options may be available for eligible transactions through a bank, card issuer, lender, financing partner or payment service provider. Availability depends on the transaction, provider rules, eligibility criteria and the options presented at checkout.

If you select EMI or financing, the relevant provider may process information required to assess eligibility, authorise the transaction, establish repayment arrangements and administer the facility. The provider’s privacy notice, financing agreement and applicable regulatory requirements govern its own processing.

Applicable interest, processing fees, repayment schedules and other financing conditions should be reviewed before confirming a transaction. SuperKey does not guarantee that every product, service or customer will qualify for EMI or any particular financing arrangement.

10. Payment Processing and Payment Information

Depending on availability, payment methods may include UPI, credit cards, debit cards, net banking, wallets, bank transfers, EMI or instalments and recurring payment arrangements.

Payments may be processed through third-party payment gateways, aggregators, banks, card networks, UPI participants or other payment service providers. The specific provider may vary and has not been identified in this policy.

For transaction processing, relevant information may be shared with the applicable provider, including order reference, transaction amount, payment status, contact details and information necessary for authentication, reconciliation, fraud prevention, refunds or dispute handling.

Depending on the payment method, payment credentials and authentication information may be collected directly by the relevant payment provider. Do not share your UPI PIN, banking password, card security code, one-time password or other payment authentication secrets with our customer support team.

Our intended practice is not to request or store complete payment credentials or authentication secrets in ordinary customer support records. Limited transaction records, such as payment status, transaction references, invoices and refund references, may be retained for accounting, customer support, reconciliation and legal purposes.

The actual processing and security controls of a payment provider are governed by its own policies, terms and applicable requirements. No method of online transmission or storage can be guaranteed to be completely secure.

11. Cookies and Analytics

Our website may use cookies and similar technologies to support essential functions, maintain sessions, remember preferences, measure website performance, understand usage and support security.

Where analytics or advertising technologies are used, their operation will be subject to applicable legal requirements, consent requirements and available preference controls.

You can manage cookies through your browser settings and any cookie preference tool provided on the website. Disabling certain cookies may affect checkout, login or other website functions.

12. Email, SMS and WhatsApp Communications

We may use email, SMS, telephone or WhatsApp to communicate about enquiries, orders, payments, service delivery, subscriptions, support, complaints and important account or policy matters.

We may also send promotional or marketing communications where permitted by applicable law and where required consent or other applicable requirements have been satisfied.

You may opt out of promotional communications through the available unsubscribe or opt-out process, or by contacting us. We may continue to send essential transactional, security, legal or service-related messages where appropriate.

If third-party communication providers process information on our behalf, they may receive the details necessary to deliver the relevant message, subject to applicable requirements.

13. When We Share Information

We do not sell personal information as a standalone commercial product. We may share information when reasonably necessary for the purposes described in this policy and as permitted or required by applicable law.

• IT and hosting providers: providers supporting website hosting, cloud infrastructure, software tools, storage and technical operations.
• Payment providers: payment gateways, banks, card networks, UPI participants, wallet providers and financing partners.
• Fulfilment partners: suppliers, couriers, delivery services, warranty providers and authorised repair partners.
• Communication providers: providers used to deliver email, SMS, WhatsApp or support communications.
• Professional advisers: accountants, auditors, lawyers, insurers and other advisers where appropriate.
• Authorities: courts, regulators, law enforcement agencies or other parties where disclosure is legally required or lawfully necessary.
• Business transactions: relevant parties involved in a merger, restructuring, acquisition or transfer, subject to applicable requirements.
• Authorised recipients: parties you ask us to involve in delivering your requested service.

We seek to limit disclosures to information reasonably necessary for the relevant purpose. Third parties may process information under their own privacy policies, contractual obligations and applicable law.

14. Third-Party Websites and Services

Our website may link to third-party websites, payment pages, social media platforms, software or other external services. Those services may have their own privacy policies and terms.

We do not control the independent privacy practices of third parties. You should review their policies before providing information directly to them.

15. Data Retention and Deletion

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing services, managing subscriptions, maintaining business records, resolving disputes, processing refunds and complying with legal obligations.

Retention periods depend on the type of information, the purpose of processing and applicable legal requirements. When information is no longer required, we will take appropriate steps to delete it, anonymise it or otherwise dispose of it, subject to lawful retention requirements, disputes and backup or technical limitations.

16. Information Security

We seek to use reasonable technical and organisational measures appropriate to the information and services involved to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

Depending on the service, measures may include access restrictions, account controls, secure transmission, appropriate backup practices, security updates, service-provider oversight and incident response procedures. Actual measures depend on the relevant systems and operational arrangements.

No website, storage method or electronic transmission is completely risk-free. You should protect your account credentials and contact us if you suspect unauthorised use of your account or a transaction.

17. Data Breach Response

If we become aware of a personal data breach involving information under our responsibility, we will assess and respond in accordance with applicable law and our incident-response procedures. Where notification to individuals or authorities is legally required, we will follow the applicable requirements and timelines.

18. International Processing

Certain third-party service providers may process or store information outside your state or country. Where this occurs, we will follow applicable legal requirements for such processing and transfers.

19. Your Privacy Rights and Choices

Subject to applicable law and the provisions in force, you may be entitled to request access to information about your personal data, correction or updating of inaccurate information, deletion where legally available, withdrawal of consent or other applicable rights.

To make a request, contact us using the details in this policy. We may need to verify your identity or authority before acting on the request. We will respond within applicable legal timelines.

Some information may need to be retained where required by law or where otherwise lawfully necessary for accounting, contractual, security or dispute-related purposes.

You may opt out of marketing communications as described in Section 12. Essential service and transaction communications may still be sent where appropriate.

20. Children’s Privacy

Our services are not specifically directed at children unless an offering expressly states otherwise. Where children’s personal data is involved, we will follow applicable requirements concerning age, parental consent and other safeguards, as relevant to the service and law in force.

21. Business Customers and Confidentiality

Business customers may be subject to separate service agreements, statements of work or data-processing agreements covering confidentiality, information security, permitted use, intellectual property, data handling and project responsibilities.

Where SuperKey processes personal data on behalf of a business customer, the parties should document their respective roles and responsibilities in the applicable agreement where appropriate. Customers remain responsible for ensuring they have the necessary authority to provide information to us.

22. Automated Tools and Fraud Prevention

We or our service providers may use automated tools for website diagnostics, spam prevention, transaction validation, security, fraud prevention and operational analysis.

Where applicable law grants rights or safeguards concerning decisions made solely by automated means, we will address relevant requests in accordance with those requirements.

23. Complaints and Grievance Redressal

If you have a question, privacy concern or complaint about our handling of personal information, please contact our grievance contact using the details below. Include enough information to identify the issue, but do not send unnecessary sensitive information.

We will handle complaints within the timelines required by applicable law. Where a particular designation, grievance procedure, complaint acknowledgement or additional disclosure is legally required, we will provide it as applicable.

25. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business, services, technology, operational practices or legal requirements. The updated version will be published on the relevant website with a revised effective date.

Where applicable law requires notice or consent for a change, we will follow the relevant requirements. We encourage you to review this page periodically.

26. Related Policies

• Terms of Service
• Refund and Returns Policy
• About Us

27. Governing Law

This Privacy Policy is intended to operate subject to the laws of India and other applicable laws. Nothing in this policy excludes or limits a right, remedy or protection that cannot lawfully be excluded or limited.