PRIVACY POLICY

This Privacy Policy is issued in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and applies to personal data collected by AlloyInk as a Data Fiduciary.

1. Information We Collect We may collect your name, phone number, WhatsApp contact details, vehicle make/model, wheel photographs and condition details, and payment/invoicing information, when you enquire about or avail our services, including via the “Ink Your Way” WhatsApp channel or our website enquiry form.

2. Purpose of Processing AlloyInk — Alloy Wheel Refurbishment & Customisation Studio, Mohali Page 1 of 2Personal data is processed strictly for: (a) preparing quotations and processing your service order; (b) communicating updates on job status and turnaround; (c) invoicing and payment collection; (d) sharing before/after images in our InkFolio gallery or marketing, only with your explicit consent; and (e) improving our services and responding to queries or grievances.

3. Lawful Basis & Consent We process personal data on the basis of your consent, given at the time you share information with us (including over WhatsApp), and for the specified, legitimate purposes above. You may withdraw consent at any time, except where retention is required by law or to complete an already-committed transaction.

4. Data Sharing & Disclosure We do not sell personal data. Limited data may be shared with: (a) payment processors to complete transactions; (b) courier/logistics partners where wheel pickup/delivery is arranged; and (c) government or regulatory authorities where legally required. Any such sharing is limited to what is necessary for the stated purpose.

5. Data Retention & Security Personal data is retained only for as long as necessary to fulfil the purposes above or to meet statutory record-keeping obligations, and is then securely deleted or anonymised. We implement reasonable security practices, as contemplated under the IT Rules, 2011, including restricted access to customer records and secure storage of photographs and invoices.

6. Your Rights As a Data Principal under the DPDP Act, 2023, you have the right to: access a summary of personal data we hold about you; request correction or erasure of inaccurate or no-longer-necessary data; withdraw consent; and nominate another individual to exercise these rights on your behalf in the event of death or incapacity. Requests may be sent to our grievance contact below and will be addressed within a reasonable time.

7. Cookies & Website Usage Our website may use basic cookies or analytics to understand visitor traffic and improve user experience. No sensitive personal data is collected through cookies without your consent.

8. Grievance Officer In compliance with the IT Rules, 2011 and the DPDP Act, 2023, any privacy-related query, complaint, or data-access/correction request may be directed to AlloyInk’s designated Grievance/Data Protection contact, to be published on our website and invoices, who shall acknowledge and address the request within the statutory timelines.

9. Changes to this Policy AlloyInk may update this Privacy Policy from time to time to reflect changes in law or our practices. The “Effective Date” above will be updated accordingly, and continued use of our services after such changes constitutes acceptance of the revised policy. AlloyInk — Industrial Area Phase 3, Mohali, Punjab, India | Contact: contact@alloyink.in | This document is a general-purpose draft prepared for business use and does not constitute legal advice;

AlloyInk is advised to have it reviewed by a qualified Indian lawyer before publication.