Privacy Policy

1. Introduction

This Privacy Policy explains how Mizusun Pvt. Ltd. ("Mizusun", "HydroPulse", "we", "us", or "our"), the manufacturer and seller of HydroPulse electronic water conditioners, collects, uses, stores, shares, and protects your personal data when you visit hydropulseindia.com (the "Website"), purchase our products, request a quote, or otherwise interact with us.

We are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

By using the Website or providing your personal data to us, you confirm that you have read and understood this Policy. If you do not agree with it, please do not use the Website or submit your information.

2. Who We Are (Data Fiduciary Details)

Under the DPDP Act, Mizusun Pvt. Ltd. acts as the Data Fiduciary in respect of the personal data described in this Policy.

Legal Entity	Mizusun Pvt. Ltd.
Brand	HydroPulse
Registered Office	Plot no. 2038/B, Malgaon Savali Road, Malgaon, Sangli - 416410
CIN	[Insert Corporate Identification Number]
GSTIN	[Insert GST Number]
Email	info@mizusun.com
Phone / WhatsApp	+91 9090991090

3. The Personal Data We Collect

We collect only the data necessary to operate our business, fulfil orders, and provide support. The categories below describe what we may collect.

3.1 Data You Provide Directly

• Identity & contact data: name, email address, phone/WhatsApp number, shipping and billing address.
• Order data: products purchased, quantities, order value, pipe size/sector details you share to size a unit.
• Enquiry data: information you submit through contact forms, quote requests, ROI calculators, or WhatsApp messages (e.g., sector, flock size, pipe diameter, TDS level, location).
• Communications: messages, feedback, reviews, testimonials, and correspondence with our team.

3.2 Data Collected Automatically

• Device & usage data: IP address, browser type, operating system, device identifiers, pages visited, time spent, referring URLs.
• Cookies and similar technologies: see our separate Cookie & Security Policy.

3.3 Payment Data

We do not store your full card numbers, CVV, UPI PIN, or net-banking credentials. Payments are processed by our payment gateway partner, Razorpay, which handles your payment information under its own PCI-DSS-compliant systems. We receive only a transaction confirmation, order ID, and limited reference details.

3.4 Sensitive Personal Data

We generally do not seek sensitive personal data. Please do not send us health, biometric, financial account passwords, or similar sensitive information unless specifically requested for a legitimate purpose.

4. How and Why We Use Your Data (Purposes)

We process your personal data for the following purposes:

• Order fulfilment — to process, ship, and deliver your HydroPulse products PAN-India, and to manage returns and warranty claims.
• Payments — to facilitate secure payment via Razorpay and to detect and prevent fraudulent transactions.
• Customer support — to respond to enquiries, quote requests, WhatsApp messages, and warranty/service requests.
• Account & communication — to send order confirmations, shipping updates, invoices, and important service notices.
• Marketing (with consent) — to send offers, product updates, and newsletters where you have opted in. You may opt out at any time.
• Website improvement & analytics — to understand how visitors use the Website and improve performance, content, and user experience.
• Legal compliance — to comply with tax, accounting, consumer-protection, and other legal obligations.
• Security — to protect the Website, prevent misuse, and secure our systems and your data.

5. Legal Basis for Processing (DPDP Act)

Under the DPDP Act, 2023, we process your personal data on the following bases:

• Consent — where you voluntarily provide data (e.g., contact forms, marketing sign-up). Consent is free, specific, informed, unconditional, and unambiguous, and may be withdrawn at any time.
• Legitimate uses — including processing data you have voluntarily provided for a specified purpose, fulfilling a contract (your order), and complying with legal obligations.

Where processing relies on consent, you may withdraw it at any time by contacting us (see Section 12). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for essential site functioning, analytics, and (with your consent) marketing. A detailed explanation, including how to manage or disable cookies, is provided in our Cookie & Security Policy, which forms part of this Privacy framework.

7. How We Share Your Data

We do not sell your personal data. We share it only as necessary, with:

• Payment gateway: Razorpay, for processing payments.
• Logistics & courier partners: to deliver your order and manage returns.
• Technology service providers: hosting, database (e.g., our backend infrastructure), email, analytics, and communication tools that process data on our behalf under appropriate safeguards.
• Professional advisers: accountants, auditors, and legal advisers, where required.
• Government / regulatory authorities: where required by law, court order, or to protect our legal rights.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to confidentiality.

All third parties who process data on our behalf are required to safeguard it and use it only for the agreed purposes.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including:

• Order, invoice, and tax records: retained for the period required under Indian tax, accounting, and company law (typically up to 8 years).
• Warranty records: retained for the warranty period (2 years) plus a reasonable buffer to service claims.
• Marketing data: retained until you withdraw consent or unsubscribe.
• Enquiry / quote data: retained for a reasonable period to respond and follow up.

When data is no longer needed, we securely delete or anonymise it.

9. How We Protect Your Data

We implement reasonable security practices and procedures as required under the IT Act and DPDP Act, including:

• Encryption of data in transit (HTTPS/TLS).
• Access controls and role-based restrictions on who can view personal data.
• Secure, reputable hosting and database infrastructure.
• Use of a PCI-DSS-compliant payment gateway (Razorpay) so we never handle raw card data.
• Regular review of our security measures.

While we take strong precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work continuously to protect your data. Further detail is in our Cookie & Security Policy.

10. Data Breach Notification

In the event of a personal data breach, we will take prompt remedial action and notify the Data Protection Board of India and affected individuals where required under the DPDP Act and applicable rules.

11. Your Rights (Data Principal Rights)

Subject to applicable law, you have the right to:

• Access — request a summary of the personal data we hold about you and how it is processed.
• Correction & updating — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data where it is no longer required and no legal obligation requires us to retain it.
• Withdraw consent — withdraw previously given consent at any time.
• Grievance redressal — raise a complaint with our Grievance Officer.
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.

To exercise any right, contact us using the details in Section 12. We will respond within the timelines required by law. We may need to verify your identity before acting on a request.

12. Grievance Officer & Contact

In accordance with the IT Act, the Consumer Protection (E-Commerce) Rules, 2020, and the DPDP Act, the contact point for privacy queries, consent withdrawal, and grievances is:

Grievance Officer	Pravin Chipparge
Company	Mizusun Pvt. Ltd.
Email	info@mizusun.com
Phone / WhatsApp	+91 9090991090
Address	Plot no. 2038/B, Malgaon Savali Road, Malgaon, Sangli - 416410

We aim to acknowledge grievances within 48 hours and resolve them within the period prescribed by applicable law (generally within 30 days).

13. Children's Privacy

The Website and our products are intended for adults (18 years and above). We do not knowingly collect personal data from children. As required by the DPDP Act, we do not process children's data without verifiable parental/guardian consent. If you believe a child has provided us data, please contact us so we can delete it.

14. Third-Party Links

The Website may contain links to third-party sites (e.g., Razorpay, social media, courier tracking). This Policy does not apply to those sites. We encourage you to review their privacy policies before sharing data with them.

15. International Users

The Website is operated from India and primarily serves customers in India. If you access it from outside India, you do so on your own initiative and are responsible for compliance with local laws. Any data transfers are handled in accordance with applicable Indian law.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The "Last Updated" date will indicate the latest revision. Material changes will be communicated where appropriate. Continued use of the Website after changes constitutes acceptance of the updated Policy.

17. Governing Law

This Policy is governed by the laws of India. Any disputes are subject to the exclusive jurisdiction of the competent courts at Sangli / Kolhapur, Maharashtra.