07 / Privacy
PRIVACY POLICY.
Effective: 2026-08-03 (UTC).
Last updated: 2026-08-03 (UTC).
§1 · Who we are
This policy applies to loadout.co.in, operated by Onyx Enterprises (partnership firm, MSME registered under Udyam) trading under the brand name 'Loadout'. Registered office: 479, Tower A, Bhutani Alphathum, Sector 90, Noida, Uttar Pradesh 201304, India. Contact: support@loadout.co.in · +91 8368249423.
§2 · Data we collect
- Account data (name, email, phone on checkout)
- Order & payment data (Razorpay-mediated; we hold tokenised last-4 card data only)
- Shipping data (PIN, address)
- Behavioural data (anonymised, GA4 — opt-out in §8)
- Cookies (Shopify, Razorpay, GA4)
- Customer-support correspondence (WhatsApp, email)
§3 · How we use it
Order fulfilment, customer support, warranty / RMA, regulatory compliance (tax invoicing), fraud detection (Razorpay-side), product improvement (anonymised aggregates only). We DO NOT sell or rent your data.
§4 · Who we share with
- Shiprocket (Shipping) — retention 7 years
- Razorpay Software Pvt Ltd (Payments) — retention 8 years
- Shopify (Storefront) — retention while account active
- Mailmodo / Klaviyo / Brevo / SendGrid (Newsletter, only after explicit double-opt-in) — retention until unsubscribe
- Government authorities (Compliance only) — retention per law
§5 · DPDP rights
Under India's DPDP Act 2023, you have: Right to access and correct · Right to erasure · Right to grievance redressal (named officer) · Right to nominate. Contact: support@loadout.co.in — our single email of record.
§6 · Retention
Order and invoice records: 8 years (Income Tax Act, 1961 requirement). Marketing subscription: until you unsubscribe. Customer-support thread: 24 months.
§7 · International transfers
Some vendors (Shopify, Razorpay) store data in their global regions. We have reviewed their India-DPDP addenda. Cross-border transfer scope is limited to essential service delivery; not for marketing.
§8 · Cookies
| Cookie | Purpose | Expires | Opt-out |
|---|---|---|---|
| cart_token | cart persistence | 14 days | clear cookies |
| shopify_* | storefront session | session | clear cookies |
| razorpay_* | payment UA | session | Razorpay session |
| _ga / _gid | GA4 analytics | 90 days | install DNT or block |
§9 · Children
Our storefront is not targeted at children under 18. We do not knowingly collect data from anyone under 18. If we discover we have, we erase it.
§10 · Grievance officer
Mihir Paul
+91 8368249423
Noida, Uttar Pradesh 201304, India
§11 · Policy changes
We will publish updates at this URL with a new effective date. Material changes are also emailed to active customers 30 days in advance.
§12 · Contact
See our Contact page.
§13 · Do-not-display carve-out
We do not publish GST, PAN, or corporate ID on this privacy policy or anywhere on loadout.co.in. Onyx Enterprises is the contracting entity responsible for the data lifecycle.