- Home
- ›
- Privacy Policy
Privacy Policy
How T3 Sports collects, uses, stores and protects your personal data under India's Digital Personal Data Protection Act 2023 and the Information Technology Act 2000.
check_circleThe 30-second version
- T3 Sports collects only what is needed to deliver your order and run your account.
- We never sell your personal data. Sharing is limited to delivery, payment and email partners.
- You can ask for a copy of your data, correct it, or delete it any time by emailing our Grievance Officer.
- Policy follows the Digital Personal Data Protection Act 2023, the IT Act 2000 and the IT Rules 2011.
1Data we collect
We collect two broad categories of data: information you give us, and information we observe when you use the site.
A. Information you provide
- Name, email address and mobile number when you create an account or check out as guest
- Shipping address, billing address and pincode
- Order history, wishlist items and product reviews
- Customer support messages, returns requests and feedback forms
- Marketing preferences (newsletter opt-in, SMS opt-in)
B. Information collected automatically
- Device type, browser, operating system, IP address (last octet masked after 30 days)
- Pages viewed, products clicked, search terms, referring URL
- Cart contents and session timestamps
C. Sensitive personal data or information (SPDI under IT Rules 2011)
- We do not take card payments on the website. Payment is arranged directly with our team (UPI, bank transfer and other India options) after your quote is confirmed, so T3 Sports does not collect, view or store card numbers, CVV or expiry dates.
- We do not collect biometric data, health data, sexual orientation or political views
2Why we collect it
| Purpose | Data used |
|---|---|
| Process and deliver your order | Name, address, phone, email, order details |
| Send order, shipping and return updates | Email, phone (SMS/WhatsApp where opted in) |
| Run your account and order history | Account details, order records |
| Customer support and grievance handling | Contact details, message content, order reference |
| Fraud prevention and chargeback defence | IP, device fingerprint, billing-shipping address match |
| Improve the website, catalogue and stock mix | Aggregated analytics, anonymous click data |
| Send marketing emails or SMS (only with consent) | Email, phone, name |
| Comply with Indian tax, accounting and audit law | Invoice records, GSTIN where provided |
3Legal basis under the DPDP Act 2023
Under Section 6 of the Digital Personal Data Protection Act 2023, personal data is processed only on a lawful ground. We rely on:
- Consent — for newsletters, marketing SMS, optional cookies and analytics
- Performance of contract — to deliver orders you have placed
- Legal obligation — to retain invoices and GST records as required by the Central Goods and Services Tax Act 2017 and the Income Tax Act 1961
- Legitimate use — for security, fraud prevention and to defend against legal claims
You can withdraw consent at any time. Withdrawal does not affect processing already carried out before withdrawal.
5How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Order and invoice records | 8 years | Required by GST Act 2017 (Section 36) and Income Tax Act 1961 |
| Account details (active customers) | While account is active | To run the account |
| Account details (inactive) | 2 years after last login, then anonymised | Account dormancy policy |
| Customer support tickets | 3 years from closure | Defence against consumer-court claims under CPA 2019 |
| Marketing consent records | Until withdrawn + 6 months | Prove consent was valid at time of send |
| Analytics (anonymous) | 26 months | Year-over-year reporting |
| Cart contents (logged-out) | 30 days | Allow you to resume checkout |
6How we keep your data safe
We follow "reasonable security practices" as defined by Rule 8 of the IT Rules 2011 and Section 8 of the DPDP Act 2023:
- HTTPS / TLS 1.3 encryption on every page and API call
- Passwords hashed with bcrypt — never stored in plain text
- Row-Level Security policies on the database, audited under migrations 008–014
- Admin access requires two-factor authentication
- Servers hosted in India and the EU on SOC 2 Type II certified providers
- Quarterly internal access audit and annual penetration test
- 72-hour breach notification window to affected users and the Data Protection Board of India, as required by Section 8(6) of the DPDP Act
7Your rights as a Data Principal
Under Chapter III of the DPDP Act 2023, you can:
- Right to access — request a summary of personal data held about you and a list of recipients
- Right to correction and erasure — fix wrong data or ask us to delete it
- Right to nominate — name a person to exercise your rights in case of death or incapacity
- Right to grievance redressal — escalate any complaint to our Grievance Officer (Section 11 below)
- Right to withdraw consent — opt out of marketing, optional cookies and any consent-based processing
- Right to portability — receive your data in a structured, commonly used format
To exercise any right, email t3hockeyindia@gmail.com from the email address linked to your account. We respond within 30 days as required by Rule 5(9) of the IT Rules 2011 and Section 13 of the DPDP Act 2023.
8Data of children under 18
Per Section 9 of the DPDP Act 2023, T3 Sports does not knowingly process personal data of any child under the age of 18 without verifiable parental or guardian consent. If you are a parent and believe your child has created an account, please contact our Grievance Officer for prompt deletion.
Our products are marketed to junior, youth, intermediate and senior players. Where junior gear is purchased, the account must be held by a parent or guardian.
10International data transfers
Some of our service providers (for example WhatsApp / Meta, Google Analytics, and our hosting and database providers) may process data on servers outside India, including the United States and the European Union. We rely on contractual safeguards equivalent to those notified by the Central Government under Section 16 of the DPDP Act 2023, and on each provider's published certifications (such as SOC 2 and ISO 27001).
11Grievance Officer
Appointed under Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 and Section 13 of the DPDP Act 2023.
T3 Sports Grievance Officer
- Email: t3hockeyindia@gmail.com
- Postal address: T3 Sports, Grievance Cell, India
- Response window: within 30 days of receipt of complaint
- Working hours: Monday to Friday, 10:00 to 18:00 IST (excluding public holidays)
If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India once the Board is operational, or approach the appropriate consumer redressal forum under the Consumer Protection Act 2019.
12Updates to this policy
We may update this policy when laws change, when we add new features, or when we change service providers. Material changes will be highlighted at the top of this page and emailed to registered customers at least 15 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.
13Contact us
General privacy questions or feedback on this policy:
- Email: t3hockeyindia@gmail.com
- Contact form: t3hockey.com/contact
- Customer support: t3hockey.com/help-support