Skip to content

Legal

Privacy Policy

Revision: July 2026 · Applies to preflightlabs.in and its subdomains.

1. What we collect

We collect only what operating the store requires:

  • Order & quote data — name, email, organisation, billing address and optional GSTIN, together with the items and configuration you request.
  • Contact messages — the name, email and message you submit through the contact form.
  • Essential cookies — an anonymous encrypted session cookie (pfl_session) and an encrypted cart cookie (pfl_cart). Both are HTTP-only and strictly same-site. We set no analytics, advertising or tracking cookies.

2. How your data is protected

Form payloads (orders, quotes, contact messages) are encrypted in your browser with ephemeral-key hybrid encryption (ECDH P-256 + AES-256-GCM) before transmission, on top of TLS. Session and cart cookies are sealed with authenticated encryption and are unreadable to scripts.

Payment card details are collected and processed by Razorpay, our PCI-DSS-compliant payment gateway. Card numbers never reach Preflight Labs servers.

3. How we use it

  • To fulfil orders, prepare quotes and respond to enquiries.
  • To issue invoices and manage our customer relationships (we use Zoho CRM and Zoho Books as processors for this purpose).
  • To meet legal obligations, including export-control screening for restricted platforms and tax/accounting requirements.

4. What we never do

  • No sale or rental of personal data.
  • No advertising trackers, no third-party analytics beacons.
  • No marketing email without your explicit consent.

5. Retention & your rights

Order and invoice records are retained as required by Indian tax and accounting law. Contact messages are retained until resolved, then archived. You may request access to, correction of, or deletion of your personal data (subject to statutory retention duties) under the Digital Personal Data Protection Act, 2023.

Write to privacy@preflightlabs.in for any privacy request. We respond within 30 days.

6. Changes

We will post any changes to this policy on this page with an updated revision date. Material changes will be highlighted on the site.

This policy is a working draft prepared for launch and should be reviewed by legal counsel before the site takes production traffic.