Privacy Policy

Young Indian Revolution Pvt. Ltd., Noida, Uttar Pradesh, India, operates the Ekdant online store. For the purposes of the DPDP Act we are the Data Fiduciary for the personal data described below. You can reach us at youngindianrevolution@gmail.com about anything in this policy.

We collect only what we need to run a bookstore:

• •Account details — your name, email address, password and, optionally, your phone number, given when you create an account. Passwords are stored only in hashed form and are never readable by us.
• •Delivery addresses — recipient name, phone number, street address, city, state and PIN code, so we can ship your order.
• •Order history — the books you bought, amounts, and payment status.
• •Cart and wishlist — held against your account, and also cached in your browser's local storage so your basket survives a page reload.
• •Technical data — IP address, browser type and pages requested, recorded in ordinary server logs for security and debugging.

• •To create and secure your account, and to keep you signed in.
• •To process, pack, ship and track your orders, and to handle returns or refunds.
• •To respond to your questions and provide customer support.
• •To meet tax, accounting and other legal obligations — GST invoicing, for example.
• •To detect and prevent fraud, abuse and security incidents.

We do not sell your personal data. We do not use it to build advertising profiles, and we will not send you marketing email unless you have asked us to.

We process your data on the basis of the consent you give when you create an account or place an order, and for the certain legitimate uses permitted under Section 7 of the DPDP Act, such as complying with a legal obligation. You may withdraw consent at any time by writing to youngindianrevolution@gmail.com. Withdrawing consent does not affect processing already carried out, and we may still need to retain records we are legally required to keep.

We share data only with the processors needed to fulfil your order, and only the minimum they require:

• •PayU — our payment gateway, for processing payments and refunds.
• •Courier and logistics partners — the recipient name, address and phone number printed on your parcel.
• •Hosting and infrastructure providers — who store the data on our behalf under confidentiality obligations.
• •Government authorities — where we are required by law, a court order or a valid enforcement request to disclose it.

Our books are made for children aged 2 to 6, but the store is intended for adults. You must be 18 or older to create an account or place an order. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to youngindianrevolution@gmail.com and we will delete it.

We use a small number of strictly necessary cookies and browser-storage entries. A secure, HTTP-only cookie keeps you signed in — it cannot be read by JavaScript, which protects it from theft by malicious scripts. Your cart and wishlist are cached in local storage so they survive a reload. We do not use advertising or third-party tracking cookies. Clearing your browser storage will sign you out and empty your local cart.

Account data is kept for as long as your account is open. Order and invoice records are kept for eight years after the transaction, as required by Indian tax and company law, even if you close your account. Server logs are kept for a short operational period and then discarded.

Under the DPDP Act you may:

• •Ask for a summary of the personal data we hold about you and how it is processed.
• •Ask us to correct data that is inaccurate, or complete data that is incomplete.
• •Ask us to erase your data, where we are not required to keep it.
• •Nominate another person to exercise these rights if you die or become incapacitated.
• •Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied.

Some of this you can do yourself from your account page. For anything else, write to youngindianrevolution@gmail.com and we will respond within a reasonable period.

Traffic between your browser and our servers is encrypted with HTTPS. Passwords are stored hashed, session tokens are short-lived and held in HTTP-only cookies, and access to production data is limited to staff who need it. No system is perfectly secure, but if a breach affects your data we will notify you and the Data Protection Board as the law requires.

In line with the DPDP Act and the Information Technology (Intermediary Guidelines) Rules, 2021, you may contact our Grievance Officer:

We may update this policy as our practices or the law change. The revised version will be posted here with a new “last updated” date, and material changes will be notified to you by email or an on-site notice.