Effective date: September 21, 2026   |   Last updated: September 21, 2026

1. Purpose

ANAYAKSH SOLUTION PRIVATE LIMITED (“we”, “us”, “our”, or the “Company”) respects your privacy and is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made thereunder, and the Consumer Protection Act, 2019 together with the Consumer Protection (E-Commerce) Rules, 2020.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://anayakshstore.com (the “Site”), create an account, purchase or download digital books (“eBooks”), or otherwise use our services (collectively, the “Services”). We act as the Data Fiduciary for the personal data described in this Policy, and you, as the user to whom the data relates, are the Data Principal.

Please read this Policy carefully together with our Terms and Conditions, which govern your use of the Services. By accessing or using the Services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with our practices, please discontinue use of the Services.

2. Information We Collect

We collect information in three ways: (a) information you provide to us, (b) information collected automatically when you use the Services, and (c) information we receive from third parties.

2.1 Information You Provide to Us

• Personal identifiers and account credentials: name, email address, mobile number, and your password (stored in hashed form).
• Transaction and billing data: billing address, order history, payment status, and GST or tax details where you request a tax invoice.
• Payment data: payment method type, masked card or UPI identifier, and transaction reference. Full card numbers, CVV codes, and UPI PINs are processed directly by our PCI-DSS-compliant payment gateways and are never stored on our servers.
• Library and activity data: eBooks purchased or downloaded, items in your cart or wishlist, and preferences such as reading format and saved books.
• Support and communication data: records of your enquiries, complaints, refund requests, and correspondence with customer support.
• Marketing preferences: your consent and choices regarding newsletters, offers, and promotional communications.
• User-generated content: reviews, ratings, comments, and any other content you submit on the Site.

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, and timestamps.
• Usage data: session information, clickstream activity, search queries, and download or access events on the Site.
• Approximate location: derived from your IP address. We do not collect precise GPS location data.
• Cookies and similar technologies: as described in Section 6 (Cookies).

2.3 Information from Third Parties

• Social login providers (such as Google or Facebook) when you register or sign in through them.
• Payment gateways and fraud-prevention providers, who confirm the status of a transaction.
• Analytics and advertising partners, in aggregated or pseudonymised form.

Where you provide personal data relating to another person (for example, when gifting an eBook), you confirm that you have obtained that person’s consent to share their details with us for that purpose.

Children. The Services are intended for users who are at least 18 years of age, or who use the Services under the supervision of a parent or legal guardian. We do not knowingly collect personal data from children without the verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe that we have collected a child’s data without appropriate consent, please contact us at anayaksh0432@gmail.com and we will take prompt steps to delete it.

3. Use of Information

We use your personal data to:

• Provide and deliver purchased eBooks — process payments, confirm purchases, and deliver eBooks to your account or registered email.
• Manage user accounts and authentication — create and maintain your profile and sync your library and preferences across sessions and devices.
• Process payments and issue invoices — generate tax invoices and maintain the records required under Indian accounting and GST laws.
• Provide customer support — respond to enquiries, resolve download or access issues, and process refund and cancellation requests.
• Personalise and improve the Services — recommend titles, curate collections, and understand how the Site is used so we can improve our catalogue, functionality, and design.
• Communicate with you — send order confirmations, service updates, and administrative notices; and send newsletters or promotional emails only with your consent. You may opt out at any time.
• Prevent fraud and protect the Services — detect, investigate, and prevent fraudulent, abusive, or unlawful activity, and protect the rights of authors, publishers, and users.
• Comply with the law — meet our legal, regulatory, and reporting obligations, and enforce our Terms and Conditions.

Legal grounds. We process personal data only on the lawful grounds recognised under the DPDP Act: your consent (for marketing communications, non-essential cookies, and any other purpose for which we seek it), performance of a contract (orders, delivery, and the Services you request), legitimate uses (fraud prevention, network and information security, and analytics), and compliance with legal obligations. Where processing is based on consent, you may withdraw it at any time by writing to anayaksh0432@gmail.com; withdrawal is prospective and may prevent us from continuing to provide certain Services. We will not use your personal data for any purpose materially different from those described above without fresh notice and, where required, your fresh consent.

4. Data Sharing and Retention

We do not sell or rent your personal data. We share it only with the following recipients, strictly for operational or legal purposes and only to the extent necessary:

• Service providers and processors — payment gateways, cloud hosting and content-delivery providers, email and SMS delivery partners, customer-support tools, and analytics providers, all bound by contractual confidentiality and data-protection obligations.
• Publishers and rights holders — where necessary for licensing, reporting, or royalty obligations, limited to the minimum data required and, wherever possible, in aggregated or de-identified form.
• Professional advisors — legal, accounting, and audit firms where reasonably necessary.
• Business transfers — in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to this Policy and applicable law.
• Legal and regulatory authorities — where required by law, court order, or a lawful request from a government authority, or where disclosure is necessary to protect our rights, our users, or the public.

Where we engage a data processor, we do so under a valid contract that requires it to process personal data only on our instructions and to implement appropriate security safeguards.

Retention. Data is retained only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. In practice: account and order data is kept for the duration of your relationship with us and thereafter for the period required by tax, accounting, and consumer-protection laws (commonly five to eight years); payment and transaction records for accounting, audit, chargeback, and fraud-prevention purposes; marketing data until you withdraw consent or unsubscribe (after which only a suppression record is kept); and log and security data typically up to twelve months, unless a longer period is necessary to investigate fraud or a security incident. When personal data is no longer required, we securely delete it or irreversibly anonymise it; where deletion is technically impracticable, we isolate and secure the data until deletion becomes possible.

International transfers. Your personal data is primarily stored and processed in India. Certain service providers (cloud hosting, content delivery, analytics, and email) may store or process data outside India; where that happens, we ensure the transfer and subsequent processing comply with the DPDP Act and any restrictions notified by the Central Government, with appropriate contractual and security safeguards in place.

Third-party links. The Site may contain links to third-party websites, payment gateways, social media pages, or services that we do not own or control. This Policy applies only to the Services operated by us; we encourage you to review the privacy practices of any third-party site before providing your personal data to it.

5. User Rights

Under the DPDP Act, you have the right to:

• Access your data — request a summary of the personal data we process about you, the processing activities undertaken, and the identities of the data fiduciaries and processors with whom it has been shared.
• Correct and erase your data — request the correction of inaccurate or misleading data, the completion of incomplete data, and the erasure of data that is no longer necessary, subject to our legal retention obligations.
• Grievance redressal — register a complaint with our Grievance Officer, who will respond within the timelines prescribed under applicable law.
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.
• Withdraw consent — withdraw your consent at any time where processing is based on consent, with prospective effect.

To exercise any of these rights, please write to us at anayaksh0432@gmail.com with sufficient detail to identify you and your request. We may ask you to verify your identity before acting on a request, and we will respond within the timeframe prescribed by applicable Indian law (ordinarily within thirty days). If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India in the manner prescribed under the DPDP Act.

Complaints addressed to our Grievance Officer are acknowledged within 48 hours and resolved within 15 days, and in any event within one month from the date of receipt:

6. Cookies

We use cookies, pixels, web beacons, and local storage to operate the Site, enhance your experience, track analytics, and remember your preferences:

• Strictly necessary cookies: required for the Site to function, such as session handling, cart, login state, and security.
• Functional cookies: remember your settings, such as language, region, and display preferences.
• Analytics cookies: help us understand how visitors browse and use the Site so that we can improve it.
• Advertising and targeting cookies: used to show you relevant titles and offers, on our Site and, where permitted, elsewhere.

You can manage, block, or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Services (including checkout and account access) from working correctly. Where required by law, we will seek your consent before setting non-essential cookies.

7. Security

We employ appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Encryption of data in transit using TLS/SSL, and encryption of data at rest where applicable.
• Role-based access controls, least-privilege principles, and authentication requirements for internal systems.
• Confidentiality obligations for employees and contractors who handle personal data.
• Regular security reviews, vulnerability assessments, and monitoring of our infrastructure.
• Payment data handled exclusively by PCI-DSS-compliant payment processors.
• Documented incident-response procedures, including notification to affected individuals and to the Data Protection Board of India where a personal data breach must be reported.

While we take these measures seriously, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security, and you provide your personal data at your own risk.

8. Updates

We may revise this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The revised Policy will be posted on this page with a revised “Last updated” date. Where a change is material, we will additionally notify you by email or by a prominent notice on the Site, and where required by law we will seek your fresh consent.

We encourage you to review this Policy periodically. Continued use of knowviastore.com after a revised Policy takes effect constitutes your acceptance of the updated Policy.