Privacy Policy

Digital Personal Data Protection Act, 2023

Who collects your data

WIMEDIA (trading as projectkit.in), GSTIN 33ASHPM5810H1ZW, No.2, Balagi Nagar, Minjur - 601203, Chennai, Tamil Nadu. WIMEDIA is the data fiduciary for the purposes of the Act. Contact for any privacy request: care@projectkit.in, or WhatsApp 83000 17777.

What we collect and why

• Name, phone, email and delivery address — to ship your order and to let you track it.
• Account email and password — only if you choose to create an account. Passwords are stored as a salted scrypt hash; we cannot read yours.
• Saved addresses — only if you choose to save them, to spare you retyping.
• GSTIN, if you give one — to raise an invoice your school or college can process.
• Order and payment reference — to reconcile payment and handle refunds. Card and UPI details are handled entirely by Razorpay; we never see or store them.
• Download IP and browser string — to enforce the download limit on documentation bundles.

Analytics and session replay

We use Microsoft Clarity to see how the site is actually used — which parts of a page people read, where they get stuck, and where a layout is failing them. Clarity records a replay of your visit: the pages you opened, where you moved and tapped, and how far you scrolled. It sets cookies to recognise a returning visit.

What it is set up not to record: anything you type into a form field is masked before it leaves your browser, so your address, phone number and email are not captured by it. It does not run on our admin pages at all. It has no access to your password, and it never sees card or UPI details — those never reach our site in the first place.

Clarity is operated by Microsoft, which means this data is processed on their servers under their privacy statement. If you would rather not be recorded, a browser set to block third-party cookies, or any tracker-blocking extension, stops it — and nothing on this site stops working if you do.

How long we keep it

Order records, including the address snapshot on the order, are retained for eight years as required for GST records. Download logs are retained for one year, matching the life of the download link. Account sessions expire after 30 days. Nothing is sold or shared for advertising.

If you are under 18

School students buy from us. If you are under 18, a parent or guardian must place the order and consent to the details above being collected.

Deleting your data

Email care@projectkit.in from the address you ordered with, or message us on WhatsApp. We remove your account, saved addresses and contact details within 30 days. The invoice record itself must be retained for the statutory GST period and cannot be deleted before then; we will tell you exactly what is kept.

Your other rights

• Ask what we hold about you and get a copy.
• Correct anything wrong — saved addresses are editable in your account.
• Withdraw consent for anything not required to complete your order.
• Complain to the Data Protection Board of India if we do not resolve it.