This Privacy Policy is published by Apex Sports Promotion, an entity incorporated as per Indian laws, having its registered office at Floor No.: 13th Floor, Building No./Flat No.: Flat No 1301, Name Of Premises/Building: Godrej Infinity GITT 1A, Road/Street: Keshav Nagar, Nearby Landmark: Tennis Court, Locality/Sub Locality: Mundhwa, City/Town/Village: Pune, District: Pune, State: Maharashtra, PIN Code: 411036, India (hereinafter referred to as "Company," "We," "Us," or "Our").

This Policy governs the collection, storage, processing, usage, transfer, and disclosure of your Personal Data when you visit, access, or transact on shop.apexsports.co.in  ("Platform") or avail of our products or services.

By using our Platform, you acknowledge that you have read, understood, and consent to this Policy. If you do not agree, please do not use our Platform.

DEFINITIONS

"Personal Data" means any data about an individual who is identifiable by or in relation to such data as per DPDP Act, 2023.

"Sensitive Personal Data or Information (SPDI)" includes passwords, financial information such as bank accounts, credit/debit card details, and payment instrument details.

"Data Fiduciary" means the Company i.e. the entity that determines the purpose and means of processing Personal Data.

"Data Principal" means You i.e. the individual to whom the Personal Data relates.

"Processing" means any automated operation on Personal Data, including collection, storage, use, disclosure, or erasure.

"Profiling" means any form of automated processing of Personal Data used to evaluate, analyse, or predict aspects of an individual's behaviour, preferences, or interests.

"Automated Decision-Making" means a decision about a Data Principal made solely by automated systems without human intervention, producing legal or similarly significant effects.

"Behavioural Advertising" means personalised advertisements served based on a user's browsing history, purchase history, or inferred interests.

"Platform" means shop.apexsports.co.in and any associated applications.

"Services" means all products and services offered on the Platform, including Snooker Tables, Pool Tables, Heyball Tables, Billiards Tables, Cues, Chalks, Tips, Cue Accessories, Table Accessories, and related installation, warranty registration, and after-sales services.

PERSONAL DATA WE COLLECT

Data You Provide Directly

Category

Specific Data Points

When Collected

Identity Data

Full name, username, date of birth

Account registration, checkout

Contact Data

Email, mobile number, delivery address, billing address, PIN code

Registration, order placement

Financial/Payment Data

Credit/debit card details, UPI ID, net banking, wallet details

Payment processing

Account Credentials

Password (encrypted only)

Registration

Order & Transaction Data

Order history, products purchased, delivery preferences, invoice details

Order placement and fulfilment

Communication Data

Queries, complaints, feedback, product reviews, product photographs submitted by you

Customer support, reviews

GST/Tax Data

GSTIN (for business buyers requesting GST invoices)

Invoice generation

Warranty Data

Product serial number, purchase date, installation address, warranty registration details

Warranty registration

Installation Data

Installation address, access information, floor plan details, preferred installation date/time

Installation coordination

B2B/Institutional Data

Company name, authorised contact person, GSTIN, business address

B2B orders and accounts

 

Data Collected Automatically

  • Device & Technical Data: IP address, browser type, operating system, device identifiers
  • Usage & Behavioural Data: Pages visited, products viewed, cart contents, abandoned cart items, wish list items, search queries, time spent on pages, click-through paths, purchase patterns
  • Location Data: Approximate location from IP address; precise location only with explicit consent
  • Cookie & Tracking Data: As described in this Policy

Data from Third Parties

  • Payment Gateways: Transaction status and tokenized identifiers
  • Logistics Partners: Delivery status and address confirmations
  • Installation Partners: Installation completion records and inspection reports
  • Analytics Providers: Aggregated usage behaviour
  • Advertising Networks: Behavioural signals (subject to your consent)
  • Social Media Platforms: Profile data if you register via social login

We do not store full payment card details. All payment processing is done by PCI-DSS compliant third-party gateways.

LAWFUL BASIS FOR PROCESSING

Basis

When We Use It

Consent

Marketing communications, profiling, behavioural advertising, cookies

Contractual Necessity

Order fulfilment, delivery, invoicing, installation, warranty processing

Legal Obligation

GST compliance, Legal Metrology disclosures, government/court orders, TRAI compliance

Legitimate Interests

Fraud prevention, platform security, B2B relationship management

 

Consent is always obtained through an active, affirmative action. 

HOW WE USE YOUR PERSONAL DATA

  • Order Fulfilment & Delivery: To process orders for cue sports equipment, arrange packaging, coordinate delivery, and provide after-sales support.
  • Account Management: To create and manage your user account, maintain order history, and enable shipment tracking.
  • Payment Processing: To process payments through third-party gateways and issue GST-compliant tax invoices.
  • Installation Coordination & Documentation: To arrange and coordinate professional installation services, share relevant details with authorised installation partners, and document installation completion for warranty activation and quality assurance.
  • Customer Support & Grievance Redressal: To respond to queries, complaints, and return/refund/exchange requests as required under Consumer Protection (E-Commerce) Rules, 2020.
  • Profiling & Personalisation (with consent): To build a customer profile based on your browsing history, purchase patterns, and product preferences in order to personalise your shopping experience and deliver relevant product recommendations.
  • Automated Decision-Making: To operate automated systems including product recommendation engines, fraud detection algorithms, and dynamic cart abandonment communications.
  • Targeted Advertising & Remarketing (with consent): To serve personalised advertisements on Google, Meta (Facebook/Instagram), and other platforms based on your activity on the Platform.
  • Marketing Communications (with separate consent): To send promotional emails, SMS, and WhatsApp messages about new products, offers, and cue sports events. You may opt out at any time.
  • Legal & Regulatory Compliance: To comply with the IT Act, DPDP Act, Legal Metrology Act, GST Act, Consumer Protection Act, and all other applicable laws and statutory directions.
  • Platform Improvement & Analytics: To monitor usage patterns, conduct internal research, and improve the Platform experience.
  • Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions and unauthorised access.
  • B2B Sales & Account Management: To manage transactions, bulk orders, and dedicated account support for institutional and commercial buyers such as snooker clubs, sports academies, hotels, and educational institutions.

We do not sell your Personal Data to any third party under any circumstances.

PROFILING, AUTOMATED DECISION-MAKING & BEHAVIOURAL ADVERTISING

We use automated systems to analyse your Personal Data to build a profile about you. This includes:

  • Products you have browsed, compared, and purchased
  • Cart additions, wish list activity, and abandoned carts
  • Time spent on specific product categories (e.g., snooker accessories vs. pool tables)
  • Search queries you have entered on the Platform
  • Purchase frequency and average order value
  • Device type, location, and browsing times
  • Price sensitivity indicators (viewed but not purchased items)

To provide you with relevant product recommendations, personalised offers, and a tailored shopping experience. Profiling is also used for fraud risk scoring on high-value transactions.

Your Rights Regarding Profiling & Automated Decisions

Under the DPDP Rules, 2025, you have the right to:

  • Know what data is being used to profile you 
  • We will cease profiling you upon request, though this may affect recommendation quality
  • If an automated decision (e.g., fraud flagging, order rejection) significantly affects you, you may request a human review and explanation
  • Withdraw consent for profiling and behavioural advertising at any time by emailing marketing@apexsports.co.in with the subject line "Withdraw Profiling Consent"

Your opt-out options:

INSTALLATION DATA

Data Collected:

  • Your name, email address, and phone number
  • Product serial number and model
  • Purchase date and order number
  • Installation address (for table products)
  • Proof of purchase (if uploaded)

Purpose: To validate your warranty, activate coverage, process warranty claims, arrange replacement parts or servicing, and maintain product liability records.

Retention Period: Warranty data is retained for the duration of the warranty period + 3 years thereafter for product liability and dispute resolution purposes.

Third-Party Sharing: Warranty data may be shared with our authorised warranty service administrators who are bound by data processing agreements prohibiting any use of your data beyond warranty administration.

Your Right: You may request deletion of your warranty data after warranty expiry, subject to our legal retention obligations.

Installation Service Coordination

For products requiring professional installation (snooker tables, pool tables, billiards tables, heyball tables), we coordinate installation through authorised installation partners. In this process:

Data Shared with Installation Partners:

  • Your full name, mobile number, and installation address
  • Order number and product specifications (dimensions, colour, weight)
  • Preferred installation date and time window
  • Any special access instructions (floor, building entry, staircase dimensions)

Consent: By confirming an order for a product requiring installation, you consent to your contact details and address being shared with our authorised installation partner for installation coordination. This sharing is necessary for the performance of your purchase contract.

Installation Inspection Records & Documentation

Our installation partners may, during or after installation:

  • Photograph or video record the installed product (e.g., levelling of snooker table surface, placement in room)
  • Collect your digital or physical signature as acknowledgement of successful installation
  • Record any visible damage or defects at the time of delivery/installation
  • Document the date, time, and technician details for quality assurance

Purpose of Documentation:

  • Quality assurance - ensuring installation meets brand standards
  • Dispute resolution - evidence in case of installation-related claims or damage disputes
  • Product liability - records in case of regulatory inquiry

Retention Period: Installation records are retained for 3 years from the installation date, aligned with the standard warranty coverage period.

Installation Partner Data Compliance Obligations

All installation partners engaged by us are contractually required to:

  • Use your Personal Data solely for installation coordination and completion, no secondary use
  • Not contact you for any purpose unrelated to the installation after job completion
  • Not share or sell your address or contact details with any third party
  • Maintain data security standards equivalent to ours
  • Delete your Personal Data from their records within 90 days of installation completion, unless required to retain for warranty purposes
  • Comply with all applicable data protection laws, including the DPDP Act, 2023

If you wish to report a concern about an installation partner's handling of your data, contact our Grievance Officer at operations@apexsports.co.in

SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell, rent, or trade your Personal Data. We share data only in the following circumstances:

Authorised Service Providers

Category

Data Shared

Purpose

Payment Gateways

Transaction data

Payment processing

Logistics Partners

Name, address, phone

Delivery coordination

Installation Partners

Name, address, phone, product specs

Installation coordination

Cloud/Hosting

All stored data

Secure data storage (India-based servers)

SMS/Email Platforms

Contact details

Transactional & promotional communications

Analytics

Anonymised usage data

Platform improvement

Advertising Networks

Behavioural signals (with consent)

Retargeting and advertising

Warranty Administrators

Warranty registration data

Warranty claim processing

 

All service providers operate under data processing agreements restricting use to the specified purpose only.

We may disclose Personal Data to government authorities, courts, or regulators when required by:

  • Section 69, IT Act, 2000 (lawful interception)
  • Data Protection Board of India directions (DPDP Act, 2023)
  • Lawful court orders

In the event of a merger, acquisition, or sale of business assets, your Personal Data may be transferred to the successor entity subject to equivalent data protection obligations. You will be notified in advance.

DATA RETENTION

Data Category

Retention Period

Legal Basis

Account & Identity Data

Duration of account + 3 years post-closure

IT Act, Indian Contract Act

Order & Transaction Data

8 years from transaction date

GST Act, Companies Act

Payment Data (tokenized)

Duration of transaction only

PCI-DSS, SPDI Rules

Installation Records & Photographs

3 years from installation date

Warranty, dispute resolution

Profiling & Behavioural Data

2 years from last Platform interaction

Legitimate interests

Communication & Support Data

1 year from resolution

Consumer Protection Act

Marketing Consent Records

Until consent withdrawn + 1 year

DPDP Act, 2023

Analytics Data (anonymised)

Up to 2 years

Legitimate interests

Security & System Logs

90 days

IT Act, 2000

 

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer identify you.

DATA SECURITY

We implement the following security measures in compliance with Section 8(5), DPDP Act, 2023 and the SPDI Rules, 2011:

  • SSL/TLS 256-bit encryption for all data in transit
  • AES-256 encryption for stored sensitive data
  • Role-based access controls - access restricted on a need-to-know basis
  • Multi-factor authentication on internal systems
  • Regular security audits and penetration testing
  • PCI-DSS compliant payment processing through all payment partners
  • Firewall and intrusion detection systems
  • Employee data protection training

No internet transmission is 100% secure. Keep your account credentials confidential and log out from shared devices.

DATA BREACH NOTIFICATION

In the event of a Personal Data breach:

  • The Data Protection Board of India will be notified in the prescribed manner and timeline under DPDP Rules, 2025
  • Affected Data Principals will be notified without undue delay if the breach poses high risk to their rights
  • Notification will include: nature of breach, categories of data affected, likely consequences, remedial measures taken, and a contact point for further information

GRIEVANCE OFFICER

In accordance with Rule 4, Consumer Protection (E-Commerce) Rules, 2020 and IT (Intermediary Guidelines) Rules, 2021:

Name: Satyam Arora

Designation: CMO

Company: Apex Sports Promotion

Address: Floor No.: 13th Floor, Building No./Flat No.: Flat No 1301, Name Of Premises/Building: Godrej Infinity GITT 1A, Road/Street: Keshav Nagar, Nearby Landmark: Tennis Court, Locality/Sub Locality: Mundhwa, City/Town/Village: Pune, District: Pune, State: Maharashtra, PIN Code: 411036

Email: marketing@apexsports.co.in

Phone: +91- 9873273367

Working Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST

Response Timelines:

  • Acknowledgement: Within 48 hours of receipt
  • Resolution: Within 1 month of receipt

CHILDREN'S PRIVACY

Our Platform is not directed at individuals below 18 years of age. We do not knowingly collect Personal Data from children. In accordance with Section 9, DPDP Act, 2023, where processing of a child's data is necessary, we shall obtain verifiable parental consent prior to processing and shall not engage in processing likely to cause detrimental effects on the child's well-being.

If you believe your child has submitted data without consent, contact operations@apexsports.co.in immediately.

CROSS-BORDER DATA TRANSFERS

All Personal Data is stored on servers located within India. Cross-border transfers, if any, are made only to countries permitted by the Central Government under Section 16, DPDP Act, 2023, and only with your consent or as required by law.

THIRD-PARTY LINKS

Our Platform may link to third-party websites (social media, payment gateways). This Policy does not apply to those sites. We are not responsible for their privacy practices.

CHANGES TO THIS POLICY

We may update this Policy to reflect changes in law or business practices. Material changes will be communicated to registered users via email before taking effect. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.

GOVERNING LAW & JURISDICTION

This Policy is governed by the laws of the Republic of India. Disputes are subject to the exclusive jurisdiction of the courts at New Delhi.

CONTACT US

operations@apexsports.co.in

This Privacy Policy is Version 1.1, drafted in compliance with the DPDP Act, 2023, DPDP Rules, 2025, IT Act, 2000, SPDI Rules, 2011, IT (Intermediary Guidelines) Rules, 2021, and Consumer Protection (E-Commerce) Rules, 2020. All rights reserved. Reproduction without authorisation is prohibited.