Privacy Policy

1. Introduction

BrighteX (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal data we collect when you visit https://brightexworld.net, why we collect it, how we use and protect it, and what rights you have. By using the Website, you agree to this Policy. If you do not agree, please do not use the Website.

This Policy is written in line with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023 and Rules, 2025 (“DPDP Act”) of India.

2. Who We Are

Business name: BrighteX (Brightex Future Lighting)
Address: A Block, 115, Dharampal Satyapal Rd, Sector 69, Noida, Uttar Pradesh 201309, India
Phone: +91-8527778721
Email: sales@brightexworld.net

For the purposes of the DPDP Act, BrighteX is the “Data Fiduciary” for the personal data collected through this Website.

3. Personal Data We Collect

a) Data you give us directly

Contact and enquiry forms : full name, phone number, email address, and the message you write.
Account and orders : name, billing and shipping address, phone, email, username and password, order details, and any notes you add.
Communication : details you share when you call us, email us, or message us on WhatsApp.

b) Data collected automatically

IP address, browser type and version, device type, operating system, and language.
Pages visited, time spent, links clicked, referring website, and the source or campaign that brought you to us.
Cookie and similar-technology data (see Section 7).

c) Payment information

Payments are handled by third-party payment gateways. We do not store your full card, UPI, or net-banking details on our servers. We receive only confirmation of payment status and limited transaction details.

We do not knowingly collect personal data from children under 18 without verifiable consent from a parent or guardian.

4. Why We Use Your Data

We use your personal data to:

• Respond to your enquiries and quotation requests.
• Create and manage your account, and process, deliver, and support your orders.
• Send order confirmations, invoices, shipping updates, and service messages.
• Send offers or product updates, only where you have agreed or where the law allows, and you can opt out at any time.
• Improve our Website, products, and customer experience through analytics.
• Prevent fraud and spam and keep the Website secure.
• Meet legal, tax, accounting, and regulatory obligations.

5. Legal Basis

We process your data based on one or more of the following: your consent; the need to fulfil a request or contract with you; compliance with a legal obligation; and other lawful uses permitted under the DPDP Act. Where we rely on consent, you can withdraw it at any time (see Section 10).

6. Sharing of Data

We do not sell your personal data. We may share it only with:

• Service providers who help us run the Website and business, such as web hosting, payment gateways, courier and logistics partners, email and SMS providers, and IT support.
• Analytics and advertising tools such as Google Analytics 4 and Google Tag Manager (see Section 7).
• Messaging platforms such as WhatsApp, if you choose to contact us through the chat button.
• Authorities, courts, or regulators when required by law or to protect our rights and safety.
• A buyer or successor, if our business is merged, sold, or restructured. We will tell you if that happens.

These parties are allowed to use your data only for the services they provide to us and must keep it secure.

7. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to make the site work, remember your cart and login, and understand how visitors use the site.

• Essential cookies: needed for cart, checkout, login, and security.
• Analytics cookies: Google Analytics 4 helps us understand traffic and usage. Google may process this data under its own privacy policy.
• Order attribution: our shop software records how a visitor reached us (for example, search, social media, or direct) to understand which channels work.
• Marketing pixels: if we run advertising campaigns, platforms such as Meta (Facebook/Instagram) or Google may set cookies to measure results.

You can block or delete cookies in your browser settings. Some parts of the Website, such as the cart and checkout, may not work properly without essential cookies. You can also opt out of Google Analytics using Google’s browser add-on.

8. Third-Party Links and Services

The Website may link to other sites, including our social media pages (Facebook, Instagram, LinkedIn, YouTube) and our WhatsApp chat. We do not control these services and are not responsible for their privacy practices. Please read their policies before sharing your data.

9. Data Retention

We keep your personal data only as long as needed for the purposes in this Policy, or as required by law. For example:

• Enquiry details: until your request is resolved and for a reasonable period afterwards.
• Order and invoice records: as required under tax and accounting laws.
• Account data: until you ask us to delete your account, unless we must keep some records by law.

When data is no longer needed, we delete it or anonymise it.

10. Your Rights

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how we use it.
• Correct or update inaccurate or incomplete data.
• Erase your data when it is no longer needed for the purpose it was collected, unless the law requires us to keep it.
• Withdraw consent at any time. This does not affect processing done before withdrawal.
• Grievance redressal: raise a complaint with us about how your data is handled.
• Nominate another person to exercise your rights in case of your death or incapacity.

To use any of these rights, email us at sales@brightexworld.net with the subject “Privacy Request” and enough detail for us to identify you. We may ask you to verify your identity first. We will respond within a reasonable time and in line with the law.

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is operational for that purpose.

11. Marketing Messages

If you receive promotional emails, calls, SMS, or WhatsApp messages from us, you can opt out at any time by using the unsubscribe link, replying “STOP”, or emailing us. We will still send you important service messages about your orders and account.

12. Data Security

We use reasonable technical and organisational measures to protect your data, including secure (HTTPS) connections, access controls, and regular updates of our website software. No method of transmission or storage over the internet is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the authorities as required by law.

13. Transfers Outside India

Some of our service providers, such as Google or hosting and email providers, may store or process data on servers outside India. When this happens, we take steps to ensure your data stays protected, and we follow any restrictions that the Government of India applies to such transfers.

14. Changes to This Policy

We may update this Policy from time to time. Please check it regularly. For significant changes, we will give a clear notice on the Website.