Privacy Policy

Privacy Policy

AL-GYAS INFRASTRUCTURE PVT LTD, trading as AGI Spares ("AGI Spares", "we", "us" or "our"), operates [www.agispares.com] (the "Platform"), through which we supply spare parts, assemblies, consumables and accessories for aerial work platforms - boom lifts, scissor lifts and other elevating work platforms.

In short: we collect what we need to sell you the right part, deliver it, invoice it and support it afterwards. We never see or store your card details. We do not sell your data. We keep records of which part went to which machine for eight years, because that is how we reach you if a safety recall is issued.

This Policy is published under the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). Please read it with our Terms of Use, Return Policy and Disclaimer.

1. Your consent

By using the Platform or giving us your data, you consent to our collecting, storing, using, disclosing and processing it as described here.

If you give us someone else's details, a colleague as consignee, an engineer as technical contact, a driver for site access, please make sure you are authorized to, and to allow us to use them in this way.

You can withdraw consent at any time by writing to us at the address in Section 15. Withdrawal takes effect from then on and does not undo processing already done. Do bear in mind that we need certain data to accept, fulfil, invoice and support an order, so we may not be able to keep providing those services without it. We will also keep whatever the law requires us to keep, and the traceability records described in Section 10.

2. What we collect

Who you are. Name, mobile number, email address, and credentials created when you register or sign in.

Your business. Company or firm name, GSTIN, PAN where it applies, billing and shipping addresses, and who is authorized to receive the consignment.

Your orders. Parts ordered, part numbers, quantities, order values, invoices, delivery records, returns, replacements, credit notes and the correspondence around them.

Your machine. Because AWP parts are machine-specific, (if required) we may need the make, model, serial or chassis number, year of manufacture, hour-meter reading, fault codes, and photographs or video of the machine, the part or the fault. Manufacturers require these when assessing a warranty claim.

Payments. Our gateway partner handles the payment; we receive the transaction reference, the method type, the amount and the status. We never collect or store your card number, CVV, PIN, UPI PIN or net-banking credentials.

Rewards. If you are in our rewards programme enrolment details, points earned and redeemed, tier, and the order history points are calculated on.

How you use the site. IP address, device and browser, operating system, pages viewed, searches run and similar diagnostic data, collected through cookies.

What you tell us. Records of your correspondence with us by email, phone, WhatsApp or chat, including call notes and support tickets.

3. What we use it for

•     Running your account and signing you in.

•     Processing, invoicing, packing, dispatching and delivering your orders.

•     Checking a part suits your machine, and giving you technical and fitment support.

•     Payments, refunds, credit notes and chargebacks.

•     Returns, replacements and warranty claims, including putting claims to the manufacturer.

•     Keeping traceability records, so we can reach you if a recall, safety bulletin or service action affects a part you bought.

•     Running the rewards programme.

•     Answering your questions, complaints and disputes.

•     Sending your order confirmations, dispatch and delivery updates, receipts, return status and service notices.

•     Sending your offers and product news, unless you have opted out.

•     Spotting and preventing fraud, unauthorized transactions and misuse of the Platform.

•     Meeting our obligations under tax, consumer protection, e-commerce and product safety law.

•     Understanding in aggregate how the Platform is used, so we can improve our catalogue, stock and pricing.

4. Messages from us

By registering or giving us your contact details, you agree that we, our affiliates, our technology and business partners and our service providers, may contact you by SMS, email, phone, WhatsApp and other messaging apps about your orders, your account and our products and services.

You can opt out of marketing at any time use the unsubscribe link in any marketing email, reply with the stop keyword in a message, or write to us at the address in Section 15. We will still send you messages about orders, payments, returns, rewards and product safety while an order or account is active, because those are part of the service.

5. Who else handles your data

We use established service providers to run the Platform. They act on our instructions only, for the purposes set out here, under confidentiality and security obligations.

What they do	What they handle	Notes
Store platform and hosting	Account, order and catalogue data, usage data	Our storefront runs on Shopify
Login and authentication	Mobile number, email address, sign-in records	A login application integrated with our storefront
Payments	Payment method type, transaction reference, amount, status	Razorpay. Card and authentication credentials stay with the gateway and its banking partners, not with us
Rewards and customer engagement	Enrolment details, points balance, order history, preferences	Our rewards and engagement platform
Couriers and logistics	Consignee name, address, phone number, consignment details	Needed to deliver and to collect returns
Messaging services	Name, mobile number, email address	Used to send order and marketing messages
Accounting, tax and audit	Invoices, GSTIN, transaction records	Statutory requirement

We do not sell your personal data.

6. Sharing with manufacturers

We are an authorized reseller for the brands we represent. Where it is needed for a warranty claim, a technical investigation, a safety recall, a field modification or a traceability audit, we may pass the manufacturer or its authorized representative the machine details, the part and serial or batch numbers, the sale details, the fault reported, and the name and contact details of the end user or site contact.

This is a condition of our authorization to supply genuine parts, and it is what lets you get factory warranty support and be told quickly if a safety issue affects a part you bought. We share only what the purpose requires.

7. Our group companies

We may share your data with our holding company, subsidiaries and affiliates for the purposes in this Policy fulfilment, support, credit assessment and internal administration. They may contact you about products and services relevant to your business, and you can opt out at any time by writing to us.

8. When we may have to share with others

We may disclose your data where it is necessary to:

•     deliver the service you asked for, including delivery, installation support and warranty administration;

•     comply with the law, a court order, or a request from a statutory, regulatory or law enforcement authority;

•     enforce our Terms of Use or other agreements, including recovering what is owed;

•     investigate suspected fraud, counterfeit activity, misuse of the Platform, or a threat to anyone's physical safety; or

•     protect the rights, property or safety of AGI Spares, our customers, our people or the public.

We will not share your data with third parties for their own marketing or advertising without your explicit consent.

9. If our business changes

If we merge, restructure, are acquired, or sell or transfer part of the business, your data may pass to the acquiring or successor entity as part of that. They will be required to adhere to this Policy, and we will tell you through the Platform if anything material changes.

10. How long we keep it

We keep personal data for as long as the purpose requires or the law demands, whichever is longer.

•     Account data while your account is active, and a reasonable period after, to handle disputes.

•     Invoices and tax records for the period set by tax and company law.

•     Traceability records serial or batch numbers, machine details, sale date and purchaser for at least eight (8) years from the date of sale. These let us identify and contact you if a recall or safety action affects your part. This comes from the distribution agreements under which we are authorized to supply genuine parts, so we cannot waive it on request.

•     Marketing preferences kept so we can keep honoring an opt-out you have done.

After that, we delete the data or anonymize it so it can no longer be linked to you.

11. Keeping it safe

We maintain reasonable security practices proportionate to the data we hold, as required under Section 43A of the Information Technology Act, 2000 and under the DPDP Act  encryption in transit, access limited to staff who need it, secure hosting with our platform provider, and periodic review of our systems and of our providers' standards.

Payments run through a gateway that maintains PCI DSS compliance, and card credentials are tokenized in line with Reserve Bank of India directions. They are not stored on our systems.

No system is completely secure, so while we take this seriously, we cannot guarantee absolute security. Please keep your credentials and one-time passwords to yourself and tell us promptly if you think your account has been accessed by someone else.

12. Cookies

We use cookies and similar technologies to keep you signed in, hold your cart, remember preferences, measure how the Platform is used and make our messages more relevant. You can restrict them in your browser, though sign-in and checkout may not work properly if you do.

13. Your rights under the DPDP Act

Subject to the conditions and exemptions in the Digital Personal Data Protection Act, 2023, you have the right to:

•     see a summary of the data we hold about you and what we have done with it;

•     correct, complete or update data that is wrong, misleading, incomplete or out of date;

•     have data erased where it is no longer needed, except where the law or the traceability obligation in Section 10 requires us to keep it;

•     withdraw consent you gave earlier, with effect from then on;

•     nominate someone to exercise your rights if you die or become incapacitated; and

•     raise a grievance about anything we have done or failed to do with your data.

Write to us using the details in Section 15. We may ask you to confirm your identity first, and we will respond within the period the law allows. If our response does not satisfy you, you may approach the Data Protection Board of India.

14. Other things to know

Processing outside India. Some of our providers run infrastructure outside India. Where your data is processed or stored abroad, we make sure the transfer is permitted under Indian law and that the recipient is under appropriate confidentiality and security obligations.

Children. The Platform is for business and professional users and is not aimed at children. We do not knowingly collect data about anyone under 18, and we will delete it if we find we have.

Other websites. We may link to manufacturer documentation and other third-party resources. We do not control those sites or their privacy practices, so do read their policies.

Changes to this Policy. Please check this page from time to time. We update it to reflect changes in our practices, our providers or the law, and we show the date it last changed at the top. We will tell you about significant changes through the Platform or by email.

 

Customer support

For anything to do with our products and services:

Email: agispares@al-gyas.com

Telephone: +91 99300 00842

Hours: [Monday to Saturday, 10:00 to 18:00 IST]

We acknowledge every complaint within 48 hours and aim to resolve it within one month, as required by the Consumer Protection (E-Commerce) Rules, 2020.