1. Introduction
ROCK & RISE ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect through rocknrise.in, why we collect it, and how we keep it safe.
2. Information We Collect
When you register or book a service, we collect:
- Identity Data: Full name
- Contact Data: Email address, mobile number, postal address (when needed)
- Account Data: Encrypted password (hashed using bcrypt — we never store plain passwords)
- Booking Data: Service type, preferred date, notes you provide
- Payment Data: Razorpay order ID, payment ID — we do NOT store your card / UPI / bank details; these are handled directly by Razorpay
- Technical Data: IP address, browser type, device info, timestamps (standard server logs)
3. How We Use Your Information
We use your data to:
- Create and manage your account
- Process bookings and payments
- Issue GST-compliant invoices
- Contact you about your booking (phone, email, SMS)
- Provide customer support
- Comply with legal and tax obligations under Indian law
- Improve our website and services
4. Legal Basis
We process your data based on:
- Contract: To deliver the services you've booked
- Legal Obligation: To meet GST, MSME, and other statutory requirements
- Legitimate Interest: To run our business and prevent fraud
- Consent: Where applicable, given when you register
5. Sharing Your Information
We do NOT sell, rent, or trade your personal data. We share data only with:
- Razorpay — to process payments (PCI-DSS Level 1 compliant)
- Government authorities — when required by law (GST returns, court orders, etc.)
- Hosting provider — our data is stored on Hostinger's secure servers
6. Data Security
We implement industry-standard security measures including:
- HTTPS / SSL encryption for all data in transit
- Password hashing using PHP's
password_hash()(bcrypt) - Prepared SQL statements to prevent injection attacks
- CSRF protection on all forms
- HMAC-SHA256 signature verification on all payments
- Server-level access controls
However, no transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to using reasonable industry safeguards.
7. Data Retention
We retain your account data for as long as your account remains active. Booking and payment records are retained for at least 8 years as required by Indian GST and tax laws. You may request account deletion by contacting us, subject to legal retention requirements.
8. Your Rights
Under Indian data protection regulations, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account (subject to legal retention)
- Withdraw consent at any time
- Lodge a complaint with appropriate regulatory authorities
To exercise any of these rights, email us at mmhrockrise94@gmail.com.
9. Cookies
Our site uses essential PHP session cookies to keep you logged in and to protect forms from CSRF attacks. These cookies are deleted when you close your browser or log out. We do NOT use third-party tracking cookies or advertising cookies at this time.