Privacy Policy

In this Privacy Policy, the following terms bear the meanings assigned to them below. All other terms used but not defined herein shall bear the meanings ascribed to them in the Digital Personal Data Protection Act, 2023 ("DPDPA") and rules made thereunder.

SKONIX International Private Limited is a premium Indian footwear brand. We are currently in the pre-launch phase, building our founding member community through our Priority List waitlist programme. We are incorporated and registered in India and operate exclusively under Indian law.

As the Data Fiduciary under the DPDPA 2023, we are responsible for determining how and why your personal data is processed, and for ensuring that such processing is lawful, fair, and transparent.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you visit the Website, certain data is collected automatically through cookies, server logs, and analytics tools. This data does not directly identify you but may constitute personal data when combined:

3.3 Data We Will Collect in Future (Pre-Notice)

As we expand our Services, we anticipate collecting additional data for the purposes listed below. This Policy constitutes advance notice pursuant to Section 5 of the DPDPA. Separate, specific consent will be obtained at the time of collection for each category:

• Shipping and delivery address for order fulfilment
• Payment information (processed solely by PCI-DSS compliant payment gateways; the Company does not store raw card data)
• Order history, product preferences, and wishlist data
• Account credentials (email, hashed password) for registered user accounts
• Product reviews and ratings
• Loyalty programme participation data
• Mobile device information if a SKONIX app is launched

We process your personal data on the following legal bases:

When you submit the waitlist form, you provide specific, informed, and unambiguous consent to the processing described in this Policy. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent, email hello@skonix.in or click "Unsubscribe" in any email we send you.

We process personal data strictly for the purposes stated at the time of collection. We do not use your data for automated decision-making that produces legal or similarly significant effects without human oversight. Current uses:

• Waitlist Management: Adding you to our Priority List waitlist in Brevo and sending you priority launch communications.
• Transactional Emails: Sending confirmation, updates, and launch notifications relevant to your registration.
• Website Analytics: Understanding how visitors interact with the Website to improve design, content, and user experience.
• Security & Fraud Prevention: Detecting and preventing abuse of our systems, including spam, bot submissions, and invalid email registrations.
• Legal Compliance: Maintaining records where required by applicable law, and responding to legal processes.
• Marketing Communications: Sending you brand updates, collection previews, and launch information — for which you have consented by joining the Priority List.

Our Website uses cookies and similar tracking technologies. In summary, the active cookies set on your browser are:

We use localStorage (not a cookie) to remember whether you have already joined the Priority List, so we can display the success state on your return visit. This data does not leave your device and is never transmitted to our servers.

We use Google Analytics 4 (GA4, Measurement ID: G-95492P4ZY5) to collect aggregate, anonymised statistics about Website usage. GA4 is deployed through Google Tag Manager (Container ID: GTM-WVJDKW7R).

Data collected through GA4 is processed by Google LLC in accordance with Google's Privacy Policy (policies.google.com/privacy). Google LLC acts as a Data Processor on our behalf.

GA4 Configuration

• IP Anonymisation: Enabled. Full IP addresses are never stored.
• Data Retention: Set to 14 months (GA4 default, reduced from maximum).
• Advertising Features: Disabled. We do not use GA4 for remarketing.
• Google Signals: Not enabled.
• User ID: Not implemented (no user accounts currently).
• Enhanced Measurement: Enabled for page views, scroll tracking, and outbound clicks.

Opting Out of Google Analytics

You may opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on, or by configuring your browser to block Google Analytics cookies. You may also configure privacy settings through your browser or use a privacy-respecting browser extension.

Your email address and any additional details you provide are transmitted to Brevo SAS (formerly Sendinblue), a French company operating under GDPR compliance. Brevo acts as a Data Processor on our behalf and is bound by a Data Processing Agreement that requires them to process your data only on our instructions.

Brevo is used exclusively for the following purposes:

• Storing your email in our Priority List waitlist contact group
• Sending you the Priority List waitlist confirmation email
• Sending launch updates, collection previews, and brand communications you have consented to receive

Brevo's servers are located in the European Union. By joining our Priority List waitlist, you consent to your email address being stored and processed by Brevo under the terms described in Brevo's Privacy Policy (brevo.com/legal/privacypolicy). This transfer is lawful under Indian law as the European Union provides an adequate level of data protection.

Future providers (activated when respective features go live): Payment gateways (Razorpay, PayU, or equivalent), logistics partners (Delhivery, Bluedart, or equivalent), marketplace platforms (Amazon, Flipkart, Myntra, Ajio), and mobile app infrastructure providers. All such providers will be bound by data processing agreements.

We do not sell, rent, or share your personal data with any third party for their independent commercial purposes. We share personal data only in the following limited circumstances:

• Service Providers: With third-party Data Processors listed in Section 9, under contractual obligations that restrict their use to providing services to us.
• Legal Requirements: Where required by applicable law, court order, or direction of a competent authority under the DPDPA, IT Act, or other applicable legislation.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all assets, your data may be transferred subject to the acquirer maintaining data protection standards equivalent to or better than this Policy. We will notify you prior to any such transfer.
• Protection of Rights: Where necessary to protect the legal rights, property, or safety of SKONIX, our users, or the public, as required or permitted by law.

Standard Legal Retention Note: Notwithstanding anything to the contrary contained in this Policy, we may retain your personal data for a longer duration where such retention is required under applicable law, or where necessary for the establishment, exercise, or defence of legal claims.

We implement technical and organisational measures appropriate to the risk level of processing. Our current security controls include:

• Secure Transport Encryption: All data transmitted between your browser and our servers is protected using secure transport encryption protocols (enforced by Netlify).
• Authorized Access Control: Access to our administrative platforms and databases is strictly limited to authorized personnel utilizing secure multi-factor authentication controls.
• Anti-Spam Controls: We employ automated form validation and verification techniques to detect and block automated bot submissions and spam.
• Secured Configuration: All sensitive integration credentials, API tokens, and operational parameters are managed securely in server-side environments and are never exposed to client-side browsers.

No method of electronic transmission or storage is 100% secure. While we take commercially reasonable precautions, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify you and the appropriate authority within 72 hours as required by applicable law.

As a Data Principal under the DPDPA 2023, you have the following rights. These rights are exercisable by contacting our Grievance Officer:

The Website and Services are not directed at children below the age of 18 years. In accordance with Section 9 of the DPDPA 2023, we do not knowingly collect personal data of children. We do not process data of children in a manner that is detrimental to their wellbeing, and we do not undertake tracking or behavioural monitoring of children.

If you are below 18 years of age, you must not use our waitlist form or provide any personal data through this Website. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at hello@skonix.in. We will delete such data within 14 business days of verified notification.

This Website is operated from India and governed by Indian law. If you access this Website from outside India, you do so voluntarily and acknowledge that your data will be processed in accordance with Indian law, including the DPDPA 2023.

Where your data is transferred to processors in other jurisdictions (e.g., Brevo in the EU, Google LLC in the USA), such transfers are made to jurisdictions recognised as providing adequate data protection, or are governed by contractual clauses that provide equivalent protection.

European Union Users: If you are an EU resident, you also benefit from the protections of the General Data Protection Regulation (GDPR). Our lawful basis for processing EU residents' data is consent (Article 6(1)(a) GDPR). You have additional rights under GDPR including the right to data portability (Article 20) and the right to lodge a complaint with your local supervisory authority.

California Residents: We do not sell personal information as defined under the California Consumer Privacy Act (CCPA). You have the right to opt out of any sale of your data. As we do not sell data, no opt-out mechanism is required, but you may contact us for confirmation.

By joining the SKONIX Priority List waitlist, you expressly consent to receiving the following types of communications from us:

• Welcome and confirmation emails
• Launch date announcements and countdown updates
• First-look collection previews and product reveals
• Exclusive launch pricing and early access notifications
• Brand story updates and founder communications
• Post-launch order confirmations, shipping updates, and service communications

We will not send unsolicited promotional communications. Every marketing email includes an unsubscribe link. You may also email us at hello@skonix.in to opt out of any category of marketing communications while remaining on the Priority List.

SKONIX intends to expand its Services to include e-commerce transactions, mobile applications, marketplace integrations, and B2B distribution. Each new service will involve additional data processing activities. Before any such expansion, we will:

• Update this Privacy Policy to reflect new data processing activities
• Provide you with notice of material changes via email at least 14 days before changes take effect
• Obtain fresh, specific consent for any new processing purpose not covered by your existing consent
• Ensure all new third-party processors are bound by appropriate data processing agreements

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, or business practices. The "Last Updated" date at the top of this page will always indicate when the current version was published.

For material changes — those that significantly affect your rights or our data processing activities — we will notify you by email at least 14 days before the changes take effect, and will request fresh consent where required. Your continued use of the Website or Services after the effective date of a revised Policy constitutes your acceptance of the changes, provided that such acceptance does not waive any rights you have under applicable law.

In accordance with Section 8(9) of the DPDPA 2023 and Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the following officer has been designated as the Grievance Officer for this Website:

Grievances relating to the processing of your personal data must be submitted in writing (email is acceptable) and will be acknowledged within 48 hours and addressed within 30 days of receipt, in accordance with the DPDPA 2023. If your grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India (DPBI) where available under applicable law and applicable rules in force.