Privacy Policy

1. Who We Are

TRYBY Sports (“TRYBY”, “we”, “us”, “our”) is an Indian e-commerce platform operating at www.tryby.in, offering sports jerseys, sportswear, and related accessories to customers across India. Our registered business is located in Kerala, India.

For privacy matters, contact our Data Fiduciary at: official@tryby.in

2. Personal Data We Collect

We collect personal data only to the extent necessary to fulfil the purposes described below:

3. Purposes of Processing

We process your personal data for the following purposes and lawful bases:

4. Digital Products

Where TRYBY offers digital products (gift cards, downloadable content, digital vouchers), the following applies:

• Digital product purchases are fulfilled electronically and are non-refundable once delivered to your registered email or account.
• We retain a record of digital product transactions for billing, tax, and fraud prevention purposes for the same duration as physical order records.
• Redemption data (e.g., whether a gift card has been used) is stored to prevent duplicate claims.

4a. Supplier Marketplace

TRYBY may operate as a marketplace enabling third-party sellers (“Suppliers”) to list products. In that context:

• Supplier business data (GST number, bank details, product catalogues) is collected to operate the marketplace and process payouts.
• Customer data is shared with Suppliers only to the extent required to fulfil an order (e.g., delivery address). Suppliers are contractually bound not to use customer data for independent marketing.
• TRYBY acts as an intermediary under the Consumer Protection (E-Commerce) Rules, 2020 and conducts due diligence on Supplier onboarding.

6. Sharing of Personal Data

We do not sell, rent, or trade your personal data. We share data only as necessary with these categories of service providers who are bound by confidentiality obligations:

• Payment processor: Razorpay Payment Solutions Pvt. Ltd. (payment authorisation, fraud detection — PCI-DSS Level 1 certified)
• Courier & logistics partners: For order delivery and tracking (name, phone, address)
• Cloud infrastructure: Vercel Inc. (hosting), Neon (database)
• Email / communication services: Resend (transactional and support emails)
• Media hosting: Cloudinary Inc. (product images — no personal customer data shared)
• Analytics: Google Analytics (anonymised, aggregated data only)
• Legal authorities: When required by Indian law, court order, or government directive

Where we share data with processors outside India, we ensure appropriate safeguards per the DPDP Act, 2023.

6a. Payment Disclaimer

All payment transactions are processed by Razorpay Payment Solutions Pvt. Ltd., a PCI-DSS Level 1 certified gateway authorised by the Reserve Bank of India (RBI).

• TRYBY Sports does not store card numbers, CVV codes, UPI PINs, or net banking credentials.
• All connections use TLS 1.2 / 1.3 (256-bit SSL) encryption.
• TRYBY will never ask for your OTP, payment credentials, or password via email, phone, SMS, or any other channel. Report any such request to official@tryby.in immediately.
• Failed payment refunds are handled by Razorpay's automated reversal process within 5–7 business days. TRYBY has no control over the timeline of bank-side reversals.

7. Data Retention

• Account data: Retained while the account is active and for 3 years after closure
• Order records: 7 years (required under Indian GST and accounting laws)
• Customer support logs: 2 years from resolution
• Marketing consent records: Until consent is withdrawn, plus 1 year
• Cookie / analytics data: Up to 26 months (Google Analytics default)
• Supplier business data: Duration of supplier agreement + 7 years

8. Cookies and Tracking

We use cookies and similar technologies to operate the website, remember your cart, and understand how visitors use our platform. Please read our Cookie Policy for full details and opt-out instructions.

9. Data Security

• All data in transit is encrypted using TLS 1.2 / 1.3 (256-bit SSL)
• Passwords are hashed using bcrypt and never stored in plaintext
• Database access is restricted to authorised personnel only via role-based access control
• Razorpay is PCI-DSS Level 1 certified; we rely on their infrastructure for payment security
• Regular security reviews of third-party integrations are conducted

In the event of a data breach that is likely to result in harm, we will notify affected users and the relevant authority as required under the DPDP Act, 2023.

10. User Account Policy

• Each user may hold only one active account. Duplicate accounts may be merged or removed.
• You are responsible for maintaining the confidentiality of your credentials and all activity under your account.
• Accounts inactive for more than 24 monthsmay be deactivated after 30 days' notice to the registered email.
• To delete your account, email official@tryby.in with subject “Account Deletion Request”. Processed within 30 days. Order history required for statutory compliance will be retained per Section 7.
• TRYBY reserves the right to suspend or terminate accounts that violate our Terms of Service.

11. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Obtain a summary of your personal data we process
• Correction & Completeness: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Grievance Redressal: Register a complaint with our designated Grievance Officer
• Nomination: Nominate an individual to exercise your rights in the event of death or incapacity
• Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any right, email official@tryby.in with subject “Data Privacy Request” and your registered account details. We will respond within 30 days.

12. Children's Privacy

TRYBY Sports is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a child, we will delete it promptly. If you believe your child has provided us personal data, contact us immediately at official@tryby.in.

13. International Data Transfers

Some third-party providers (Vercel, Cloudinary, Google) may process data outside India. We only use processors that provide adequate data protection guarantees through standard contractual clauses or equivalent frameworks aligned with the DPDP Act, 2023.

14. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes by email at least 7 days beforethey take effect. The “Last Updated” date at the top of this page indicates when the policy was last revised. Continued use of TRYBY after changes constitutes acceptance of the revised policy.

15. Grievance Officer

In accordance with the IT Act, 2000, and the DPDP Act, 2023, the details of our Grievance Officer are: