Last Updated: 11th July 2026
Rotoris World Private Limited
Rotoris ("Rotoris", "we", "our", "us") values your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit www.rotoris.com ("Website"), create a Rotoris Profile, or purchase from us. It also explains the rights you have over your information and how to exercise them.
If you are located in the European Economic Area ("EEA") or the United Kingdom, additional rights and protections under the General Data Protection Regulation ("GDPR") apply to you, and this policy describes them.
Rotoris World Private Limited is the data controller responsible for your personal information.
Contact: [email protected]
Address: 376 Phase 2, Udyog Vihar, 122016
Information you give us:
Information collected automatically:
Information we derive:
Payment details are processed securely by third-party payment gateways. Rotoris does not store full credit or debit card information.
We collect only what we have a genuine business reason to hold. If you choose not to provide optional Rotoris Profile fields, you can still browse the Website and purchase accessories. Purchasing a Rotoris timepiece requires a Rotoris Profile, as timepieces are made available through our invitation-based Registry.
| Purpose | Legal basis (GDPR) |
|---|---|
| Fulfilling orders, delivery, payments, warranty and after-sales service | Contract performance (Art. 6(1)(b)) |
| Creating and maintaining your Rotoris Profile / Registry membership | Contract performance / pre-contractual steps (Art. 6(1)(b)) — the Profile is necessary for Registry membership and timepiece purchase; consent (Art. 6(1)(a)) for optional profile fields |
| Sending marketing and promotional communications by email and WhatsApp | Consent (Art. 6(1)(a)) — see Section 4 |
| Personalising your experience and organising your profile | Consent (Art. 6(1)(a)) and our legitimate interest in offering a personalised service (Art. 6(1)(f)) |
| Improving our Website, products, and services; analytics | Legitimate interest (Art. 6(1)(f)); consent for non-essential cookies |
| Preventing fraud and securing our systems | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal, tax, and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interest, we have assessed that our interest does not override your rights and freedoms. You may object at any time (Section 9).
Profile information is reviewed and organised by the Rotoris team, and every customer decision including purchase invitations is made by a member of our team.
When you create a Rotoris Profile or join the Registry, we present two clear, separate checkboxes:
By ticking the marketing consent box, you agree to be contacted by Rotoris on email and WhatsApp. Marketing consent is never a condition of creating a profile or making a purchase, and no consent box is ever pre-ticked.
Opting out is as easy as opting in. You may withdraw marketing consent at any time by:
When you opt out, marketing stops across all channels (email, WhatsApp, SMS) without undue delay. Withdrawal does not affect the lawfulness of processing before withdrawal, and we will still send essential service messages (such as order confirmations).
Every marketing email we send includes an unsubscribe link and a link to this Privacy Policy.
We use cookies and similar technologies (pixels, beacons) on the Website:
If you visit from the EEA/UK, non-essential cookies are not set until you make a choice through our cookie banner, where you can Accept all, Reject non-essential, or Customise your preferences. You can change your choice at any time through the cookie settings link on the Website, and additionally manage cookies in your browser settings.
We never sell your personal information. We share it only with trusted service providers ("processors") who act on our instructions under data protection agreements:
| Processor | Purpose |
|---|---|
| Shopify | Website hosting, storefront, and checkout |
| Email and CRM providers | Email and CRM communications |
| WhatsApp Business service provider | WhatsApp messaging |
| Cloud hosting providers | Cloud hosting and data storage |
| Payment gateways | Secure payment processing |
| Logistics providers | Order delivery |
We may also disclose information when required by law, court order, or government request, or in the event of a business transfer such as a merger, acquisition, or sale of assets (in which case this policy will continue to apply to your data, and you will be notified of any change of controller).
Rotoris is based in India, so your information may be processed in India, and by our processors in the United States and other countries.
For individuals in the EEA/UK: India and (in general) the United States are not covered by a blanket European Commission adequacy decision. Where your personal data is transferred outside the EEA/UK, we protect it using Standard Contractual Clauses (SCCs) approved by the European Commission, signed with each processor, together with supplementary measures such as encryption in transit and at rest and strict access controls. Where a US processor is certified under the EU-U.S. Data Privacy Framework, that certification provides an additional safeguard.
You may request a copy of the relevant safeguards by contacting [email protected].
| Data category | Retention period |
|---|---|
| Rotoris Profile / Registry data | Until you delete your profile, or after 6 years of inactivity, whichever is earlier |
| Order and transaction records | 8 years as required by Indian tax and accounting law |
| Marketing consent records and preferences | For as long as your consent is active, plus 3 years as proof of consent |
| Customer support communications | 24 months after resolution |
| Cookies and analytics data | Per the durations shown in our cookie banner, up to 13 months |
When a retention period ends, we delete or irreversibly anonymise the data. Where you request deletion (Section 9), we retain only what the law requires us to keep (e.g., invoice records) and tell you what that is.
You have the following rights over your personal information. If you are in the EEA/UK, these are guaranteed under GDPR Articles 15–22:
You also have the right to withdraw consent at any time (Section 4).
How to exercise your rights:
We respond to verified requests within one month. If a request is complex, we may extend this by up to two further months and will tell you why. Exercising your rights is free of charge.
Complaints: If you are unhappy with how we handle your data, please contact us first. We take every concern seriously.
We protect your personal data with encryption in transit and at rest, firewalls, secure servers, two-factor authentication for internal systems, role-based access controls (so only team members who need your data can see it), and audit logging. While we take all reasonable steps, no system can guarantee absolute protection against cyberattacks or unauthorised access.
If a data breach occurs that poses a risk to you, we will notify the relevant supervisory authority within 72 hours and inform you directly where the risk is high, as required by GDPR Articles 33–34.
Our Website and products are not directed at children. We do not knowingly collect personal data from anyone under 18 (or under the applicable age of digital consent in your country). If you believe a minor has provided us with data, contact [email protected] and we will delete it.
We may update this Privacy Policy periodically. Changes will be posted here with a revised "Last Updated" date, and where changes are material — particularly changes affecting your rights or how we use your data — we will notify you by email or on the Website before they take effect.
Privacy questions, requests, or complaints:
Email: [email protected]
Rotoris World Private Limited
376, Udyog Vihar, Gurugram 122016
© 2026 Rotoris World Private Limited. All Rights Reserved.