Privacy policy
1. About This Policy
LayerX ("we," "us," or "our") operates layerx.cc and provides an online store for 3D printing products including printers, filaments, and resins (collectively, the "Services"). This Privacy Policy describes how we collect, use, store, disclose, and protect your personal data when you visit, browse, create an account, or make a purchase through our Services.
LayerX acts as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and complies with the DPDP Rules 2025, the Information Technology Act 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, and the Consumer Protection (E-Commerce) Rules 2020.
We will request your explicit, affirmative consent before collecting or processing your personal data for non-essential purposes. If this Privacy Policy conflicts with our Terms of Service in matters of data collection or disclosure — this Privacy Policy controls.
2. Definitions
- Personal Data: Any data by which you can be identified or reasonably linked — including your name, email, phone number, and device identifiers.
- Data Principal: You — the individual whose personal data is being processed.
- Data Fiduciary: LayerX — the entity that determines the purpose and means of processing your data.
- Data Processor: Third parties that process data on our behalf under our instructions.
- Processing: Any operation on personal data including collection, storage, use, sharing, or deletion.
- Consent: A free, specific, informed, unconditional, and unambiguous affirmative action by you.
3. Personal Data We Collect
3.1 Data You Provide Directly
- Contact Details: Full name, email address, phone number, shipping and billing address
- Account Information: Username, password, account preferences and settings
- Transaction Details: Products viewed, carted, wishlisted, purchased, returned, or exchanged; order history; invoices
- Communications: Messages sent via email, chat, or support tickets
- Financial Information: Payment card type, last 4 digits, transaction status. Full card numbers are processed by our payment gateway and never stored on our servers.
3.2 Data Collected Automatically
- Device & Technical Data: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click paths, search queries within the site
- Cookie & Tracking Data: Cookies, pixels, and similar technologies (see Section 9)
3.3 Data from Third Parties
- Payment Gateways (Razorpay, PayU): Transaction confirmation data
- Marketing Partners (Meta, Google): Aggregated or pseudonymous data based on your activity
We practice data minimisation — we collect only what is necessary for the purpose stated in this policy.
4. Consent & Legal Basis for Processing
We process your personal data only when we have a lawful basis under Section 4 of the DPDP Act, 2023:
| Purpose | Legal Basis |
|---|---|
| Processing your order and payment | Contract performance + Consent |
| Creating and managing your account | Explicit consent |
| Order confirmations and shipping updates | Contract performance |
| Sending promotional emails or SMS | Explicit opt-in consent |
| Fraud detection and security | Legitimate interest + Legal obligation |
| GST, tax, and legal record compliance | Legal obligation |
| Improving Services via analytics | Legitimate interest (anonymised) |
At account creation, you will be presented with a clear consent checkbox for marketing communications — optional and separate from your purchase. You may withdraw consent at any time without affecting prior lawful processing.
5. How We Use Your Personal Data
5.1 To Provide and Fulfil the Services
- Process orders, payments, and deliveries
- Arrange shipment and courier tracking
- Handle returns and refunds, and provide manufacturer warranty support