ACE

ACE Genuine Parts

Privacy Policy

How we collect, use, and protect your personal information.

ACE Genuine Parts is committed to protecting your personal data in full compliance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA). This Policy explains what we collect, why, how we use it, and your rights.

Grievance Officer

Mr. Arun Malik

arun.malik@ace-cranes.com

Registered Address

Dudhola Link Road, Dudhola, Palwal, Haryana - 121102, India

1. Data Controller

Action Construction Equipment Limited, registered at Dudhola Link Road, Dudhola, Palwal, Haryana - 121102, India, is the data controller for personal information collected through the Platform. For all privacy queries, contact support@ace-cranes.com.

2. Scope & Application

This Privacy Policy applies to all Users of the Platform including Buyers, guest users, and registered users. It governs all personal information ("PI") collected directly or indirectly through the Platform. It does not cover: (a) PI of ACE employees or contractors, who receive separate notices; or (b) PI processing by Sellers or third-party service providers, whose own privacy practices govern their processing.

3. What Personal Information We Collect

3.1 Information You Provide Directly

  • Account Registration: Full name, business name, email address, mobile number, password.
  • Order & Billing: Delivery address, GSTIN, PAN, payment method details (tokenised - full card data never stored by ACE).
  • Communications: Support requests, feedback, reviews, complaints, and survey responses.

3.2 Automatically Collected Information

  • Device & Log Data: IP address, browser type, operating system, device identifiers, App version, date and time of access.
  • Behavioural Data: Pages visited, parts searched, time spent, clickstream data, cart activity, purchase history, browsing history.
  • Location Data: Approximate location if permitted by you, used for delivery optimisation.
  • Cookie & Tracking Data: Session cookies, analytical cookies, preference and marketing cookies (see Section 9).

3.3 Information from Third Parties

  • Payment Gateways: Transaction status, masked payment details, payment confirmation.
  • Logistics Partners: Shipment tracking, delivery confirmations, return initiation records.
  • ACE-Authorised Sellers: Order-relevant data shared for fulfilment purposes.

4. How We Use Your Personal Information

  • Creating and managing your User Account on the Platform.
  • Verifying User identity and processing Orders.
  • Facilitating transactions between Buyers and Sellers (or ACE as Seller of Last Resort).
  • Processing payments through integrated payment service providers.
  • Delivering Products and managing logistics.
  • Issuing GST-compliant invoices and maintaining financial records.
  • Providing customer support and resolving grievances.
  • Sending transactional communications including Order Confirmations, Dispatch Notifications, and Refund updates.
  • Sending marketing and promotional communications (only with your explicit consent).
  • Conducting analytics, market research, and Platform improvement.
  • Fraud prevention, Platform security, and compliance with Applicable Law.
  • Defending or initiating legal proceedings where required.

5. Legal Basis for Processing

Purpose
Legal Basis
Order processing, invoicing & delivery
Contractual necessity
Account management & authentication
Contractual necessity
GST compliance & financial reporting
Legal obligation
Customer support & grievance redressal
Legitimate interest / Contract
Personalisation & product recommendations
Consent / Legitimate interest
Fraud prevention & Platform security
Legitimate interest
Marketing communications (opt-in only)
Consent
Analytics & Platform improvement
Legitimate interest

6. Consent - Collection & Withdrawal

6.1 How We Collect Consent

  • At Registration: An unticked opt-in checkbox is presented for marketing communications (email, SMS, in-App). Proceeding without ticking means transactional-only communications.
  • At Checkout: A separate optional opt-in for product recommendations. Transactional order communications are mandatory and do not require opt-in.
  • Cookie Consent: A cookie banner on your first visit allows you to accept all, essential-only, or customised cookies. Your preference is stored and respected.

6.2 How to Withdraw Consent

  • Marketing email: Click 'Unsubscribe' in any marketing email, or write to support@ace-cranes.com.
  • Marketing SMS: Reply 'STOP' to any marketing SMS from ACE.
  • Cookie preferences: Update at any time via 'Cookie Preferences' in the Platform footer.
  • All other consent: Write to support@ace-cranes.com specifying the consent to be withdrawn. Processed within 10 business days.
  • Withdrawal of consent does not affect your ability to use core Platform features such as browsing, ordering, and tracking.

7. Your Rights Under DPDPA 2023

  • Right to Access: Request a copy of PI we hold about you.
  • Right to Correction: Request correction of inaccurate or incomplete PI.
  • Right to Erasure: Request deletion of your PI, subject to mandatory legal retention obligations.
  • Right to Withdraw Consent: Withdraw consent for marketing or non-essential processing at any time without affecting prior lawful processing.
  • Right to Grievance Redressal: Lodge a data-related concern by writing to support@ace-cranes.com. ACE does not currently have a designated Data Protection Officer; all privacy queries are handled by our support and compliance team. Escalated concerns may be directed to the Grievance Officer at arun.malik@ace-cranes.com.

Note on Data Portability: The right to Data Portability under DPDPA 2023 has not yet been formally notified by the Government of India as of the effective date of this Policy. ACE will extend this right to users once it is officially operationalised.

To exercise your rights, write to support@ace-cranes.com with subject: Privacy Request - [Your Name] - [Nature of Request]. Acknowledgement within 5 business days; resolution within 30 days.

8. Sharing of Personal Information

ACE does not sell your personal information. We share PI only in the following circumstances:

  • Sellers (ACE-Authorised Dealers): Order-relevant data shared on a need-to-know basis for fulfilment.
  • Payment Processors: For secure transaction processing (PCI-DSS compliant).
  • Logistics & Courier Partners: For shipment and delivery.
  • Cloud & IT Service Providers: Under strict data processing agreements.
  • Regulatory Authorities: Where required by law, court order, or government directive.
  • ACE Group Entities: For marketing, analytics, and operational support.
  • Corporate Restructuring: In connection with mergers, acquisitions, or similar transactions.

9. Cookies & Tracking Technologies

  • Essential Cookies: Required for Platform functionality (sessions, cart). Cannot be disabled.
  • Analytical Cookies: Understand usage patterns. Used with consent.
  • Preference Cookies: Remember your settings. Used with consent.
  • Marketing Cookies: For targeted communications. Only active with opt-in.
  • Manage preferences via the cookie consent banner on first visit or via 'Cookie Preferences' in the Platform footer.

10. Data Security

  • 256-bit SSL/TLS encryption for all data in transit.
  • AES-256 encryption for data at rest.
  • Multi-factor authentication for administrative access.
  • Regular security audits, vulnerability assessments, and penetration testing.
  • Access controls on a strict need-to-know basis.
  • In the event of a data breach affecting your rights, we will notify affected users and the Data Protection Board of India as required under DPDPA 2023.

11. Data Retention

Data Category
Retention Period
Transaction & Order Records
8 years (GST compliance)
Account Data
Duration of active account + 2 years post-closure
Marketing Preferences
Until opt-out or withdrawal of consent
Support Interactions
3 years from last interaction
Log & Technical Data
12 months rolling

12. Children's Privacy

The Platform is not directed at individuals under 18 years of age. ACE does not knowingly collect PI from minors. If you believe a minor has provided PI through the Platform, contact support@ace-cranes.com immediately for prompt deletion.

13. Cross-Border Data Transfers

Your PI is primarily stored and processed within India. Cross-border transfers, where required (for example, global cloud infrastructure), are subject to appropriate contractual safeguards ensuring equivalent data protection standards.

14. Amendments

ACE reserves the right to revise this Privacy Policy at any time. Changes will be posted on the Platform with an updated date. Continued use of the Platform after changes constitutes acceptance.

15. Contact for Privacy Queries

Privacy Queries
support@ace-cranes.com
Grievance Officer
Mr. Arun Malik | arun.malik@ace-cranes.com
Subject Line
Privacy Request - [Your Name] - [Nature of Request]
Response Time
Acknowledgement within 5 business days; resolution within 30 days
Address
Dudhola Link Road, Dudhola, Palwal, Haryana - 121102, India

ACE Genuine Parts

Committed to Authenticity, Quality and Your Trust

Copyright 2026 Action Construction Equipment Limited. All Rights Reserved.

ACE Support whatsapp