LEO Rubber Bands logo
L E O
Household Essentials
Home Products About Contact
Legal

Privacy Policy

How we collect, use, and protect your information.

Last updated: September 24, 2026

This policy is framed in accordance with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and explains how LEO Rubber Bands, as "Data Fiduciary", processes your "personal data" as those terms are defined under the Act.

1. Who We Are

LEO Rubber Bands (operated by Metro Marketing) is a rubber band manufacturer and household essentials supplier based in Bhavanipuram, Vijayawada, Andhra Pradesh, India. This policy explains how we handle information collected through leostore.in ("the Site").

2. Information We Collect

We collect information in the following ways:

  • Contact form submissions — name, email address, phone number, and message content when you enquire about products, bulk orders, or dealership.
  • Direct communication — details you share when you call, email, or WhatsApp us directly.
  • Automated analytics (only with your consent) — pages visited, device/browser type, approximate location, and on-site behaviour, collected via Google Analytics, Google Tag Manager, and Microsoft Clarity. These load only after you accept analytics cookies in the consent banner — see Section 5.

We do not process online payments or store card details on this Site — all orders are confirmed and settled directly with our sales team by phone, bank transfer, or UPI.

3. Your Consent

Where the DPDP Act requires it, we process your personal data only on the basis of your free, specific, informed, unconditional and unambiguous consent, given through a clear affirmative action (e.g. ticking the consent box on our contact form, or accepting analytics cookies in the banner). Consent requests are given in clear, plain language and specify what data is collected and why, before or at the time of collection.

You may withdraw your consent at any time, as easily as you gave it:

  • For analytics cookies — click "Cookie Preferences" in the footer of any page and change your choice.
  • For enquiry/contact data — email support@leostore.in.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and may mean we are unable to respond to a pending enquiry or continue providing a feature that depends on that data.

4. How We Use Your Information

  • To respond to product, pricing, and bulk order enquiries.
  • To process and fulfil orders agreed over phone or email.
  • To improve the Site's content, performance, and user experience (analytics, consent-gated).
  • To detect and prevent spam submissions (via hCaptcha).

We do not sell or rent your personal information to third parties, and we do not use your data for any purpose beyond what is described in this policy without asking for fresh consent.

5. Cookies & Analytics Tools

Strictly necessary storage runs by default, as it does not involve processing personal data for a secondary purpose. All analytics and tracking tools below are off until you click Accept in the cookie banner shown on your first visit. Reject is offered with equal prominence and keeps them off:

  • Google Analytics 4 — usage and traffic analytics. Cookies: _ga and _ga_* (up to 2 years).
  • Google Tag Manager — tag management for the tools listed here. It sets no cookies of its own.
  • Microsoft Clarity — session heatmaps and behaviour analytics. Cookies: _clck (1 year) and _clsk (1 day).
  • hCaptcha — spam and bot protection on our contact form (runs only when you submit the form; treated as strictly necessary for fraud prevention).

Strictly necessary items kept in your browser: leo_cookie_consent (remembers your Accept/Reject choice) and leo-theme (your light/dark preference). Both stay until you clear your browser data.

You can change your choice anytime using the Cookie Preferences link (also in the footer of every page). Choosing Reject there also removes the analytics cookies listed above. You can also disable cookies through your browser settings. Rejecting analytics cookies will not prevent you from browsing the Site or contacting us directly.

6. Data Sharing & Cross-Border Transfer

We share information only with service providers who help us operate the Site — EmailJS (form delivery), our hosting provider, and the analytics vendors listed above (once you consent) — and only to the extent needed to provide those services. Some of these providers may process data on servers located outside India; where this happens, it is carried out in accordance with the DPDP Act's provisions on cross-border transfer. We may also disclose information if required by Indian law or a valid legal process.

7. Data Retention & Erasure

Enquiry and order-related information is retained only as long as necessary to fulfil your request and for our business records, typically not exceeding 3 years from your last interaction with us, unless a longer period is required by law or an ongoing business relationship. Once the purpose is served and no legal retention requirement applies, we erase or anonymise the data. You may request earlier erasure at any time (Section 9).

8. Data Security & Breach Notification

We use reasonable technical and organisational safeguards to protect your data, including HTTPS encryption in transit, restricted access to enquiry records, and hashed credentials for our administrative systems. In the unlikely event of a personal data breach that affects you, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.

9. Your Rights Under the DPDP Act, 2023

Subject to the Act, you have the right to:

  • Access a summary of the personal data we hold about you and how it is processed.
  • Correct or update inaccurate or incomplete personal data.
  • Erase personal data that is no longer necessary for the purpose it was collected.
  • Withdraw consent at any time (Section 3).
  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
  • Grievance redressal — raise a complaint with us and receive a response (Section 10) before approaching the Data Protection Board of India.

To exercise any of these rights, email support@leostore.in with your request. We will verify your identity where necessary and respond within a reasonable timeframe, and in any event within the period prescribed under the DPDP Act and its rules.

10. Grievance Officer

In accordance with the DPDP Act, 2023, grievances relating to the processing of your personal data may be addressed to our Grievance Officer:

Grievance Officer
LEO Rubber Bands (Metro Marketing)
1-4/1-12, Bose Bomma Veedhi, Kamakothi Nagar, Bhavanipuram, Vijayawada-12, Andhra Pradesh, India
Email: support@leostore.in
Phone: +91-9440137934

We aim to acknowledge grievances promptly and resolve them within the timeframe prescribed under the DPDP Act and its rules. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

11. Children's Privacy

The Site is intended for businesses and adults making wholesale or retail enquiries. We do not knowingly collect personal data from children (individuals under 18 years of age) or process it without verifiable parental/guardian consent as required under the DPDP Act. If we become aware that we have inadvertently collected a child's personal data without such consent, we will delete it promptly — contact support@leostore.in to report this.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top reflects the most recent revision. Material changes affecting how we use previously collected data will be notified before they take effect, where required.

13. Contact Us

For any privacy-related questions, contact us at support@leostore.in or call +91-9440137934.