Privacy Policy

Last Updated: March 2026

Color Papers India Private Limited ("we", "our", or "us") is committed to protecting your personal information and the data of all parties whose information we process. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cpipl.ltd, use our services, or interact with our technology platforms that integrate with third-party marketplace APIs including the Amazon Selling Partner API (SP-API).

1. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, shipping address, billing address, and GST details when you fill out our contact forms or place orders.
• Business Information: Company name, business type, import/export requirements, and marketplace seller details.
• Technical Data: IP address, browser type, device information, and browsing behavior on our website through cookies and analytics tools.
• Marketplace Data: Order information, product listings, inventory data, pricing data, and fulfillment details obtained through authorized marketplace API integrations (including Amazon SP-API) for the purpose of providing our services.
• Customer Personally Identifiable Information (PII): Buyer names, shipping addresses, phone numbers, and email addresses received through marketplace APIs solely for order fulfillment and customer service purposes.

2. How We Use Your Information

We use the collected information for:

• Processing and fulfilling import/export orders and marketplace orders
• Communicating with you about services, quotes, and shipments
• Customs documentation and regulatory compliance
• Marketplace operations including order management, repricing, and inventory synchronization
• Improving our website and services
• Sending promotional communications (with your consent)
• Legal compliance and dispute resolution

3. Amazon Selling Partner API (SP-API) Data

We access data through the Amazon Selling Partner API to provide marketplace management services. This section specifically addresses how we handle Amazon-related data:

• Data Collected: Order details (order IDs, item details, quantities, prices), customer shipping information (names, addresses, phone numbers), product catalog data, inventory levels, financial transaction data, and tax-related data (GST details, tax rates, tax amounts, HSN/SAC codes) as authorized by the Amazon SP-API.
• Purpose of Use: Amazon data is used exclusively for providing marketplace seller services including order fulfillment, inventory management, automated repricing, sales analytics, tax invoice generation, tax calculation and remittance, and customer service — strictly in accordance with Amazon's Marketplace Developer Agreement.
• PII Handling: Customer PII received through Amazon SP-API is handled with the highest level of care. PII is encrypted in transit using TLS 1.2+ and encrypted at rest using AES-256. PII is never stored in application logs. Access to PII is restricted to authorized personnel on a strict need-to-know basis.
• Data Retention: Amazon marketplace data is retained only as long as necessary to fulfill the purpose for which it was collected. Order data is retained for a maximum of 24 months for business reporting and compliance purposes. Customer PII is deleted or anonymized within 30 days of it no longer being required for order fulfillment or customer service.
• No Sale of Data: We do not sell, rent, lease, or share Amazon customer PII with any unauthorized third parties. Amazon data is never used for marketing, advertising, or any purpose not directly related to the services we provide to sellers.
• Data Deletion Requests: Upon request from Amazon, a seller, or a customer, we will delete the relevant PII within 10 business days and provide written confirmation of deletion.
• Breach Notification: In the event of a data breach involving Amazon data, we will notify Amazon within 24 hours of discovery, notify affected parties as required by applicable law, and take immediate remediation steps as outlined in our Data Protection Policy.

4. Information Sharing

We may share your information with:

• Shipping carriers and logistics partners for order fulfillment
• Customs authorities as required by law
• Payment processors for transaction processing
• Government agencies when legally required
• Cloud infrastructure providers (with appropriate data processing agreements in place)

We do not sell, rent, or trade your personal information or marketplace customer data to any third parties. All third-party service providers who access data are bound by contractual obligations to maintain confidentiality and security.

5. Data Security

We implement industry-standard and Amazon-compliant security measures to protect all data:

• TLS 1.2+ encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access control (RBAC) with principle of least privilege
• Multi-factor authentication for system access
• Regular security assessments and vulnerability testing
• Network firewalls and intrusion detection systems
• Comprehensive audit logging of all data access

For full details on our security measures, please refer to our Data Protection Policy.

6. Cookies

Our website uses cookies to enhance your browsing experience and analyze website traffic. You can control cookie settings through your browser preferences.

7. Compliance with Applicable Laws

We comply with all applicable data protection laws and regulations including:

• India's Digital Personal Data Protection Act, 2023 (DPDP Act)
• Information Technology Act, 2000 and IT Rules
• General Data Protection Regulation (GDPR) where applicable for EU data subjects
• Amazon's Data Protection Policy (DPP) and Marketplace Developer Agreement

8. Your Rights

You have the right to:

• Access, update, or delete your personal information
• Opt out of promotional communications
• Request a copy of the data we hold about you
• Request deletion of your data (subject to legal retention requirements)
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, please contact our Data Protection Officer at the details below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. Contact Us

For any privacy-related questions, data access requests, or concerns, please contact us:

Data Protection Officer
Color Papers India Private Limited
Email: connect@cpipl.ltd
General: connect@cpipl.ltd
Phone: +91 63911 11662
Address: Ground Floor, 1st, 2nd & 3rd Floor Vrindavan Building, Thane, Maharashtra, India - 401107