Privacy Policy
How outofstock.in handles your personal data, and the rights you have over it under India's data-protection law.
Last updated: 9 July 2026
1. Who we are and what this covers
outofstock.in (the "site") is owned and operated by an individual supply-chain practitioner ("we", "us", "our"). The individual supply-chain practitioner operating this site is the data fiduciary responsible for the personal data described in this policy. This Privacy Policy explains what personal data we collect when you visit the site, why we collect it, how long we keep it, who we share it with, and the rights you have over it.
This policy is written to meet the standard of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 made under it. It should be read together with our Cookie Policy, which explains in detail the cookies the site sets, and our Terms of Use.
2. What data we collect
The site is a set of free calculators. It is deliberately low on personal data: the numbers you type into a calculator are processed entirely within your own browser and are never sent to us or stored by us. They exist only on your device while you use the page.
The personal data we do handle is limited to the following categories, most of it collected automatically through the third-party services described in section 5.
| Category | Examples | How it reaches us |
|---|---|---|
| Technical and device data | IP address, browser type and version, device and operating-system type, screen characteristics, referring page. | Automatically, when your browser requests a page, through our hosting and content-delivery providers. |
| Usage and analytics data | Which pages you visit, time spent, links clicked, approximate location (city or region level, derived from IP), and similar interaction data, in aggregated and pseudonymised form. | Through our analytics provider's cookies and tags (see section 5). |
| Data you actively send us | Your name, email address, and the content of your message, if you choose to contact us or raise a grievance. | Only when you email us or use the Contact page. |
We do not ask for, and do not knowingly collect, sensitive personal data through the site, and we do not run advertising networks or sell personal data.
3. Children's data
The site is intended for business and professional users and is not directed at children. Consistent with the DPDP Act, we do not knowingly collect the personal data of a child (a person below eighteen years of age) without verifiable parental consent, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child has provided us personal data, please contact us and we will delete it.
4. Why we use your data, and our lawful basis
Under the DPDP Act we may process your personal data only for a lawful purpose, and either with your consent or for certain legitimate uses the Act permits. We use the data described above for the following purposes:
- To deliver the site to you: serving pages, keeping the site secure, and preventing abuse. This relies on the technical data that is inherent to any website request.
- To understand and improve the site: measuring which tools are used and how, so we can improve them. This relies on your consent, given through the cookie-consent banner described in section 6.
- To respond to you: answering questions, handling grievances, and acting on takedown or data-rights requests you send us. This relies on your having contacted us for that purpose.
- To meet our legal obligations: where a law of India requires us to retain or disclose information.
We do not use your personal data for any purpose that is incompatible with the one for which it was collected without asking you first.
5. Who we share data with (third-party recipients)
We do not sell your personal data. We share limited data with a small number of service providers ("data processors") who help us run the site. Each processes data on our instructions and for the purposes below. Where a provider operates outside India, that transfer is made only as permitted under the DPDP Act and any restrictions notified by the Central Government.
Hosting · Hostinger
The site is hosted by Hostinger on India-region servers. As the host, Hostinger processes the technical data inherent in serving a web page (including your IP address and request logs) to deliver the site and keep it secure.
Content delivery and DNS · Cloudflare
We use Cloudflare as our content-delivery network and DNS provider, and for cookieless performance analytics. Cloudflare routes and caches the site's traffic, and provides security and bot-mitigation. To do this it processes technical and request data such as your IP address, and it may set strictly necessary cookies (for example, a security or bot-management cookie) to distinguish legitimate visitors from automated abuse. Cloudflare also provides Web Analytics, a performance and usage analytics service. It measures page views and visits, page-load performance (Core Web Vitals), referrer, browser and operating-system name, device type, and country. It stores nothing persistently on your device (no cookies, no local storage) and does not fingerprint you; the recipient is Cloudflare, Inc. (United States). See the Cookie Policy for detail.
Analytics · Google Analytics
We use Google Analytics, provided by Google, to understand how the site is used in aggregate. Google Analytics sets cookies and collects usage and device data in pseudonymised form: pages viewed, session activity, approximate (city/region-level) location derived from IP, and device and browser characteristics. We use this only to measure and improve the site. Analytics runs only after you accept it through the cookie-consent banner.
The specific cookies each of these services sets, their purposes, and their durations are listed in our Cookie Policy. We may also disclose personal data where we are required to do so by law, by a court, or by a government authority acting under lawful authority, or to establish, exercise, or defend a legal claim.
6. Cookies and your consent
The analytics and content-delivery services above set cookies. Because of this, the site shows a cookie-consent banner on your first visit. The banner lets you accept or reject non-essential cookies, and the option to reject is presented as prominently as the option to accept. Strictly necessary cookies, those required to serve and secure the site, are always set, as the site cannot function without them; all other cookies, including analytics cookies, are set only if you consent.
You can withdraw your consent at any time, and doing so is as easy as giving it. The Cookie Policy explains how to change or withdraw your cookie choices and lists every cookie the site uses.
7. How long we keep your data
We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as a law of India requires us to keep it, after which we erase it.
- Calculator inputs: never retained, because they never leave your browser.
- Analytics data: retained in pseudonymised form for 14 months, after which it is deleted or fully anonymised, as stated in our Cookie Policy.
- Server and security logs: retained for a short period for security and troubleshooting, then deleted or overwritten.
- Correspondence: messages you send us are kept for as long as needed to resolve your query and to keep a reasonable record of it, then deleted.
8. Your rights over your data
As a data principal under the DPDP Act, you have the following rights in respect of the personal data we hold about you:
- Right to access: to ask us for a summary of the personal data we process about you and the processing activities involved.
- Right to correction and completion: to ask us to correct inaccurate or misleading data, complete incomplete data, and update out-of-date data.
- Right to erasure: to ask us to erase your personal data where it is no longer needed for the purpose it was collected for, unless a law requires us to keep it.
- Right to withdraw consent: where we rely on your consent (for example, for analytics cookies), to withdraw it at any time, as easily as you gave it. Withdrawal does not affect processing already carried out.
- Right to grievance redressal: to raise a grievance with us about how we handle your data, and to have it addressed within the time the law allows (see section 9).
- Right to nominate: to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, contact us using the details in section 9. We may need to verify your identity before acting on a request. Exercising these rights is free, and we will respond within the period required under the DPDP Act and its Rules. If you are not satisfied with how we handle your grievance, you have the right to complain to the Data Protection Board of India.
9. Grievances and how to contact us
outofstock.in is the data fiduciary for this site (the individual supply-chain practitioner). If you have a question about this policy, want to exercise any of your rights, or wish to raise a grievance about how we handle your personal data, you can reach our grievance contact:
- Grievance contact: Grievance Officer, outofstock.in
- Email: [email protected]
You can also reach us through the Contact page. We acknowledge and respond to grievances within the time required under the DPDP Act and its Rules, and we will tell you the outcome of your request.
10. Data-breach handling
We maintain reasonable security safeguards to protect the personal data we hold against unauthorised access, disclosure, loss, or alteration. If a personal-data breach occurs, we will act on it promptly and will notify the Data Protection Board of India and every affected data principal in the manner and within the timelines required under the DPDP Act and the DPDP Rules, 2025, including a description of the breach, its likely consequences, and the measures we are taking in response.
11. Changes to this policy
We may revise this Privacy Policy from time to time, for example, if we change the services we use or as the DPDP Rules are brought fully into force. The current version will always be published on this page with its "Last updated" date. Where a change materially affects your rights, we will take reasonable steps to bring it to your attention.