Privacy Policy

1. Introduction

As a responsible Data Fiduciary under the Digital Personal Data Protection (DPDP) Act, 2023, we are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, process, and protect your digital personal data when you interact with our website, mobile application, and related services (collectively, the "Platform"). By using our Platform, you, as the Data Principal, agree to the practices described in this notice.

2. Personal Data We Collect

We only collect personal data that is strictly necessary for the purposes outlined in this policy. The types of data we may collect include:

• Identity & Contact Data: Name, email address, phone number, shipping address, and billing address.
• Financial & Transaction Data: Payment status, order history, and purchase preferences (Note: We do not store full credit card numbers or UPI PINs; these are processed securely by our regulatory-compliant payment gateway partners).
• Account Data: Username, password, and communication preferences.
• Technical & Usage Data: IP address, browser type, device information, and interaction metrics with our Platform.

3. Purpose of Processing Your Data

We collect and process your personal data solely for the following legitimate purposes:

• Order Fulfillment: To process your purchases, facilitate shipping via our logistics partners, and manage returns or refunds.
• Customer Support: To resolve queries, respond to complaints, and provide after-sales assistance.
• Personalization & Marketing: To send updates about new products, promotional offers, and tailored recommendations (strictly subject to your explicit consent).
• Security & Fraud Prevention: To verify your identity, secure your account, and prevent fraudulent transactions.
• Legal Compliance: To comply with applicable Indian laws, tax regulations, and lawful requests from government authorities.

4. Consent and Withdrawal

Obtaining Consent: We process your personal data based on your free, specific, informed, unconditional, and unambiguous consent, obtained through clear affirmative action (e.g., ticking a checkbox at checkout or account creation).

Right to Withdraw: You have the right to withdraw your consent at any time. You can do this by navigating to your account settings, clicking the "unsubscribe" link in our emails, or contacting our Grievance Officer.

Note: Withdrawing consent will not affect the legality of data processing completed before the withdrawal, but it may restrict our ability to provide certain services to you.

5. Your Rights as a Data Principal

Under the DPDP Act, 2023, you hold the following rights over your digital personal data:

• Right to Grievance Redressal: You have the right to register a complaint regarding our data processing practices with our Grievance Officer (details below) and escalate it to the Data Protection Board of India if unresolved.
• Right to Nominate: You may nominate another individual to exercise your privacy rights on your behalf in the event of your death or incapacity.

6. Sharing Data with Third Parties (Data Processors)

To operate our D2C business efficiently, we may share your data with trusted third-party Data Processors. We remain accountable for your data and ensure these partners are bound by strict data protection agreements. Categories of processors include:

• Payment gateways for transaction processing.
• Logistics and courier partners for order delivery.
• Cloud storage and IT infrastructure providers.
• Marketing and communication platforms (only if you have opted-in).

7. Data Retention

We retain your personal data only for as long as is necessary to fulfill the specified purposes, or as required by law (e.g., tax records, consumer protection mandates). Once the purpose is fulfilled or you withdraw your consent, your data will be securely erased or anonymized within a reasonable timeframe, unless retention is legally mandated.

8. Security Safeguards

We implement robust, industry-standard security safeguards to protect your personal data from unauthorized access, breach, alteration, or destruction. This includes data encryption, secure socket layer (SSL) technology, access controls, and regular vulnerability audits. In the unlikely event of a personal data breach, we will promptly notify you and the Data Protection Board of India as required by law.

9. Children's Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we discover that we have inadvertently collected data from a minor without verifiable parental or guardian consent, we will delete that information immediately. We strictly prohibit behavioral monitoring or targeted advertising directed at children.

10. Grievance Redressal Mechanism

If you have any questions, wish to exercise your rights, or want to register a privacy-related complaint, please contact our designated Grievance Officer.

We are committed to addressing your concerns within the legally mandated timeframe of 30 days as per Section 13 of the DPDP Act, 2023.

11. Manage Your Cookie Consent

You can review and update your cookie preferences at any time. Your consent is recorded and can be withdrawn or modified below.