Privacy Policy

We collect the following categories of personal information in compliance with the DPDP Act, 2023:

• Identity Data: Name, date of birth, gender
• Contact Data: Email address, phone number, shipping address, billing address
• Payment Data: UPI ID, bank account details, card last 4 digits — processed through PCI-DSS compliant payment gateways; we do not store full card numbers
• Order Data: Products purchased, order value, GSTIN (if provided for business purchases), order history
• Device & Usage Data: IP address, browser type, device identifiers, pages visited, time spent — collected via cookies and analytics
• Voluntary Data: Size preferences, style surveys, wishlist data you actively share

We use your personal information for the following purposes:

• Processing and fulfilling your orders, including GST-compliant invoicing
• Managing shipments through our logistics partners (Delhivery, BlueDart)
• Sending transactional communications (order confirmation, dispatch updates, delivery alerts)
• Responding to queries, complaints, and return/exchange requests under Indian consumer law
• Personalising your shopping experience and recommending products
• Marketing communications (with your explicit consent), in compliance with TRAI and IT Act norms
• Detecting and preventing fraud, in accordance with RBI and payment ecosystem guidelines
• Compliance with legal obligations under the GST Act, 2017, and Consumer Protection Act, 2019

Legal Basis: We process your data primarily on the basis of performance of contract (placing an order) and our legitimate interest (fraud prevention, customer service). Marketing is conducted only with your explicit, freely given consent.

Our Platform uses cookies and similar technologies to enhance your browsing experience. Under the IT Act, 2000 (as amended), consent for non-essential cookies is obtained at the time of your first visit.

We do not sell your personal data. We share your information only with:

• Logistics Partners: Delhivery, BlueDart, India Post — for order delivery, in accordance with your shipping preferences
• Payment Gateway: PayU (PayU Payments Private Limited) — for processing UPI, card, and net banking transactions; PCI-DSS compliant
• Cloud & Infrastructure Providers: AWS India for secure data hosting within Indian data centres, in compliance with data localisation requirements
• Marketing Platforms: Google, Meta (only with your consent for retargeting and personalised advertising)
• Legal Authorities: When required by law, court order, or under the IT Act, 2000, or for compliance with GST audits

All third-party data processors are bound by appropriate data processing agreements that ensure your data is handled only as we instruct.

As an Indian consumer, you have the right to:

• Access a copy of your personal data held by us
• Correct inaccurate or incomplete personal data
• Withdraw consent for data processing at any time
• Port your data in a machine-readable format
• Eraseyour personal data (“right to be forgotten”), subject to legal retention obligations under the Companies Act and GST Act
• Grieve with our grievance officer and, if unresolved, escalate to the Data Protection Board of India

To exercise any of these rights, please contact our Data Protection Officer (see Section 7).

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, subject to:

• GST records: Retained for 8 years as per the CGST Act, 2017
• Order & transaction data: Retained for minimum 3 years for consumer protection and dispute resolution under the Consumer Protection Act, 2019
• Marketing preferences: Retained until you withdraw consent

After the retention period, your data is securely deleted or anonymised in accordance with our data retention policy.