We collect various types of information to provide and improve our services to you. This information helps us deliver a personalized shopping experience and fulfill your orders efficiently.

Personal Information You Provide

• Account Information: Your name, email address, phone number, and password when you create an account on our platform
• Billing and Shipping Information: Complete billing address, shipping address, and payment information necessary for order processing
• Order Information: Detailed purchase history, product preferences, order details, and transaction records
• Communication Information: Any information you provide when contacting customer support, subscribing to newsletters, participating in surveys, or leaving product reviews

Information Collected Automatically

• Device and Browser Information: IP address, browser type and version, operating system, device identifiers, and screen resolution
• Usage Information: Pages visited, time spent on pages, links clicked, referring website, search queries, and browsing patterns
• Location Information: General geographic location based on IP address to provide localized services
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies

Information from Third Parties

We may receive information from third-party services such as payment processors, shipping providers, fraud prevention services, and analytics platforms to facilitate transactions, prevent fraud, and improve our services.

We use the collected information for legitimate business purposes to provide you with excellent service and a seamless shopping experience:

• Order Processing and Fulfillment: To process and fulfill your orders, manage payments securely, arrange shipping, and provide order tracking
• Account Management: To create and manage your account, maintain your preferences, and provide personalized customer support
• Communication: To send order confirmations, shipping updates, delivery notifications, and respond to your inquiries promptly
• Marketing and Promotions: To send promotional emails, newsletters, special offers, and personalized recommendations (with your explicit consent)
• Website Improvement: To analyze usage patterns, conduct research, improve our Website functionality, and enhance overall user experience
• Fraud Prevention and Security: To detect and prevent fraudulent transactions, protect against unauthorized access, and safeguard our business and customers
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and government requests
• Personalization: To provide personalized product recommendations, customized content, and tailored shopping experiences

We process your personal information based on the following legal grounds under applicable Indian data protection laws:

• Explicit Consent: When you provide clear and informed consent for specific purposes such as marketing communications, newsletters, or optional data collection
• Contract Performance: To fulfill our contractual obligations when you place an order, create an account, or use our services
• Legal Obligation: To comply with applicable laws, regulations, tax requirements, and legal processes
• Legitimate Interests: To operate our business efficiently, prevent fraud, improve our services, and protect the rights and safety of our customers and business

We prioritize the security of your payment information and use industry-leading payment processing systems to protect your financial data.

We use Shopify's secure payment processing system and trusted third-party payment gateways to process all transactions. We do not store complete credit card or debit card information on our servers. Only tokenized payment information is retained for legitimate business purposes.

All payment information is encrypted using SSL/TLS technology and transmitted securely to our payment processors. Our payment partners comply with Payment Card Industry Data Security Standards (PCI DSS) to ensure the highest level of security for your payment information.

Supported payment methods include credit cards, debit cards, UPI, net banking, digital wallets, and other secure payment options available in India.

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website performance, and collect information about how you interact with our Website.

Types of Cookies We Use

• Essential Cookies: Strictly necessary for the Website to function properly, including shopping cart functionality, checkout processes, and security features
• Performance Cookies: Help us understand how visitors interact with our Website by collecting anonymous usage data and analytics
• Functionality Cookies: Remember your preferences, settings, and choices to provide a personalized and convenient experience
• Marketing Cookies: Track your browsing activity across websites to deliver relevant advertisements and measure campaign effectiveness

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, please note that disabling certain cookies may affect the functionality and features of our Website.

Our Website is hosted on Shopify Inc., a leading e-commerce platform. Shopify provides us with the online infrastructure to operate our store and process your information securely in compliance with international data protection standards.

Third-Party Services We Use

• Shopify: E-commerce platform, hosting services, and secure infrastructure
• Payment Gateways: Secure payment processing services (e.g., Razorpay, PayU, Paytm, Stripe, PayPal)
• Shipping and Logistics Partners: Order fulfillment, delivery services, and shipment tracking
• Analytics Services: Website analytics, performance monitoring, and user behavior analysis (e.g., Google Analytics)
• Email Service Providers: Marketing automation, transactional email delivery, and newsletter management
• Customer Support Tools: Help desk platforms, live chat services, and customer service management
• Fraud Prevention Services: Transaction monitoring, risk assessment, and fraud detection

These service providers have access to your personal information only to perform specific tasks on our behalf and are contractually obligated to protect your information, use it only for the purposes we specify, and maintain confidentiality.

We respect your privacy and do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business, processing payments, fulfilling orders, and providing services
• Payment and Shipping Partners: To process payments securely and deliver your orders to the specified address
• Legal Requirements: When required by law, court order, subpoena, government authority, or legal process
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy proceedings
• Fraud Prevention: To protect against fraudulent transactions, illegal activity, and security threats
• With Your Consent: When you explicitly authorize us to share your information with specific third parties
• Aggregated Data: We may share anonymized, aggregated data that does not identify you personally for research, analytics, or business purposes

Your information may be transferred to, stored, and processed in countries outside India, including Canada and the United States, where Shopify's servers and infrastructure are located. These countries may have different data protection laws than India.

We ensure that appropriate safeguards are in place to protect your information when it is transferred internationally:

• Using service providers that comply with international data protection standards and frameworks
• Implementing contractual protections, including Standard Contractual Clauses, for international data transfers
• Ensuring adequate technical and organizational security measures are maintained
• Conducting due diligence on third-party service providers to verify their data protection practices

By using our services, you acknowledge and consent to the transfer of your information to these countries for the purposes described in this Privacy Policy.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

Retention Periods

• Account Information: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations
• Order and Transaction Information: Retained for accounting, tax, audit, and legal compliance purposes (typically 7 years as per Indian tax laws)
• Marketing Information: Retained until you unsubscribe, withdraw consent, or request deletion
• Technical and Analytics Data: Retained for a limited period for analytics, security monitoring, and fraud prevention purposes
• Customer Support Records: Retained for quality assurance and dispute resolution purposes

When information is no longer needed for the purposes for which it was collected, we securely delete, destroy, or anonymize it in accordance with our data retention policies and applicable legal requirements.

We implement comprehensive technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction.

Security Measures Include

• Encryption: SSL/TLS encryption for all data transmission between your browser and our servers
• Secure Infrastructure: Secure servers, databases, and cloud infrastructure with multi-layered access controls
• Regular Security Assessments: Periodic security audits, vulnerability assessments, and penetration testing
• Employee Training: Comprehensive training on data protection, security best practices, and confidentiality obligations
• Access Controls: Restricted access to personal information on a strict need-to-know basis with role-based permissions
• Payment Security: PCI DSS compliant payment processing through certified payment gateways
• Monitoring and Logging: Continuous monitoring of systems for suspicious activity and security incidents
• Data Backup: Regular encrypted backups to prevent data loss

Under applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), you have comprehensive rights regarding your personal information:

Your Rights Include

• Right to Access: Request access to the personal information we hold about you and obtain a copy of your data
• Right to Correction: Request correction, updating, or rectification of inaccurate, incomplete, or outdated information
• Right to Erasure: Request deletion of your personal information, subject to legal obligations and legitimate business needs
• Right to Data Portability: Request a copy of your information in a structured, commonly used, and machine-readable format
• Right to Withdraw Consent: Withdraw consent for processing activities that require consent at any time
• Right to Object: Object to certain types of processing, including direct marketing communications and automated decision-making
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Grievance Redressal: File a complaint with our Grievance Officer or the Data Protection Board of India

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within the timeframe required by applicable law (typically within 30 days).

With your explicit consent, we may send you marketing communications about our products, services, promotions, special offers, and updates via email, SMS, WhatsApp, or other communication channels.

How to Opt-Out

• Click the "unsubscribe" or "opt-out" link in any marketing email
• Reply "STOP" or "UNSUBSCRIBE" to SMS marketing messages
• Update your communication preferences in your account settings
• Contact us directly via email or phone to opt out of marketing communications
• Use the preference center link provided in our communications

Please note that even if you opt out of marketing communications, we will still send you essential transactional emails related to your orders, account security, shipping updates, and customer service inquiries.

Our Website may contain links to third-party websites, services, applications, or social media platforms that are not operated, controlled, or maintained by us. We are not responsible for the privacy practices, content, or security of these external sites.

We encourage you to carefully review the privacy policies and terms of service of any third-party websites you visit. This Privacy Policy applies only to information collected through our Website and services, and does not apply to third-party websites or services.

We do not endorse or make any representations about third-party websites, and any access to or use of such websites is at your own risk.

Our services are not intended for, directed to, or designed to attract individuals under the age of 18 years. We do not knowingly collect, use, or disclose personal information from children without verifiable parental or guardian consent.

If you are a parent or legal guardian and believe your child has provided us with personal information without your consent, please contact us immediately using the contact information provided below. Upon verification, we will take prompt steps to delete such information from our systems and terminate the child's account.

We are committed to protecting children's privacy and complying with applicable laws regarding the collection and use of children's personal information.

You are responsible for maintaining the confidentiality and security of your account credentials, including your username and password, and for all activities that occur under your account.

Security Best Practices

• Choose a strong, unique password that combines letters, numbers, and special characters
• Do not share your password with others or use the same password across multiple websites
• Enable two-factor authentication if available for enhanced security
• Log out of your account when using shared, public, or unsecured devices
• Regularly update your password and review account activity
• Notify us immediately if you suspect unauthorized access, suspicious activity, or a security breach

We are not liable for any loss, damage, or unauthorized access arising from your failure to protect your account credentials or comply with security best practices.

We use advanced fraud prevention tools, technologies, and techniques to protect our business and customers from fraudulent transactions, unauthorized access, and malicious activities.

Fraud Prevention Measures

• Real-time monitoring of transactions for suspicious patterns and anomalies
• Verification of customer information, payment details, and shipping addresses
• Integration with third-party fraud detection and risk assessment services
• Analysis of order patterns, behavior, and historical data
• Implementation of security checks and verification steps during checkout
• Collaboration with payment processors and law enforcement when necessary

We reserve the right to decline, cancel, or hold orders that we determine to be fraudulent, high-risk, or in violation of our terms. In such cases, we will notify you and may request additional verification or documentation before processing your order.

We reserve the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our practices, legal requirements, business operations, or technological developments.

When We Make Changes

• Update the "Last Updated" date at the top of this Privacy Policy
• Notify you via email to the address associated with your account
• Display a prominent notice on our Website homepage or through a banner notification
• Obtain your explicit consent if required by applicable law for material changes
• Provide a summary of significant changes for your convenience

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

In accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, we have appointed a dedicated Grievance Officer to address your privacy concerns, data protection queries, and complaints.

You May Contact Our Grievance Officer For

• Privacy-related complaints, concerns, or grievances
• Data access, correction, deletion, or portability requests
• Questions about how we collect, use, or process your information
• Reporting data breaches, security incidents, or unauthorized access
• Exercising your privacy rights under applicable laws
• Withdrawing consent for data processing activities
• Clarifications regarding this Privacy Policy

If you are not satisfied with our response or resolution, you have the right to file a complaint with the Data Protection Board of India or other relevant regulatory authorities as per applicable law.