1) Legal Basis & Applicability

• We process personal data to provide our products and services and to run our business, in line with India’s privacy framework, including the Digital Personal Data Protection Act, 2023 (DPDP Act).
• The DPDP Act requires clear notice, valid consent where applicable, easy withdrawal of consent, and user rights such as correction and erasure.
• We also follow established privacy practices under the IT/SPDI Rules approach for security and grievance handling.
• Under the DPDP Act, you are the “Data Principal” and we are the “Data Fiduciary” for your personal data.

2) Personal Data We Collect

3) Why We Use Your Data (Purposes)

• Process and fulfil orders (billing, packing, shipping, delivery tracking).
• Provide customisation services (mockups, approvals, production coordination).
• Customer support (queries, complaints, replacements, returns).
• Service messages (order confirmations, dispatch updates, delivery communication).
• Fraud prevention and security (misuse detection, account/order protection).
• Business operations (inventory planning, accounting, compliance, recordkeeping).
• Website improvement and analytics (improving user experience and understanding performance).

4) Consent & Your Choices

• Where processing is based on consent, the DPDP Act requires consent to be free, specific, informed, and unambiguous, with the right to withdraw consent with comparable ease.
• For marketing messages (if and when used), you can opt out anytime by replying “STOP” on WhatsApp/SMS or emailing us.
• If you withdraw consent that is necessary to provide a service (for example, your shipping address for delivery), we may not be able to complete that service for new actions.
• We may still retain data required to complete orders already placed or to comply with legal and regulatory obligations.

5) Who We Share Data With (Processors)

• We do not sell your personal data.
• We share data only with trusted service providers to run our operations, such as:
  • Courier and logistics partners (to deliver your order).
  • Payment processors and gateways (to process payments).
  • E-commerce platform and technology vendors (to host and operate the storefront).
  • Analytics and marketing tools (to understand performance, if enabled).
  • Customer support tools (if used).
• These service providers access data only to perform services on our behalf and are expected to follow confidentiality and security standards.

6) Data Retention

• We retain personal data only as long as needed for the purposes listed in this policy, including:
  • Fulfilling orders and providing support.
  • Warranty, returns, and dispute resolution.
  • Accounting, tax, and legal compliance.
• When data is no longer needed, we delete or anonymise it unless further retention is required by law.

7) Security Measures

• We use reasonable security practices to protect data from unauthorised access, alteration, disclosure, or destruction.
• This may include secure access controls, restricted access to systems, and secure storage tools for sensitive credentials.
• No method of transmission or storage is 100% secure, but we continuously work to protect your information and improve our safeguards.

8) Cookies & Tracking Technologies

• Our website may use cookies and similar technologies to:
  • Keep the site functioning properly.
  • Remember preferences and cart/session details.
  • Measure traffic, performance, and usage patterns.
• You can disable cookies via your browser settings, but some features may not work as intended if cookies are blocked.

9) Children’s Privacy

• Our products are intended for general consumers, not specifically targeted at children.
• If we learn that we have collected personal data of a child in a manner that requires parental or guardian consent under applicable law, we will take appropriate steps, which may include deletion.
• The DPDP Act has specific obligations around children’s data and limits certain types of targeted advertising directed at children.

10) Your Rights (Data Principal Rights)

• Subject to applicable law, you may request:
  • Access to information about your personal data.
  • Correction, completion, or updating of inaccurate or incomplete data.
  • Erasure of personal data when it is no longer needed (unless retention is required for legal or compliance reasons).
  • Grievance redressal for privacy-related complaints.
  • Nomination of another person to exercise your rights in case of death or incapacity (as provided under the DPDP Act).
• To exercise these rights, email us at [email protected] with the subject: “Privacy Request” and include your order details and phone number for verification.

11) Grievance & Contact (Privacy)

For privacy-related questions or complaints, you can contact:

12) Third-Party Links

• Our site may contain links to third-party websites or apps.
• Their privacy practices are governed by their own policies, and we are not responsible for how they handle your data.

13) Changes to This Policy

• We may update this Privacy Policy from time to time.
• The updated version will be posted on our website with a revised effective date.
• Your continued use of our website and services after such changes indicates your acceptance of the updated policy.