Privacy Policy

PRIVACY POLICY

Effective Date: [DATE]
Last Updated: [DATE]

At [STORE NAME], we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit or use our website, place an order, create an account, contact us, or otherwise interact with our services.

This Privacy Policy applies to our website [WEBSITE URL], mobile applications, if applicable, and other online or offline interactions where this Privacy Policy is made available.

By using our website or providing your information to us, you acknowledge that you have read and understood this Privacy Policy. Where consent is required under applicable law, we will seek your consent before processing your personal data for the relevant purpose.

1. ABOUT US

[STORE NAME] is an e-commerce business operated by:

Legal/Business Name: [LEGAL BUSINESS NAME]
Website: [WEBSITE URL]
Email: [EMAIL ADDRESS]
Phone: [PHONE NUMBER]
Business Address: [BUSINESS ADDRESS]

For privacy-related questions, requests, or complaints, you may contact us using the details provided in the Contact Us section of this Privacy Policy.

2. INFORMATION WE COLLECT

We may collect information that you provide directly to us, information generated when you use our website, and information received from certain third parties.

2.1 Information You Provide to Us

Depending on how you interact with our store, we may collect:

  • Full name

  • Billing and shipping address

  • Email address

  • Mobile/telephone number

  • Account login information

  • Order and purchase history

  • Product preferences

  • Information provided when you contact customer support

  • Reviews, feedback, comments, or other content you submit

  • Information required to process returns, refunds, exchanges, or cancellations

  • Information voluntarily provided when participating in promotions, contests, surveys, or other activities

  • Any other information you voluntarily provide to us

2.2 Payment Information

When you make a purchase, payment information may be processed by our third-party payment service providers.

Depending on the payment method you select, the payment provider may collect information such as card details, bank account information, UPI information, or other payment credentials.

[STORE NAME] generally does not directly store complete payment-card information on its own servers unless expressly stated otherwise. Payment information may instead be processed and handled by our authorised payment service providers in accordance with their own privacy and security practices.

Examples of payment providers we may use include:

  • [PAYMENT PROVIDER 1]

  • [PAYMENT PROVIDER 2]

  • [PAYMENT PROVIDER 3]

You should review the privacy policies of the applicable payment provider before completing a transaction.

2.3 Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Language preferences

  • Approximate location derived from technical information

  • Website pages visited

  • Products viewed

  • Time spent on pages

  • Referring website or source

  • Date and time of visits

  • Clicks and interactions with our website

  • Information about how you use our website

We may use this information for security, analytics, website performance, personalization, and improvement of our services.

2.4 Information from Third Parties

We may receive information from third parties where permitted by applicable law, including:

  • Payment processors

  • Shipping and delivery providers

  • E-commerce platforms

  • Advertising and marketing providers

  • Analytics providers

  • Social-media platforms

  • Fraud-prevention and security providers

  • Customer-service providers

The information received may depend on the service you use and the permissions you provide to the relevant third party.

3. HOW WE USE YOUR INFORMATION

We may process your personal information for legitimate business purposes and, where required, based on your consent or another lawful basis available under applicable law.

We may use your information to:

3.1 Process and Fulfil Orders

We use your information to:

  • Process purchases

  • Confirm orders

  • Process payments

  • Arrange shipping and delivery

  • Provide order updates

  • Process returns, refunds, and exchanges

  • Provide customer support

  • Maintain transaction records

3.2 Manage Your Account

If you create an account, we may use your information to:

  • Create and maintain your account

  • Authenticate your login

  • Save your preferences

  • Display your order history

  • Provide account-related communications

3.3 Communicate With You

We may contact you regarding:

  • Orders and transactions

  • Shipping and delivery

  • Returns and refunds

  • Account activity

  • Customer-service requests

  • Important changes to our website, services, or policies

3.4 Marketing and Promotional Communications

Where permitted by applicable law and, where required, with your consent, we may send you:

  • Promotional emails

  • SMS messages

  • WhatsApp communications

  • Product announcements

  • Special offers

  • Discounts

  • Newsletters

  • Other marketing communications

You may unsubscribe from marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us at [EMAIL ADDRESS].

Please note that even if you opt out of marketing communications, we may still send essential transactional or service-related communications, such as order confirmations, payment notifications, and delivery updates.

3.5 Improve Our Products and Services

We may analyse customer interactions and purchasing behaviour to:

  • Improve our website

  • Improve our products and services

  • Understand customer preferences

  • Improve website functionality

  • Develop new products or services

  • Improve customer experience

  • Monitor website performance

Where appropriate, we may use aggregated or de-identified information for analytical purposes.

3.6 Security and Fraud Prevention

We may process information to:

  • Detect and prevent fraudulent transactions

  • Protect our website and systems

  • Investigate suspicious activity

  • Prevent misuse of our services

  • Protect customers, employees, and our business

  • Maintain website and network security

3.7 Legal and Regulatory Compliance

We may use and retain information where necessary to:

  • Comply with applicable Indian laws and regulations

  • Respond to lawful requests from government or law-enforcement authorities

  • Establish, exercise, or defend legal claims

  • Maintain business and financial records

  • Enforce our terms and policies

  • Protect our legal rights and interests

4. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

A cookie is a small text file stored on your device when you visit a website. Cookies help websites remember information and understand how visitors interact with them.

4.1 Types of Cookies We May Use

Essential Cookies

These cookies may be necessary for the website to function properly. They may help with:

  • Shopping-cart functionality

  • Login sessions

  • Checkout

  • Security

  • Payment processing

  • Basic website functionality

You may not be able to use certain parts of the website if these cookies are disabled.

Analytics Cookies

These cookies help us understand how visitors use our website, such as which pages are visited and how users navigate the website.

We may use services such as:

  • [GOOGLE ANALYTICS]

  • [OTHER ANALYTICS SERVICE]

Functional Cookies

These cookies may remember preferences such as language, region, or other website settings.

Advertising/Marketing Cookies

Where applicable, these technologies may help us:

  • Measure advertising campaigns

  • Show relevant advertisements

  • Understand advertising performance

  • Limit repeated advertisements

  • Build audience segments

Examples may include:

  • [META PIXEL]

  • [GOOGLE ADS]

  • [OTHER ADVERTISING SERVICES]

4.2 Managing Cookies

Depending on your browser and device, you may be able to control or delete cookies through your browser settings.

Disabling certain cookies may affect the functionality or performance of our website.

Where required by applicable law, we may provide additional cookie controls or consent mechanisms.

5. THIRD-PARTY SERVICES

We may use third-party companies and service providers to operate and improve our business.

These providers may process personal information on our behalf or independently according to their own privacy policies and contractual arrangements.

Third-party service categories may include:

Payment Providers

Used to securely process payments and transactions.

Providers: [PAYMENT PROVIDERS]

Shipping and Delivery Providers

Used to deliver products and provide shipment tracking.

Providers: [COURIER/LOGISTICS PROVIDERS]

Website/E-commerce Platform

Used to host and operate our online store.

Provider: [SHOPIFY/WIX/WOOCOMMERCE/OTHER]

Analytics Providers

Used to understand website traffic and user behaviour.

Providers: [GOOGLE ANALYTICS/OTHER]

Marketing and Advertising Providers

Used for advertising, remarketing, email marketing, SMS, or customer communications.

Providers: [META/GOOGLE/MAILCHIMP/KLAVIYO/OTHER]

Customer Support Providers

Used to communicate with customers and manage support requests.

Providers: [CUSTOMER SUPPORT PROVIDER]

Third parties may have their own privacy policies and terms. We encourage you to review those policies where relevant.

6. SHARING OF PERSONAL INFORMATION

We do not sell your personal information merely because you use our website.

However, we may share information with appropriate parties when necessary for the purposes described in this Privacy Policy.

These may include:

  • Payment processors

  • Delivery and logistics companies

  • Technology and hosting providers

  • E-commerce platforms

  • Marketing and advertising providers

  • Analytics providers

  • Customer-service providers

  • Fraud-prevention providers

  • Professional advisers

  • Auditors

  • Legal advisers

  • Government authorities or law-enforcement agencies where legally required

We aim to share only information that is reasonably necessary for the relevant purpose.

We may also disclose information in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, subject to applicable law.

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Providing products and services

  • Maintaining transaction and accounting records

  • Handling returns and customer-service matters

  • Meeting legal and regulatory requirements

  • Resolving disputes

  • Preventing fraud and abuse

  • Enforcing our agreements

  • Protecting our legal rights

When personal information is no longer required, we may delete, anonymise, or otherwise dispose of it securely, subject to applicable legal or regulatory requirements.

Different categories of information may therefore be retained for different periods.

8. DATA SECURITY

We take reasonable security measures designed to protect personal information against unauthorised access, misuse, loss, alteration, disclosure, or destruction.

Depending on the circumstances, these measures may include:

  • Access controls

  • Password protection

  • Encryption or secure transmission technologies

  • Secure hosting

  • Authentication procedures

  • Monitoring and security controls

  • Restricted employee access

  • Vendor security assessments

  • Internal policies and procedures

However, no method of transmission or electronic storage is completely secure.

Therefore, while we take reasonable measures to protect your information, we cannot guarantee absolute security.

If you believe that your interaction with us or your personal information has been compromised, please contact us promptly at [EMAIL ADDRESS].

9. YOUR RIGHTS

Subject to applicable law, you may have certain rights concerning your personal information.

These may include the right to:

9.1 Access Information

Request information about the personal data we process about you and related information, where applicable.

9.2 Correct or Update Information

Request correction, completion, or updating of inaccurate or incomplete personal information.

9.3 Request Erasure

Request deletion of personal information where permitted by applicable law.

We may need to retain certain information where required by law or where there is another lawful reason to retain it.

9.4 Withdraw Consent

Where we rely on your consent for processing, you may withdraw that consent.

Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

9.5 Opt Out of Marketing

You may unsubscribe from promotional communications at any time.

9.6 Raise a Grievance

You may contact us if you believe your privacy rights have been violated or if you have concerns regarding our handling of your personal information.

The Digital Personal Data Protection Act, 2023 includes rights concerning correction and erasure and provides for grievance redressal mechanisms. The exact rights and procedures applicable to you may depend on the law in force and the nature of the processing involved.

10. HOW TO EXERCISE YOUR RIGHTS

To submit a privacy request, please contact us at:

Email: [EMAIL ADDRESS]
Subject: Privacy Request – [TYPE OF REQUEST]

Your request should include sufficient information for us to understand and verify your request.

For security reasons, we may need to verify your identity before fulfilling certain requests.

We will handle requests in accordance with applicable law and within the timelines required by applicable regulations.

11. GRIEVANCE REDRESSAL

If you have a concern, complaint, or grievance regarding our processing of your personal information, please contact:

Grievance Officer / Privacy Contact: [NAME OR DESIGNATION]
Email: [EMAIL ADDRESS]
Phone: [PHONE NUMBER]
Address: [BUSINESS ADDRESS]

We will review and respond to your grievance in accordance with applicable law.

Where applicable law provides additional avenues for escalation, you may exercise those rights after following our internal grievance process.

12. CHILDREN'S PRIVACY

Our website is intended for general consumers and is not knowingly directed toward children where doing so would be prohibited by applicable law.

We do not knowingly collect personal information from children in circumstances where parental consent or other legal requirements apply unless the required safeguards have been implemented.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at [EMAIL ADDRESS].

13. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process or store information outside India.

Where personal information is transferred outside India, we will take steps required under applicable law and use appropriate safeguards where required.

Examples of providers that may potentially process information internationally include:

  • [CLOUD/HOSTING PROVIDER]

  • [PAYMENT PROVIDER]

  • [ANALYTICS PROVIDER]

  • [MARKETING PROVIDER]

The location and nature of processing may change as our service providers and business operations change.

14. DATA BREACHES AND SECURITY INCIDENTS

If we become aware of a personal-data breach affecting information under our control, we will assess the incident and take appropriate steps as required by applicable law.

Depending on the circumstances and applicable legal requirements, this may include:

  • Investigating the incident

  • Taking steps to contain and mitigate the incident

  • Improving security controls

  • Notifying relevant authorities

  • Notifying affected individuals where required

15. LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to websites, applications, social-media platforms, or services operated by third parties.

If you click on a third-party link, you will leave our website and become subject to the third party's policies and terms.

We are not responsible for the privacy practices, security, content, or policies of third-party websites.

We encourage you to read the privacy policy of every third-party website you visit.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business

  • Changes to our services

  • Changes in technology

  • Changes in third-party service providers

  • Changes in applicable laws or regulations

  • Changes in our privacy practices

When we update this policy, we will revise the "Last Updated" date at the top of this page.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

We encourage you to periodically review this Privacy Policy.

17. CONTACT INFORMATION

If you have questions about this Privacy Policy, want to exercise a privacy right, or wish to raise a privacy-related concern, please contact us:

[STORE NAME]

Legal/Business Name: [LEGAL BUSINESS NAME]
Website: [WEBSITE URL]
Email: [EMAIL ADDRESS]
Phone: [PHONE NUMBER]
Business Address: [BUSINESS ADDRESS]

Grievance Officer / Privacy Contact: [NAME/DESIGNATION]
Grievance Email: [GRIEVANCE EMAIL ADDRESS]

We will make reasonable efforts to respond to privacy-related enquiries and requests in accordance with applicable law.

18. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the laws applicable in India, subject to any mandatory rights or protections available to consumers under applicable law.

Any disputes concerning this Privacy Policy shall be subject to the jurisdiction of the courts or competent authorities specified in our applicable terms and conditions, subject to applicable law.

By using [STORE NAME], you acknowledge that you have had an opportunity to read this Privacy Policy and understand how your personal information may be handled as described above.

[END OF PRIVACY POLICY]