Privacy policy

Below is a comprehensive, readable Privacy Policy drafted for an Indian e-commerce store. It is designed around common e-commerce privacy practices and India's Digital Personal Data Protection framework. India's DPDP Act provides for lawful processing of digital personal data, notice and consent requirements, security safeguards, and certain rights relating to personal data. (DPDP Act 2023)

PRIVACY POLICY

Welcome to [Sastify]. We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how [Sastify] ("we," "us," "our," or "the Store") collects, uses, stores, shares, and protects your personal information when you visit or make a purchase from our website or use our services.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy.

1. INFORMATION WE COLLECT

We may collect personal information and other information about you when you visit our website, create an account, place an order, contact us, or otherwise interact with our services.

A. Personal Information You Provide

We may collect information such as:

Full name
Email address
Mobile or telephone number
Billing address
Shipping or delivery address
City, state, postal code, and country
Account login information, where applicable
Order and purchase history
Information provided when contacting customer support
Information provided in reviews, feedback, surveys, or promotions

B. Payment Information

When you make a purchase, payment information may be collected and processed by our third-party payment service providers.

Depending on the payment method, this may include information required to process your transaction. We do not intentionally store complete debit card, credit card, or other sensitive payment credentials unless expressly stated and permitted by applicable law.

C. Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

IP address
Device type
Browser type
Operating system
Website pages viewed
Time and date of visits
Referring website or source
Approximate location based on technical information
Website interaction and usage information

This information helps us understand how visitors use our website and improve our services.

2. HOW WE USE YOUR INFORMATION

We may use your information for legitimate business and service-related purposes, including:

Processing and fulfilling orders
Confirming purchases and sending order updates
Arranging shipping and delivery
Processing payments
Providing customer support
Managing customer accounts
Processing returns, refunds, and exchanges
Improving our products, website, and customer experience
Preventing fraud, unauthorized transactions, and other security issues
Communicating important information about your orders or account
Sending promotional communications where permitted or where you have provided the required consent
Conducting analytics and understanding customer preferences
Complying with legal, regulatory, tax, accounting, and record-keeping obligations
Protecting the rights, property, safety, and security of our customers, business, and others

We will process personal information only for lawful purposes and in accordance with applicable Indian law. (DPDP Act 2023)

3. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies, pixels, tags, and similar technologies.

Cookies are small data files stored on your device that help websites function effectively and provide information about website usage.

We may use cookies for purposes including:

Keeping the website functioning properly
Remembering your preferences
Maintaining shopping cart functionality
Understanding website traffic and performance
Improving website functionality
Providing relevant advertising, where applicable
Preventing fraudulent activity

You may be able to manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website, including shopping cart or checkout features.

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information as a business.

However, we may share information with trusted third parties where necessary to operate our business and provide our services.

These may include:

Payment gateway providers
Shipping and delivery partners
Website hosting providers
E-commerce platform providers
Customer support providers
Analytics service providers
Marketing and advertising service providers
Technology and security service providers

We may also disclose information when required to:

Comply with applicable laws or legal processes
Respond to lawful requests from government authorities
Protect our legal rights and interests
Prevent fraud or security threats
Enforce our Terms of Service or other agreements

Third parties receiving personal information are expected to handle such information in accordance with applicable legal requirements and their contractual or legal obligations.

5. THIRD-PARTY SERVICES

Our website may use third-party services and integrations to operate our store.

These third parties may collect or process information according to their own privacy policies.

For example, third-party services may include:

Payment processors
Shipping and logistics providers
Website analytics providers
Email communication providers
Advertising platforms
Social media platforms
E-commerce technology providers

We encourage you to review the privacy policies of relevant third-party services before providing information through their platforms.

Please note: We are not responsible for the privacy practices, policies, or content of third-party websites or services that are not controlled by [Sastify].

6. DATA SECURITY

We take reasonable technical, administrative, and organizational measures to protect your personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

Our security measures may include:

Secure website connections
Access controls
Restricted access to personal information
Security monitoring
Use of reputable service providers
Reasonable administrative and technical safeguards

However, no method of transmitting information over the internet or storing electronic data is completely secure.

While we take reasonable steps to protect your information, we cannot guarantee absolute security. You should also take appropriate precautions to protect your account credentials and devices.

Applicable Indian data protection law requires reasonable security safeguards and may require action and notification in relation to certain personal data breaches. (Securities and Exchange Board of India)

7. DATA RETENTION

We retain personal information only for as long as reasonably necessary for purposes such as:

Completing and managing orders
Providing customer support
Managing customer accounts
Processing returns and refunds
Meeting legal and regulatory obligations
Resolving disputes
Preventing fraud
Maintaining business and financial records

When personal information is no longer required for the purpose for which it was collected, we will take reasonable steps to delete, erase, anonymize, or otherwise handle it in accordance with applicable law, subject to any legal requirement to retain certain information.

8. YOUR RIGHTS AND CHOICES

Subject to applicable law, you may have rights regarding your personal information.

Depending on the circumstances and applicable legal requirements, you may request:

A. Access to Information

You may request information about the personal information we process about you and the purposes for which it is processed.

B. Correction or Update

You may request correction or updating of inaccurate, incomplete, or outdated personal information.

C. Erasure of Personal Information

You may request deletion or erasure of your personal information, subject to applicable legal, regulatory, contractual, tax, accounting, or other legitimate retention requirements.

D. Withdrawal of Consent

Where we rely on your consent to process personal information, you may withdraw your consent in accordance with applicable law.

Withdrawal of consent may affect our ability to provide certain services. For example, withdrawal of information necessary to process an active order may affect our ability to complete certain services, subject to applicable legal requirements.

E. Grievance Redressal

If you have concerns regarding the handling of your personal information, you may contact us using the information provided below.

We will make reasonable efforts to address your request or grievance in accordance with applicable law.

India's DPDP framework provides individuals with rights concerning access to information about processing, correction and erasure, grievance redressal, and withdrawal of consent, subject to the applicable legal framework. (DPDP Act 2023)

9. MARKETING COMMUNICATIONS

Where permitted by law or where you have provided the necessary consent, we may send you promotional emails, offers, product updates, or other marketing communications.

You may opt out of marketing communications by:

Using the unsubscribe option provided in promotional emails; or
Contacting us at the email address provided below.

Please note that even if you opt out of marketing communications, we may still send you non-promotional communications related to your orders, transactions, account, security, or important service updates.

10. CHILDREN'S PRIVACY

Our website and services are not intended to knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us without appropriate authorization or consent where required, please contact us at:

[arshaykhatri024@gmail.com]

We will take appropriate steps to review the matter and address the information in accordance with applicable law.

11. INTERNATIONAL DATA PROCESSING

Some of our service providers may process or store information on servers located outside your state or country.

Where personal information is transferred or processed internationally, we will take reasonable steps to ensure that such processing is carried out in accordance with applicable law and appropriate safeguards.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or services.

When we make changes, we may update the "Last Updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect and protect your information.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

13. CONTACT INFORMATION

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our handling of your personal information, please contact us:

Store Name: [Sastify]

Email: [arshaykhatri024@gmail.com]

Address:
[House No-1015, First Floor, C Block, Near Pragati Hill Society, Sector-47, Gurgaon, Haryana-122018, India]

We will make reasonable efforts to respond to privacy-related requests and grievances within the timeframes required by applicable law.

14. GOVERNING LAW

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India.

Nothing in this Privacy Policy is intended to limit any rights available to you under applicable consumer protection or data protection laws.

15. YOUR CONSENT

By using our website and services, you acknowledge this Privacy Policy.

Where consent is required under applicable law, we will seek consent in an appropriate manner before processing personal information for the relevant purpose.

You may withdraw consent where applicable, subject to legal requirements and the legitimate need to process information necessary to provide services, complete transactions, or comply with applicable laws.

Important: This is a strong general template for an Indian e-commerce store, but for maximum legal protection—especially if you use Shopify apps, Meta/Google ads, international payment processors, or collect significant customer data—you should have the final policy reviewed by an Indian legal professional.