Svarnadeep - Privacy Policy

• Identity and contact data: name, email address, mobile number, billing/shipping address, and communication details.
• Order and commercial data: products viewed or purchased, quantities, order value, discounts, returns, refunds, support history, invoices, and transaction references.
• Payment-related data: payment status, payment method, gateway reference, and limited transaction information. Complete card credentials, PINs, CVVs, UPI PINs, or banking passwords are not intended to be stored by us.
• Account data: login/account identifiers, saved addresses, preferences, wishlists, and account activity where those features are enabled.
• Device and usage data: IP address, browser, device type, operating system, approximate location derived from IP, referring pages, pages viewed, clicks, session activity, and similar technical information.
• Cookie and analytics data: essential, functional, performance, analytics, attribution, and advertising identifiers where enabled.
• Customer-service data: messages, calls, chats, emails, complaints, photographs/videos submitted for support or return claims, and other information you choose to provide.
• Marketing preference data: newsletter/WhatsApp/SMS/email subscriptions, consent choices, campaign engagement, and opt-out status.
• Fraud and security data: information reasonably required to detect suspicious transactions, account abuse, chargebacks, or security incidents.

• Directly from you when you browse, order, register, contact us, submit a claim, review a product, or subscribe to communications.
• Automatically from your browser/device through cookies, pixels, SDKs, logs, and similar technologies.
• From service providers involved in payment, order fulfilment, shipping, fraud prevention, customer support, analytics, advertising, or website hosting.
• From social-media or other third-party services when you interact with an integration and the third party is permitted to share the data with us.

• To create, verify, process, fulfil, ship, track, and support orders.
• To process payments, refunds, chargebacks, and fraud/security checks.
• To communicate order confirmations, delivery updates, service notices, and customer-support responses.
• To maintain accounts, preferences, carts, and other requested website features.
• To comply with tax, accounting, legal, regulatory, law-enforcement, dispute, warranty, and consumer-protection obligations.
• To protect the Website, customers, and business from fraud, abuse, malicious activity, or unauthorized access.
• To measure website traffic, understand customer journeys, diagnose performance problems, and improve products, content, conversion, and user experience.
• To send marketing, promotional offers, product updates, newsletters, retargeting, or personalized advertising where permitted and, where required, based on valid consent.
• To establish, exercise, or defend legal claims and enforce applicable terms.

We process personal data only for a lawful purpose. Depending on the context, processing may be based on your consent, your request for us to provide products/services, a use permitted by applicable law, or compliance with a legal obligation. When consent is the basis for optional processing such as certain marketing activities, you may withdraw that consent using the available opt-out method or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal or processing that remains necessary for an existing order or legal obligation.

Our Website is powered by Shopify. We also use third-party providers for functions such as payment processing, shipping/logistics, customer support, communications, analytics, advertising, fraud prevention, reviews, and website functionality. Depending on the services enabled from time to time, these providers may include payment gateways, courier aggregators/couriers, Google services, Microsoft Clarity, Meta services, email/SMS/WhatsApp providers, and other Shopify applications.

These providers process information under their own legal obligations and contractual terms. We share only information reasonably necessary for the relevant purpose, subject to applicable law and our contractual arrangements.

Payments are processed by authorized payment gateways, banks, UPI providers, card networks, or COD/logistics providers. We do not need you to disclose card PINs, CVVs, UPI PINs, OTPs, online-banking passwords, or similar authentication secrets. If anyone claiming to represent us asks for such credentials, do not share them.

To deliver an order, we may share the recipient name, mobile number, address, order/shipment details, and other necessary fulfilment information with warehouses, suppliers/fulfilment partners where applicable, courier aggregators, transporters, customs agents, or delivery partners. They may contact you for delivery coordination.

We may use cookies and similar technologies to keep the Website functioning, remember preferences, measure traffic and conversions, understand how pages are used, prevent fraud, and support advertising/remarketing. Analytics or advertising providers may receive device identifiers, cookie IDs, IP-derived information, browsing events, and conversion events according to their configurations and privacy terms.

Where legally required, non-essential cookies or personalized advertising will be used based on an appropriate consent mechanism. You can also manage cookies through browser settings; blocking essential cookies may affect checkout or account functionality.

We may send promotional email, SMS, WhatsApp, push, or similar messages where you have opted in or where otherwise permitted by law. You may unsubscribe using the link or preference control provided in the message, by replying with the applicable opt-out instruction, or by contacting us. Opting out of marketing does not stop necessary transactional messages about orders, payments, security, returns, or account administration.

We do not sell personal data for money. We may disclose personal data to service providers and business partners for the purposes described above; to professional advisers such as accountants, auditors, insurers, or legal advisers; to banks/payment providers; to logistics and fulfilment providers; to law-enforcement, regulators, courts, or government authorities where lawfully required; or in connection with a merger, restructuring, financing, sale of business/assets, or similar transaction subject to appropriate safeguards and applicable law.

Some technology, cloud, payment, analytics, advertising, or support providers may process data on infrastructure located outside India. Where cross-border processing occurs, we will take steps appropriate to applicable law and any government restrictions on transfers. We do not rely on generic foreign-law language as a substitute for Indian privacy obligations.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including order fulfilment, customer support, fraud prevention, warranty/returns, legal claims, and recordkeeping required by tax, GST, accounting, consumer, or other applicable laws. When data is no longer required and no lawful reason requires retention, we will delete, anonymize, or securely dispose of it according to our processes.

We use reasonable technical and organizational safeguards appropriate to the nature of the data and our operations, which may include access controls, secure authentication, encrypted transmission where supported, restricted administrative access, vendor controls, backups, monitoring, and incident-response processes. No Internet or storage system can be guaranteed to be completely secure, so customers should also protect their devices, passwords, and OTPs.

If a personal-data breach occurs, we will take reasonable steps to contain and investigate it and will notify affected individuals and/or the appropriate authority where and within the manner required by applicable law. Any notice may include the nature of the incident, likely impact, protective steps, and a contact point for assistance.

Subject to the conditions, exceptions, and commencement of applicable legal provisions, you may have rights to:

• obtain information or a summary regarding personal data being processed and relevant processing activities;
• correct inaccurate personal data and complete or update incomplete/outdated information;
• request erasure of personal data that is no longer necessary, subject to legal retention obligations;
• withdraw consent for processing that depends on consent;
• opt out of promotional communications;
• raise a grievance regarding our handling of personal data; and
• nominate another person to exercise applicable data rights in circumstances recognized by law.

We may need to verify your identity before acting on a rights request. We will respond within the period required by applicable law. A request may be refused or limited where the law permits or requires us to retain/process the data, such as for an existing transaction, fraud prevention, tax records, or legal claims.

The Website is not directed to children under 18 to independently make purchases or provide personal data. Where a child’s data is knowingly processed and applicable law requires verified parental or guardian consent, we will follow the applicable requirement. We do not knowingly undertake tracking, behavioural monitoring, or targeted advertising directed at children where prohibited by law.

If you choose to publish a product review, photo, or other content in a public area, that content may be visible to other users and may be indexed or shared according to the feature used. Do not post sensitive personal or financial information in public reviews.

The Website may contain links to external websites or social-media services that we do not control. Their privacy practices are governed by their own policies. Please review those policies before providing personal data to them.

We may update this Privacy Policy to reflect legal, operational, technology, or service changes. We will post the revised version with a new effective date and, where required, provide additional notice or seek fresh consent for materially different processing.