Privacy Policy

Rangvastraa (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit rangvastraa.com or purchase from us. By using our website you agree to the practices described here.

This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian law.

We collect the following categories of personal data:

• Identity & Contact: Name, email address, phone number, and delivery address collected during account registration, checkout, or contact form submissions.
• Order & Transaction Data: Products purchased, order history, payment method (we do not store full card details — payments are processed by third-party gateways).
• Account Data: Username, password (hashed), wishlist items, and saved addresses.
• Usage Data: Pages visited, time spent, browser type, device type, IP address, and referral source — collected via cookies and analytics tools.
• Communication Data: Messages sent via the contact form or email correspondence with our team.
• Custom Order Details: Measurements, fabric preferences, and styling notes provided for made-to-measure garments.

We use your personal data only for the purposes for which it was collected:

• Processing and fulfilling your orders, including custom and made-to-measure garments.
• Sending order confirmations, shipping updates, and customer support communications.
• Managing your account and saved preferences.
• Improving our website, products, and services through analytics.
• Sending marketing emails and promotions — only with your explicit consent, and you may opt out at any time.
• Preventing fraud and ensuring the security of our platform.
• Complying with legal and regulatory obligations.

We use cookies and similar tracking technologies to improve your browsing experience and analyse site traffic. These include:

• Essential cookies: Required for the site to function (cart, session, authentication).
• Analytics cookies: Google Analytics (GA4) to understand how users interact with the site. Data is anonymised where possible.
• Preference cookies: Remember your settings such as recently viewed products.

You can control cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

We do not sell your personal data. We share it only with trusted third parties necessary to deliver our services:

• Payment processors: To securely process your transactions (e.g. Razorpay, UPI providers).
• Logistics partners: To fulfil and ship your orders (courier details shared as required).
• Cloud hosting: Our website is hosted on Vercel; product images are served via Cloudinary.
• Analytics providers: Google Analytics receives aggregated, anonymised usage data.
• Legal authorities: When required to comply with applicable law, court orders, or government requests.

All third parties are contractually required to handle your data in accordance with applicable data protection laws.

We retain your personal data only as long as necessary for the purposes stated above or as required by law:

• Order records are retained for 7 years for tax and accounting compliance.
• Account data is retained as long as your account is active.
• Custom order measurements and notes are retained for 2 years to support repeat orders.
• Marketing consent records are retained until you withdraw consent.

We implement industry-standard security measures including HTTPS encryption, hashed password storage, and access controls to protect your personal data. However, no method of internet transmission is 100% secure, and we cannot guarantee absolute security.

Under the DPDP Act 2023 and applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent: Opt out of marketing communications at any time via the unsubscribe link in emails or by contacting us.
• Grievance redressal: Raise a complaint with our data officer (contact details below).

To exercise any of these rights, email us at rangvastraa.studio@gmail.comwith the subject line “Data Privacy Request”. We will respond within 30 days.

Our website is not directed to children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect any changes. Continued use of our website after updates constitutes acceptance of the revised policy. For material changes, we will notify you by email or a prominent notice on the site.

For any privacy-related queries, requests, or grievances, please contact: