1. Introduction & Data Controller

This Privacy Policy applies to all services provided by Shree Sarees ("we," "us," or "our"), located in Jaipur, Rajasthan, India. By accessing our website (shreesarees.in), placing an order, or submitting your information, you consent to the data collection and processing practices described herein.

2. Personal Information We Collect

We collect only the personal information necessary to fulfill your orders and deliver a secure, personalized shopping experience:

• Guest Checkout Information: If you place an order without creating an account, we collect your:
  • Full Name
  • Mobile Phone Number (for order confirmation, delivery updates, and courier coordination)
  • Delivery / Shipping Address (including postal PIN code, city, state, and optional landmarks)
  • Email Address (for tax invoice delivery, order status receipts, and customer service)
  • Order Notes & Tailoring Instructions (if provided)
• Registered Account Information: If you choose to create an account (either at signup or during guest checkout), we additionally maintain:
  • Email OTP authentication records (passwordless; we never store plain-text passwords)
  • Saved delivery addresses for convenient future checkouts
  • Order history, status progression, invoice downloads, and return requests
  • Wishlist items and user preferences
• Payment Information: Online payments are processed directly by our RBI-licensed payment gateway partner, Razorpay. Shree Sarees receives only payment identifiers (transaction ID, gateway order ID, payment status, and payment mode). We never store or have access to your sensitive payment card numbers, CVVs, net banking credentials, or UPI MPINs.
• Device & Usage Information: Technical data collected automatically via secure server logs and essential cookies, including IP address, browser type, operating system, and session identifiers for shopping cart persistence.

3. How We Use Your Information

We process your personal information for lawful, transparent business purposes:

• Order Fulfillment & Delivery: Processing purchases, dispatching packages, and coordinating with courier partners for doorstep delivery.
• Transactional Communications: Sending automated order confirmations, dispatch notifications, tracking links, and authentication OTPs via SMS, email, or WhatsApp.
• Optional Account Creation: If you elect to create an account during guest checkout, using your email to verify and activate your customer profile.
• Customer Support: Responding to order inquiries, tailoring requests, size assistance, or return/refund processing.
• Legal & Tax Compliance: Generating valid GST tax invoices and complying with statutory tax and accounting regulations under Indian law.
• Fraud Prevention & Security: Detecting and mitigating payment fraud, unauthorized access, or abusive automated traffic.

4. Sharing with Third Parties

We do not sell, rent, or trade your personal data to any third party for marketing purposes. We disclose your information strictly on a need-to-know basis to trusted service providers essential for our operations:

• Logistics & Courier Partners: Name, phone number, and delivery address shared solely to deliver your parcel.
• Payment Gateway (Razorpay): Transaction details transferred via 256-bit encrypted SSL connections for secure payment capture.
• Communication Providers: SMS and email infrastructure services to deliver transactional notices and OTPs.
• Statutory Authorities: Disclosed only if mandated by applicable law, court order, or governmental legal process.

5. Cookies & Local Storage

We utilize essential session cookies and local storage tokens strictly to maintain your active shopping cart, remember your language preference (English/Hindi), maintain secure CSRF protection, and keep you authenticated if you choose "Remember Me." You can configure your browser to decline cookies, though certain shopping features (such as persistent cart items) may become unavailable.

6. Data Security & Retention

• Security Safeguards: We employ industry-standard administrative, physical, and technical safeguards, including HTTPS/TLS encryption, database access firewalls, and hashed OTP verification tokens to protect against unauthorized access, alteration, or disclosure.
• Retention Period: We retain customer and transaction data only as long as necessary to complete order fulfillment, resolve disputes, and satisfy statutory tax and commercial record-keeping obligations required by Indian law (typically up to 7 years for financial records).

7. Your Privacy Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian regulations, you hold the right to:

• Access & Review: Request a summary of personal information held about you.
• Correction & Updating: Correct inaccurate or outdated details directly through your account dashboard or by contacting us.
• Account Deletion / Erasure: Request the deletion of your customer account and personal data, subject to mandatory legal and financial record retention.
• Withdrawal of Consent: Withdraw consent for non-essential communications at any time.

8. Children's Privacy

Our platform is not directed toward individuals under 18 years of age without parental or legal guardian supervision. We do not knowingly collect personal information from minors.

9. Updates to this Privacy Policy

We may periodically update this Privacy Policy to reflect operational, legal, or regulatory enhancements. Any modifications will be posted on this page with an updated version number and effective date.

10. Grievance Officer & Contact Details

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, if you have any questions, concerns, or grievances regarding your privacy or data handling, please contact our Grievance Officer: