Information We Collect
We collect personal information that you voluntarily provide to us when you register on the Website, place an order, express an interest in obtaining information about us or our products and services, when you participate in activities on the Website (such as posting reviews or entering competitions), or otherwise when you contact us.
Personal Information You Disclose to Us
The personal information we collect depends on the context of your interactions with us and the Website, the choices you make, and the products and features you use. The personal information we collect may include the following:
- Name and Contact Data: We collect your first and last name, email address, postal address, phone number, and other similar contact data.
- Credentials: We collect passwords, password hints, and similar security information used for authentication and account access.
- Payment Data: We collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by our payment processor (Razorpay / PayU), and you should review its privacy policies to understand their practices.
- Order & Purchase History: Details of products you have purchased or expressed interest in, including any custom or bespoke order requests.
- Body Measurements: For custom or tailored orders, we may collect body measurement data (such as bust, waist, hip sizes) to craft garments to your specifications.
Information Automatically Collected
We automatically collect certain information when you visit, use, or navigate the Website. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Website, and other technical information.
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | First name, last name, username | Account creation & order fulfillment |
| Contact Data | Email address, phone number, delivery address | Delivery, support & marketing |
| Financial Data | Payment card details (tokenised) | Processing transactions |
| Transaction Data | Order history, amounts, dates | Order management & fraud prevention |
| Technical Data | IP address, browser type, device info | Website analytics & security |
| Usage Data | Pages visited, clicks, referral URL | Improving website experience |
| Marketing Data | Newsletter preferences, communication history | Sending relevant communications |
| Measurement Data | Bust, waist, hip, height (custom orders only) | Custom garment tailoring |
How We Use Your Information
We use personal information collected via our Website for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.
- Fulfill and manage your orders and payments
- Send administrative information to you
- Send marketing and promotional communications
- Respond to user inquiries and offer support
- Deliver targeted advertising and promotions
- Protect the Website from fraud and abuse
- Improve and personalize your experience
- Comply with our legal and regulatory obligations
Marketing Communications: We will only send you marketing communications if you have opted in. You may opt out at any time by clicking "unsubscribe" in any email we send, or by contacting us directly at hello@sanliacouture.com.
Will We Share Your Information?
We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfil business obligations. We may share your data with the following categories of third parties:
- Service Providers: We may share your personal information with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing, order fulfilment, data analytics, email delivery, hosting services, customer service, and marketing efforts.
- Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honour this privacy notice.
- Business Partners: We may share your information with our business partners to offer you certain products, services or promotions.
- Law Enforcement: Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
Cookies & Tracking Technologies
We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Our Cookie Policy explains how you can opt out of our use of cookies.
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the website to function (cart, session, login) | Session |
| Analytics Cookies | Help us understand how visitors interact with the site (Google Analytics) | 2 years |
| Marketing Cookies | Used to deliver relevant advertisements and track campaign performance | 90 days |
| Preference Cookies | Remember your settings such as currency, language, and wishlist | 1 year |
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website.
Data Retention
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
- Account Data: Retained for as long as your account is active, plus 3 years after account closure for legal purposes.
- Order Records: Retained for 7 years to comply with Indian tax and accounting laws.
- Marketing Data: Retained until you unsubscribe or 3 years from last interaction, whichever is earlier.
- Measurement Data: Retained for 2 years from last custom order, then deleted upon your request.
Security of Your Data
We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your information.
- SSL/TLS encryption for all data in transit
- Encrypted storage of sensitive data (passwords hashed using bcrypt)
- Payment data tokenized and processed via PCI-DSS compliant gateway (Razorpay)
- Regular security audits and vulnerability assessments
- Access controls: only authorised personnel can access your personal data
Information from Minors
We do not knowingly solicit data from or market to children under 18 years of age. By using the Website, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Website. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at hello@sanliacouture.com.
Your Privacy Rights
In accordance with applicable data protection laws (including the Information Technology Act, 2000, and its amendments), you have the following rights regarding your personal data:
- Right to Access: You have the right to request access to the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.
- Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us at hello@sanliacouture.com. We will respond to your request within 30 days.
You may opt out of marketing emails at any time by clicking "unsubscribe" in any of our emails or by emailing us at hello@sanliacouture.com. Please note that even if you opt out of marketing emails, we may still send you transaction-related or account-related emails.
Do-Not-Track Features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalised.
As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
Policy Updates
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last Updated" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
Contact Us
If you have questions or comments about this notice, want to exercise your rights, or wish to make a complaint about how we process your personal data, please contact our Data Protection team: