Privacy Policy

1. Introduction & Scope

This Policy applies to personal data we collect when you browse the Website, create an account, place an Order, contact customer support, or otherwise interact with us. By using the Website, you consent to the collection and use of your information as described in this Policy. If you do not agree, please do not use the Website.

2. Information We Collect

We collect the following categories of information:

• Identity & contact data: name, email address, phone number, and password (stored as a secure hash)
• Delivery data: shipping and billing address saved to your account
• Order & transaction data: Products purchased, Order history, Order value, and payment status (we do not collect or store card, UPI, or net-banking credentials — these are handled directly by Razorpay)
• Communications: messages, support requests, testimonials, and reviews you submit to us
• Usage & device data: pages viewed, cart activity, browser type, IP address, and approximate location, collected automatically
• Cookie identifiers: a guest session identifier used to keep your cart in sync before you sign in

3. How We Collect Information

• Directly from you — when you register, place an Order, save an address, or contact support
• Automatically — through cookies and similar technologies as you browse the Website
• From third parties — payment confirmation from Razorpay and delivery status updates from our courier partners

4. How We Use Your Information

We use your information only for specified, lawful purposes, including to:

• Create and manage your Account
• Process, verify, and fulfil your Orders, including stock allocation and payment verification
• Generate invoices and shipping labels, and coordinate delivery with our courier partners
• Send transactional emails and SMS — Order confirmations, shipping updates, invoices, and return/refund status
• Respond to customer support requests and grievances
• Detect, prevent, and investigate fraud, abuse, or security incidents
• Improve the Website, our Products, and customer experience
• Send promotional communications, where you have opted in (see Section 11)
• Comply with legal, tax, and regulatory obligations

5. Cookies & Tracking Technologies

We use strictly necessary cookies/local storage to keep you signed in, remember items in your cart, and maintain a guest session identifier so your cart persists across visits. We do not currently use third-party advertising or cross-site tracking cookies. You can disable cookies through your browser settings, but doing so may prevent some Website features (such as cart persistence) from working correctly.

6. Sharing & Disclosure of Information

We do not sell, rent, or trade your personal data. We share it only with the following categories of recipients, and only to the extent necessary for them to perform their function:

• Payment processor — Razorpay, to process and verify prepaid transactions
• Courier & logistics partners — to deliver your Order to the address you provide
• Cloud infrastructure providers — for secure hosting, database storage, and image/document delivery (invoices, shipping labels)
• Email delivery provider — to send transactional emails such as Order confirmations
• Legal & regulatory authorities — where required to comply with applicable law, a court order, or to protect our legal rights

All third-party service providers are bound by contractual or platform-level confidentiality and security obligations, and may only use your data to provide services to us.

7. Data Storage & Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, consistent with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Passwords are stored as irreversible hashes, and payment details are processed entirely by Razorpay's PCI-DSS compliant infrastructure — we never see or store your full card or bank details. While we take reasonable steps to protect your data, no method of transmission or storage over the internet is 100% secure.

8. Data Retention

We retain your personal data for as long as your Account is active, and thereafter for as long as necessary to fulfil the purposes described in this Policy — including maintaining Order history for warranty, returns, accounting, and tax purposes, and to comply with legal retention requirements. When data is no longer required, we securely delete or anonymise it.

9. Your Rights

As a Data Principal under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how it is being processed
• Request correction or completion of inaccurate or incomplete personal data
• Request erasure of personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations
• Withdraw consent for processing at any time, where processing is based on consent (this will not affect processing carried out before withdrawal, or Orders already placed)
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance regarding the handling of your personal data (see Section 13)

To exercise any of these rights, email support@uwaldcreation.in. We will respond within a reasonable time and in accordance with applicable law.

10. Children's Privacy

While we sell clothing for children, the Website itself is intended to be used by adults — parents or legal guardians — on behalf of their children, and Accounts may only be created by individuals aged 18 or above. We do not knowingly collect personal data directly from children. Any information about a child (such as size or name on a gift order) is provided voluntarily by the parent or guardian placing the Order and is used solely to fulfil that Order. If you believe a child has provided us with personal data without parental consent, please contact us at support@uwaldcreation.in and we will delete it.

11. Marketing Communications

We send transactional emails/SMS (Order and delivery updates) regardless of marketing preferences, as these are necessary to fulfil your Order. Promotional emails are sent only with your consent, and every promotional email includes an unsubscribe/opt-out option. You can also manage your communication preferences by contacting support@uwaldcreation.in.

12. Cross-Border Data Transfers

Some of our cloud infrastructure and service providers may process or store data on servers located outside India. Where this occurs, we ensure such providers maintain security and confidentiality standards consistent with this Policy and applicable Indian law.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, if you have any concern or complaint about how we handle your personal data, please contact our Grievance Officer:

14. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when this Policy was last revised. Material changes will be highlighted on the Website or communicated to you directly where required by law.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at: