Privacy policy

SAKI Your Style Pal ("we," "us," or "our") operates this online storefront and website, including all related information, content, features, tools, products, and services, in order to provide you with a curated shopping experience (the "Services"). SAKI Your Style Pal acts as a Data Fiduciary under applicable law, and our online infrastructure is powered by Shopify, which acts as our Data Processor.

This Privacy Policy describes how we collect, use, store, process, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. This policy has been structured to comply fully with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and other applicable data protection rules.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, processing, and disclosure of your information as described herein.

1. Personal Information We Collect or Process

When we use the term "personal information," we are referring to digital personal data that identifies or can reasonably be linked to you as an individual (Data Principal). It does not include data that is entirely anonymous or has been permanently de-identified.

Depending on how you interact with our Services, we may collect and process the following categories of personal information:

  • Contact Details: Your name, billing address, shipping address, phone number, and email address.
  • Financial Information: Transaction details, form of payment, payment confirmations, and related billing data. (Note: Sensitive card or account numbers are collected and processed directly by our secure, RBI-authorized payment gateways and are not stored on our systems).
  • Account Credentials: Your username, password, security questions, settings, and storefront preferences.
  • Transaction Information: The items you view, add to your cart, purchase, return, exchange, or cancel, along with your overall purchase history.
  • Customer Support Communications: The information you explicitly include when you send us an inquiry via email or support channels.
  • Device and Network Information: Your IP address, browser type, operating system, unique device identifiers, and network connection details.
  • Usage Patterns: Information regarding how and when you navigate, search, or interact with our online store.

2. Sources of Personal Information

We collect personal information through the following standard channels:

  • Directly From You: When you create an account, complete a checkout purchase, submit a review, or communicate with us.
  • Automatically Through the Services: Collected from your device via cookies, pixels, and tracking scripts when you browse our website.
  • From Our Data Processors: Including e-commerce infrastructure providers (Shopify), logistics partners/aggregators, and domestic delivery services who manage data on our behalf.

3. How We Use Your Personal Information

We process your personal data strictly for specified, lawful purposes based on your explicit consent or other legitimate uses permitted under law:

  • Fulfillment of Services: To process payments, fulfill and ship your orders, manage returns or exchanges, and send order or account updates.
  • Storefront Personalization: To remember your shopping cart items, preferences, and provide customized fabric or apparel recommendations.
  • Marketing and Promotions: To send updates, newsletters, or promotional text messages and emails, and to show you relevant online advertisements based on your browsing activity.
  • Security and Fraud Prevention: To authenticate your account credentials, maintain a secure payment gateway experience, investigate malicious or fraudulent behavior, and protect our operational infrastructure.
  • Legal and Compliance Obligations: To comply with valid statutory requirements, tax regulations, law enforcement requests, or to enforce our internal corporate terms and policies.

4. How We Disclose Personal Information

We do not sell your personal data. We may disclose your information to trusted third-party entities for legitimate business purposes in the following scenarios:

  • With Shopify and related IT vendors, cloud storage infrastructure, and data analytics tools that support our storefront operations.
  • With Delivery and Logistics Partners (such India Post, or DTDC) to print shipping labels, calculate precise postage, and deliver your packages to your doorstep.
  • With Payment Processing Gateways to clear online banking, card, or UPI transactions securely.
  • To comply with a legal order, judicial subpoena, government audit, or to defend the statutory rights and safety of our platform and users.

5. Relationship with Shopify

Our Services are hosted on the Shopify platform. Shopify collects, processes, and stores personal information regarding your store interactions to maintain and optimize the infrastructure. Because Shopify operates a global cloud framework, the information you submit will be transmitted to secure systems that may be physically located outside of India.

Shopify also utilizes aggregated, non-identifiable data sets across various merchants to improve its global security and checkout flows. You can view the comprehensive details of their data practices by reviewing the Shopify Consumer Privacy Policy.

6. International Data Transfers

We may transfer, store, and process your personal information on secure cloud servers or with trusted third-party service providers located outside of India (such as our e-commerce hosting platforms, payment gateways, or data analytics tools).

In full compliance with the Digital Personal Data Protection Act (DPDP Act), we ensure that your personal data is only transferred to international territories that are not restricted or blacklisted by the Central Government of India. Saki guarantees that your statutory privacy rights including your right to access, correct, or request the erasure of your personal details remain fully protected and enforceable under Indian law, regardless of the geographical country where your data physically resides.

7. Third-Party Links

Our website may occasionally contain links to external portals or online widgets (such as social media sharing buttons) operated by third parties. We have no direct control over their independent operations. We highly recommend reviewing the individual privacy notices of those respective external services before submitting data to them.

8. Children's Data

Our Services are not designed for or targeted at children. In accordance with the DPDP Act, a "child" is defined as any individual under the age of 18 years. We do not knowingly collect personal data from children, nor do we engage in tracking, behavioral profiling, or targeted advertisement delivery directed at individuals under 18.

If you are a parent or lawful guardian and discover that your child has provided personal information to us without your verifiable consent, please contact us immediately using the details below so we can promptly erase the data from our active databases.

9. Security and Retention of Your Information

While no electronic storage method can claim 100% absolute invulnerability, we implement industry-standard security safeguards including data encryption, strict access controls, and regular system logging to prevent unauthorised leaks or data breaches.

We retain your personal data only for as long as is strictly necessary to fulfill your online account maintenance, deliver purchases, clear tax reconciliation rules, or until you choose to withdraw your consent. Once the primary purpose of data collection is fulfilled or consent is formally withdrawn, the data is permanently erased or de-identified, unless mandated otherwise by law.

10. Your Statutory Rights as a Data Principal

Under India's DPDP Act, you hold specific, protected rights regarding your digital personal data. You can exercise these rights at any time by reaching out to our team:

  • Right to Access and Summaries: The right to request a summary of the personal data we hold about you, the processing activities undertaken, and a log of any third parties your data has been shared with.
  • Right to Correction and Completion: The right to request that we update, correct, or complete any inaccurate or misleading information in your account file.
  • Right to Erasure (Withdrawal of Consent): The right to withdraw your consent to data processing at any time and request that we delete your personal information, provided it is no longer required for legal compliance or active contract fulfillment.
  • Right to Nominate: The right to nominate another individual to exercise your privacy rights on your behalf in the event of death or physical incapacity.

11. Grievance Redressal and Complaints

If you have any questions, concerns, or formal complaints regarding how your personal data is handled, please contact us directly:

  • Email: hello@sakiyourstylepal.in

We commit to reviewing your grievance and responding to your inquiry in a thorough, timely manner. If you do not receive a satisfactory resolution from our internal grievance mechanism, you retain the statutory right to escalate your complaint directly to the Data Protection Board of India (DPBI) through their official digital portal.

12. Changes to This Privacy Policy

We may periodically update this Privacy Policy to align with new operational shifts, security upgrades, or evolving regulatory rules. Any modifications will be posted openly on this page with an updated "Last updated" timeline at the top of the policy statement.