ATTIRE MART / THE DETAILS

Privacy Policy

Last updated: 13 November 2026

This Privacy Policy explains how ATTIRE MART ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit www.attiremart.shop, create an account, purchase products, or communicate with our support team. We respect your privacy and are committed to safeguarding personal data in accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023.

1. Personal information we collect

We collect only the personal information reasonably necessary to operate our store, process orders, deliver parcels, and provide customer assistance. This includes:

• Identity & Contact Details: Full name, email address, and 10-digit Indian mobile number.
• Delivery Address: Street address, flat/house number, landmark, city, state, postal PIN code, and country (India).
• Account & Authentication Data: For email sign-in, a one-time verification code is used to authenticate your account. Your email address, verification status, and session are managed securely by our authentication service. Your one-time code must never be shared with anyone.
• Order & Purchase History: Purchased product items, size/color variant selections, quantities, order timestamps, and fulfillment milestones stored securely in our order database.
• Payment Records: Payment transaction references, paid amount, and verification status. We NEVER collect, process, or store full credit/debit card numbers, CVVs, card expiry dates, bank passwords, OTPs, or UPI PINs. All payment credentials are keyed directly into PayU's hosted checkout.
• Device & Technical Information: IP address, browser type, operating system, and request timestamps automatically processed by our hosting provider (Vercel) to protect against DDoS attacks and ensure server reliability.
• Browser Storage & Cookies: We use browser localStorage to store your shopping bag (am-cart), wishlist (am-wishlist), guest order receipts (am-receipts), and purchase verification references (am-purchases). We do not load third-party advertising tracking cookies or sell your personal data.
• Communications: Records of your correspondence when you contact support, submit a return request, or contact our Grievance Officer.

2. How we collect your information

Your information is collected directly from you when you:

• Browse products, add items to your bag, or save favorites to your wishlist;
• Sign in or authenticate using email verification or email OTP;
• Fill out the delivery form during checkout;
• Complete an online payment through PayU; or
• Contact us by email regarding support, returns, or formal grievances.

3. Purpose of data processing

We process your personal information strictly for legitimate e-commerce purposes:

• Fulfilling and delivering your purchased items to your address;
• Verifying and reconciling online payments with PayU;
• Sending essential transactional notifications (order confirmation, dispatch tracking, OTP codes);
• Handling cancellations, returns, replacements, and refunds;
• Preventing fraud, abuse, and unauthorized transactions; and
• Complying with applicable accounting, tax, and consumer protection laws.

We do not use your purchase details to send unsolicited commercial marketing or spam, and we do not sell your personal data to data brokers or advertising networks.

4. Third-party service providers and data sharing

To deliver our services, we share necessary data with trusted third-party providers bound by confidentiality and security obligations:

• PayU Payments Private Limited: Regulated payment gateway partner that processes online payments and handles refunds. Necessary transaction details (order ID, customer name, email, phone number, payable amount) are passed securely to PayU.
• Supabase: Provides the infrastructure for email sign-in and securely stored order information.
• Vercel Inc.: Cloud hosting infrastructure and edge delivery network for the storefront website.
• Resend Inc.: Transactional email service used solely to deliver requested OTP verification codes and order confirmation receipts.
• Logistics Partners: Assigned national courier partners who receive your name, delivery address, postal code, and contact phone number solely to complete doorstep delivery.

5. Data security and retention

We implement robust technical and organizational measures to safeguard your personal data, including 256-bit SSL encryption, tokenized authentication, secure HMAC signatures, and restricted database permissions. Order and transaction records are retained for the duration required by applicable taxation, accounting, and legal requirements, after which they are securely deleted or anonymized.

6. Your data rights

Under applicable Indian law, you have the right to:

• Access and review the personal information we hold about you;
• Request correction of inaccurate or incomplete contact and delivery details;
• Request deletion of your account and personal data, subject to mandatory legal record-keeping obligations;
• Clear browser local storage (shopping bag and wishlist) at any time through your browser settings.

To exercise any of these rights, email your request to support@attiremart.shop.

7. Grievance Officer and contact details

If you have questions, concerns, or complaints regarding our data privacy practices, contact:

Manish Kumar Sonkar, Grievance Officer
ATTIRE MART, S-10/290 A-1, Panchkosi Road, Purani Chungi, Shivpur, Varanasi, Uttar Pradesh, 221003, India.
Email: grievance@attiremart.shop
Support: support@attiremart.shop
Urgent Fraud: help.fraud@attiremart.shop