Privacy Policy

We respect your privacy. We collect only what we need, use it only for what we say, and never sell it.

1. Who We Are

We are a T-shirt brand operating in India, selling custom-printed garments directly to customers. When you place an order, create an account, or contact us, you are sharing personal information with us. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and what rights you have over it.

If you have any questions about this policy or how we handle your data, you can reach us at:

2. What Personal Data We Collect

We collect the following categories of personal data from you, depending on how you interact with us:

2.1 Identity & Contact Information

• Full name
• Email address
• Phone number
• Billing address
• Shipping / delivery address

2.2 Account & Login Information

• Username or display name
• Password (stored in encrypted / hashed form only — we never store plain-text passwords)
• Account creation date and last login timestamp
• Order history linked to your account

2.3 Payment Information

We collect the information necessary to process your payment. We do not store full card details on our servers. Payment transactions are processed through a secure, PCI-DSS-compliant third-party payment gateway. The data collected at checkout includes:

• Payment method type (e.g. credit/debit card, UPI, net banking, wallet)
• Transaction reference ID and payment status
• Billing name and address (for payment verification)
• Last 4 digits of card (if displayed by payment gateway for reference)

2.4 Order & Transaction Data

• Items ordered (design, size, quantity)
• Order value and date
• Delivery and shipment tracking information
• Replacement claim history (if applicable)

2.5 Communications Data

• Messages sent to our Customer Support team (email, chat, or support ticket)
• Feedback, reviews, or complaints submitted by you

2.6 Technical Data (Website)

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on site (via cookies or analytics tools)

3. How We Collect Your Data

4. Why We Use Your Data & Our Legal Basis

We only use your personal data for specific, legitimate purposes. The table below sets out each purpose and the legal basis we rely on under applicable data protection principles.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third party. We share data only with trusted partners who help us deliver our products and services, and only to the extent necessary for that purpose.

All third parties are required to handle your data securely and only for the purposes we specify. We do not permit them to use your data for their own marketing or other purposes.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. The table below sets out our standard retention periods:

When the retention period expires, your data is securely deleted or anonymised so it can no longer be linked back to you.

7. How We Protect Your Data

We take the security of your personal data seriously and have put in place technical and organisational measures to protect it from unauthorised access, loss, misuse, or disclosure. These include:

• Encryption of data in transit using SSL/TLS protocols (HTTPS).
• Encrypted storage of passwords — we never store passwords in plain text.
• Payment data handled exclusively by PCI-DSS-compliant payment gateways.
• Role-based access controls so only authorised staff can access customer data.
• Regular internal security reviews and staff data protection awareness.
• Secure, access-controlled cloud infrastructure for data storage.

Despite these measures, no method of data transmission or storage is 100% secure. If you become aware of any security concern relating to your account, please contact us immediately at the address in Section 1.

8. Cookies

Our website uses cookies — small text files placed on your device — to make the site work, remember your preferences, and help us understand how visitors use the site.

You can manage or withdraw cookie consent at any time by adjusting your browser settings or using the cookie preferences tool on our website. Blocking essential cookies may affect your ability to place orders.

9. Your Rights Over Your Personal Data

You have the following rights in relation to your personal data. You can exercise any of these rights by contacting us at the details provided in Section 1.

We will respond to all rights requests within 30 days. In complex cases, we may extend this by a further 30 days and will notify you if this is necessary.

10. Marketing Communications

We will only send you marketing emails, SMS messages, or promotional notifications if you have explicitly opted in to receive them. We do not send unsolicited marketing.

• You can opt out of marketing communications at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.
• Opting out of marketing will not affect your ability to receive transactional messages about your orders (order confirmation, dispatch notification, replacement status updates).
• We will never share your contact details with third parties for their own marketing purposes.

11. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data without parental consent, please contact us immediately and we will delete the information without delay.

12. Third-Party Links

Our website may contain links to third-party websites (for example, social media platforms or payment gateway pages). This Privacy Policy applies only to our own website and services. We are not responsible for the privacy practices of third-party websites and encourage you to read their privacy policies before sharing any personal data with them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Post the updated policy on our website with a revised effective date.
• Notify registered account holders by email of significant changes.
• Where required by law, seek fresh consent before processing your data under revised terms.

Your continued use of our website and services after any changes take effect constitutes acceptance of the revised policy. We recommend reviewing this page periodically.

14. How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us using the details below. We aim to respond to all enquiries within 5 business days.

15. Document Control

16. Policy Sign-Off

By signing below, the authorised representative confirms that this Privacy Policy has been reviewed, approved, and is effective as of the date stated.

Document No. PRV-TSH-001 | Version 1.0 | June 2026 | Review Due: June 2027