Privacy policy

1. Introduction

Welcome to The Draping Drape. Our website (the "Website") is owned and operated by Ashutosh Kumar Singh HUF ("The Draping Drape", "we", "us" or "our").

We know that the sarees you choose are personal, and so is the information you share with us to buy them. This Privacy Policy explains what personal data we collect, why we collect it, how we use, share, store and protect it, and the choices and rights you have. It applies to our Website, our social media and WhatsApp storefronts, and any orders or enquiries you place with us online or offline.

This Policy should be read together with our Terms & Conditions and Shipping Policy and Refund & Cancellation Policy. By using the Website or giving us your information, you agree to the practices described here. If you do not agree, please do not use the Website.

2. Who is responsible for your data

Ashutosh Kumar Singh HUF is the Data Fiduciary (the entity that decides why and how your personal data is processed) under the Digital Personal Data Protection Act, 2023 and is responsible for your personal data under this Policy.

3. Information we collect

We collect only the information we need to serve you. You can choose not to provide some information, but then we may not be able to process your order or offer certain features.

Information you give us

  • Account details: name, email address, mobile number and password when you create an account.
  • Order details: billing and shipping address, pin code, contact number, items purchased, gift messages and delivery instructions.
  • Customisation details: if you order blouse stitching, fall and pico, or other tailoring services, the measurements and style preferences you share with us.
  • Communications: messages, photos or queries you send us by email, phone, WhatsApp, Instagram or our contact form, and product reviews or ratings you post.
  • Marketing preferences: your choices about receiving newsletters, offers and updates.

Information collected automatically

When you browse the Website, we and our service providers automatically receive certain technical information, such as your IP address, device type and identifier, browser type and language, operating system, pages viewed, products clicked, referring and exit pages, date and time of visit, and approximate location (city/pin code level). This is collected through cookies and similar technologies (see Section 7).

Information from other sources

We may receive information about you from logistics partners (delivery status), payment partners (payment confirmation, not your full card details), social media platforms if you interact with our pages or sign in using them, and marketing partners, and we may combine it with the information we already hold.

Payment information

Payments on the Website are processed by our payment partners, Paytm. When you pay, you are directed to their secure payment environment. We do not collect or store your full card number, CVV, UPI PIN or net-banking password. We receive only a confirmation of the transaction and limited details such as the payment method and the last four digits of your card.

4. How we use your information

We use your personal data to:

  • Process, confirm, pack, ship and deliver your orders, and handle returns, exchanges, refunds and cancellations.
  • Create and manage your account, including your order history, saved addresses and wishlist.
  • Provide tailoring and customisation services you request.
  • Respond to your questions, requests and complaints.
  • Send you transactional messages such as order confirmations, invoices, shipping updates and account or security alerts. These are essential to your purchase and you cannot opt out of them while you have an active order or account.
  • Send you marketing communications about new collections, offers and events, where you have agreed to receive them (see Section 6).
  • Personalise your experience, such as showing products and recommendations based on your browsing and purchase history.
  • Analyse how the Website is used so we can improve our products, services, content and advertising.
  • Detect, prevent and investigate fraud, misuse of the Website, and security incidents.
  • Comply with legal, tax, accounting and regulatory obligations, and establish or defend legal claims.

We will not use your personal data for a purpose that is materially different from those listed here without telling you and, where required, asking for your consent.

We process your personal data:

  • With your consent, which you give when you create an account, place an order, subscribe to our communications or accept cookies. Our request for consent will be clear and specific.
  • For legitimate uses permitted by law, such as when you voluntarily provide your data to buy a product, and where processing is needed to comply with law, a court order, or to respond to a medical emergency or threat to safety.

You may withdraw your consent at any time (see Section 11). Withdrawing consent does not affect processing already carried out before withdrawal, but it may mean we can no longer provide the related service, for example maintaining your account.

6. Marketing communications

If you opt in, we may contact you by email, SMS, RCS, WhatsApp or phone with information about new arrivals, festive and wedding collections, sales and events. You can opt out at any time by:

  • Clicking "unsubscribe" in any marketing email;
  • Replying "STOP" to our SMS or WhatsApp messages;
  • Updating your preferences in your account; or
  • Writing to us at hello@thedrapingdrape.com.

We respect the National Customer Preference Register (DND) settings for promotional SMS and calls as required by TRAI regulations.

7. Cookies and similar technologies

Cookies are small text files stored on your browser or device. We and our partners use cookies, pixel tags and similar technologies to:

  • Make the Website work (essential cookies): keep items in your cart, keep you signed in and process checkout securely.
  • Remember your preferences: such as currency, language and recently viewed items.
  • Understand usage (analytics cookies): using tools such as Google Ads and Meta Ads reporting to see which pages and products are popular.
  • Show relevant ads (advertising cookies): using tools such as Google Ads and Meta Ads (including the Meta Pixel) to measure our campaigns and show you our ads on other platforms.

Most browsers accept cookies automatically. You can manage or block cookies through your browser settings or our cookie banner. If you disable essential cookies, some parts of the Website, such as the cart and checkout, may not work. Our cookies do not give us access to other files on your device.

8. How we share your information

We do not sell, rent or trade your personal data. We share it only as described below and only to the extent needed:

  • Service providers (Data Processors) who work on our behalf, under contracts requiring them to protect your data and use it only for our instructions, including:
    • e-commerce and hosting platform: Shopify;
    • payment gateway: Paytm;
    • courier and logistics partners: DTDC and Shiprocket;
    • tailoring and finishing partners (only the details needed for your order);
    • email, SMS and WhatsApp messaging providers;
    • analytics and advertising partners.
  • Legal and safety reasons: when required by law, a court order, or a request from a government or law-enforcement authority; to investigate or prevent fraud or illegal activity; to protect the safety of any person; or to enforce our Terms of Use.
  • Professional advisers such as lawyers, auditors and accountants, under confidentiality obligations.
  • Business transfers: if we are involved in a merger, acquisition, restructuring or sale of assets, your data may be transferred to the new owner, who will be bound by this Policy or give you notice of any material change.

We may share aggregated or anonymised information that does not identify you, for example how many customers bought a particular weave, with partners for business purposes.

9. International transfers

Some of our service providers (for example, our e-commerce platform or email tools) may store or process data on servers located outside India. Where this happens, we take reasonable steps to ensure your data receives a comparable level of protection, and we will only transfer data to countries that are not restricted by the Government of India under the Digital Personal Data Protection Act, 2023.

10. How long we keep your information

We keep your personal data only for as long as it is needed for the purposes in this Policy:

  • Account data: while your account is active. If you close your account, we will delete or anonymise your data within 6 months, unless we must keep it for the reasons below.
  • Order and invoice records: for 6 years, as required under Indian tax and accounting laws.
  • Marketing data: until you unsubscribe or withdraw consent.
  • Data needed for disputes or legal claims: until the matter is resolved.

If you have not interacted with us for an extended period, we may treat your account as inactive and erase your personal data after giving you prior notice, as required by law.

11. Your rights

Subject to applicable law, you have the right to:

  • Access a summary of the personal data we hold about you and how we process it, and the identities of those we have shared it with.
  • Correct and update inaccurate or incomplete data. You can update most details directly in your account.
  • Erase your personal data when it is no longer needed, unless we are legally required to keep it.
  • Withdraw consent at any time, as easily as you gave it.
  • Opt out of marketing communications (see Section 6).
  • Nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
  • Raise a grievance with us, and if you are not satisfied with our response, approach the Data Protection Board of India.

To exercise any of these rights, email hello@thedrapingdrape.com with the subject line "Privacy Request". We may need to verify your identity before acting on your request, and we will respond within the time required by law.

12. How we protect your information

We use reasonable administrative, technical and physical security measures to protect your personal data against loss, misuse, unauthorised access, alteration and destruction, including:

  • SSL/TLS encryption of data sent between your browser and our Website;
  • Secure, PCI-DSS compliant payment gateways for all payments;
  • Access to personal data limited to staff and partners who need it, bound by confidentiality obligations; and
  • Regular review of our security practices.

In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as required by law.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. Please keep your password confidential, and never share OTPs or payment details with anyone claiming to be from The Draping Drape. We will never ask for your OTP, PIN or full card details by phone, SMS or WhatsApp.

13. Children

Our Website is intended for adults who can form a legally binding contract under the Indian Contract Act, 1872. We do not knowingly collect personal data from anyone under 18 years of age without verifiable consent of a parent or lawful guardian, and we do not track, monitor or target advertising at children. If you believe a child has provided us with personal data without such consent, please contact us and we will delete it.

Our Website and social media pages may contain links to other websites, such as payment pages, courier tracking pages, or Instagram and YouTube. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The updated version will be posted on this page with a new "Last updated" date. If we make material changes, we will notify you by a notice on the Website or by email before the change takes effect. Continuing to use the Website after the change means you accept the updated Policy.

16. Grievance Officer and contact us

In accordance with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are:

  • Name: Ashutosh Kumar Singh
  • Designation: Karta
  • Email: hello@thedrapingdrape.com
  • Phone: +91 88105 32456
  • Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST

We will acknowledge and aim to resolve your grievance within 7 working days of receipt.

For any other questions about this Policy or your data, write to us at hello@thedrapingdrape.com or WhatsApp us at +91 88105 32456.

For payment-related grievances, you may also contact our payment partner directly: Paytm customer care at paytm.com/care.

17. Governing law and jurisdiction

This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and rules made under it. Any disputes arising out of this Policy shall be subject to the exclusive jurisdiction of the courts at Delhi.

The Draping Drape respects your privacy. We use your information only to give you a better shopping experience, and we never sell it.