Privacy Policy

1. Introduction

Welcome to Thoorigai Silks (the “Company”, “we”, “us”, or “our”). We are committed to protecting the personal data of our customers, visitors and users (“you”, “your”). This Privacy Policy describes how we collect, use, disclose, retain and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (the “Act”) and other applicable laws in India.

2. Scope

This Policy applies to all personal data collected by us (whether through our website [www.thoorigaisilks.com], mobile or tablet applications, social media pages, or offline channels) in connection with your use of our services, including browsing, placing orders, registering, subscribing to newsletters, and other interactions.

3. Definitions

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.
“Data Principal” means you, the person whose personal data is processed.
“Data Fiduciary” means the entity (us) that determines the purpose and means of processing personal data.
“Processing” means any operation or set of operations performed on personal data, including collection, storage, use, disclosure, etc.

4. Categories of Personal Data We Collect

We may collect the following categories of personal data from you:

Identity data: name, date of birth, gender.
Contact data: e-mail address, phone number, shipping/billing address.
Transaction data: details of products you purchase or return, payment information (as provided by payment processors).
Technical data: IP address, login credentials, browser type, device type, operating system, cookies and usage data.
Marketing & preferences data: size preferences, product interest, whether you want to receive marketing communications.
Any other personal data voluntarily provided by you (for example, in feedback forms or customer service interactions).

5. Purposes of Processing

We process your personal data for the following purposes:

To provide you with our products and services (including order processing, delivery, returns, refunds).
To manage your account, enable registration, login, preferences.
To communicate with you – for order confirmation, shipping updates, customer service queries.
To send promotional offers, newsletters and marketing communications (only if you consent to receive them).
To improve our website, products, services and user experience.
To comply with legal or regulatory obligations (for example record-keeping).
For fraud prevention, security, analytics and risk management.

6. Legal Basis for Processing

We rely on the following legal bases for processing your personal data:

Your consent, where required (for example marketing communications).
Performance of a contract (e.g., to deliver products you ordered).
Compliance with a legal obligation (e.g., tax/record-keeping).
Legitimate interests of our business (such as improving user experience, preventing fraud), provided those interests are balanced with your rights.

7. Cookies & Tracking Technologies

We and our third-party service providers use cookies and similar tracking technologies to collect technical data (see Section 4), to store your preferences, to analyze use of the website, and for marketing/advertising. You may block or delete cookies via your browser settings, but this may affect site functionality.

8. Disclosure of Personal Data

We may share your personal data with:

Our group companies, partners, service providers (such as fulfilment/shipping, payment processors, IT/hosting providers) strictly for the purposes set out in this Policy.
Professional advisers, auditors, regulators, law-enforcement or government agencies if required by law or for legal claim enforcement.
In the event of any business transfer or reorganisation, your personal data may be transferred to a successor entity, subject to appropriate protections.

9. Cross-Border Data Transfers

If your personal data is transferred outside India (for example to our cloud service provider, analytics provider), we ensure that such transfers are subject to appropriate safeguards (such as standard contractual clauses or other mechanisms consistent with applicable law).
(Note: Amend this section according to your actual practice.)

We retain your personal data only for as long as necessary for the purposes described in Section 5 or as required by law. When the specified purpose is no longer served (and no legal requirement to retain remains), we will securely delete or anonymise the data. MeitY+1

11. Your Rights

Under the Act you have the following rights:

Right of access: You can request a summary of your personal data being processed, the processing activities, and with whom your data is shared. MeitY
Right of correction/completion: You can request correction or update of inaccurate or incomplete personal data.
Right of erasure: You can request deletion of your personal data, unless retention is necessary for the specified purpose or by law.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.
Right to grievance redressal: You have a right to make a complaint or grievance; see Section 13 below.

To exercise any of these rights, please contact us at the contact details in Section 13. We will respond within the time period required by the applicable law.

12. Security

We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction or alteration. However, no method of transmission over the internet or electronic storage is 100% secure, so absolute security cannot be guaranteed.

13. Changes to the Privacy Policy

We may update this Privacy Policy from time to time (for example, to reflect changes in law or our business practices). We will notify you of significant changes (for example via email or website notice) and update the “Effective Date” at the top.