Privacy Policy — Vastraa

Below is a professional Privacy Policy for Vastraa Crete that you can adapt for your clothing business website. It is written for an online ethnic-wear store that may accept orders through a website, WhatsApp, or social media.

Replace the placeholders with your actual business details before publishing.

Privacy Policy 🔒

Vastraa Crete
Last Updated: 9 October 2026

At Vastraa Crete, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, place an order, or contact us through our customer support channels.

By using our website or purchasing our products, you acknowledge the practices described in this Privacy Policy, subject to applicable law.

1. Information We Collect

When you visit our website or place an order with Vastraa Crete, we may collect the following information:

Personal Information: Your name, phone number, email address, and billing or shipping address.
Order Information: Products purchased, order history, order value, delivery status, and returns or exchange requests.
Payment Information: Payment status, transaction references, and payment confirmation details necessary to process your order.
Customer Support Information: Messages, feedback, reviews, and other information you share with us through WhatsApp, email, or other support channels.
Device and Usage Information: IP address, browser type, device information, and website interactions, where collected through analytics or security tools.

We only seek to collect information that is reasonably necessary for operating our business and providing our services.

2. How We Use Your Information

We may use your information to:

Process and confirm customer orders.
Arrange shipping and delivery.
Send order confirmations and delivery updates.
Process eligible cancellations, returns, refunds, and exchanges.
Respond to customer questions and complaints.
Improve our products, services, and shopping experience.
Prevent fraudulent transactions and protect our website.
Meet applicable legal, tax, and accounting obligations.
Send promotional messages or offers where permitted by law and, where required, with your consent.

You may opt out of promotional communications at any time.

3. Payments and Financial Information

Vastraa Crete may use third-party payment service providers to process online payments.

Payments are processed through the relevant payment provider's systems.
We may receive transaction IDs, payment status, and other limited information required to confirm your purchase.
We do not intentionally store your complete card number, CVV, or online banking password on our own systems.
Payment providers handle payment information according to their own privacy policies and security practices.
Refunds, where applicable, are processed according to our Refund Policy and the payment provider's procedures.

Please avoid sharing sensitive financial information through WhatsApp, email, or other unsecured communication channels.

4. Sharing of Personal Information

We do not sell your personal information to third parties.

We may share relevant information with trusted service providers when necessary to operate our business, including:

Delivery Partners: To ship orders and deliver products to your address.
Payment Providers: To process and verify payments and refunds.
Technology and Hosting Providers: To maintain our website, store necessary data, and provide technical support.
Communication Services: To send order confirmations, customer service responses, and delivery notifications.
Legal Authorities: When disclosure is required by applicable law or a valid legal request.

We expect service providers to handle personal information appropriately and only for the purposes for which it is shared.

5. Cookies and Website Analytics

Our website may use cookies and similar technologies to:

Remember certain website preferences.
Maintain shopping cart functionality.
Improve website performance and security.
Understand visitor activity and improve the shopping experience.

You can manage or disable cookies through your browser settings. However, some website features may not function properly if certain cookies are disabled.

Where required by law, we will obtain consent before using non-essential cookies or similar technologies.

6. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, misuse, alteration, disclosure, or loss.

These measures may include access restrictions, secure hosting, HTTPS encryption, and appropriate controls over customer information.

However, no method of electronic storage or transmission can be guaranteed to be completely secure. We therefore cannot promise absolute security.

7. Your Privacy Rights

Subject to applicable law, you may have the right to:

Access: Request information about the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of personal information where legally permitted.
Withdrawal of Consent: Withdraw consent for processing activities that rely on your consent.
Marketing Preferences: Opt out of promotional messages.
Grievances: Raise a concern about how your personal information is handled.

To exercise these rights, contact us using the details provided below. We may need to verify your identity before processing certain requests.

Some information may need to be retained to fulfil orders, resolve disputes, or comply with legal obligations.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy or as required by applicable law.

For example:

Order records may be retained for accounting and tax purposes.
Customer support messages may be retained to resolve disputes or improve customer service.
Payment and transaction records may be retained for applicable legal and financial requirements.
Information that is no longer required may be deleted or anonymised, subject to applicable law.

The actual retention period depends on the type of information and the reason it was collected.

9. Children's Privacy

Our online store is intended for individuals who can legally make purchases under applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.

10. Third-Party Websites and Services

Our website or social media pages may contain links to third-party websites, including payment services and delivery tracking platforms.

These websites operate independently and may have their own privacy policies. Vastraa Crete is not responsible for the privacy practices of third-party websites that we do not control.

We encourage customers to review the privacy policies of those services before sharing personal information with them.

11. Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website features, or legal requirements change.

Any revised version will be published on this page with an updated revision date.

We encourage customers to review this page periodically.

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us:

Business Name: Vastraa Crete
Email: [Your Business Email]
Phone / WhatsApp: [Your Business Phone Number]
Business Address: [Your Business Address]
Website: [Your Website URL]

We will review privacy-related requests and respond within a reasonable period, subject to applicable legal requirements.

Before publishing, check these five things

Replace the contact placeholders with your actual business details.
Include only the payment methods, analytics tools, and communication services your business actually uses.
Add links to your Terms & Conditions, Refund Policy, and Shipping Policy.
Make sure your actual data practices match the promises in this policy.
Have the final version reviewed for compliance with applicable Indian privacy and consumer-protection laws.

Important: This is a general template, not a legal compliance certification. Don't copy Hindustan Factory's claims about encryption, data retention, or payment security unless those claims accurately describe your own business.