Last Updated: 16/08/26
At Chillytude, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights available to you when you use our website, place an order, create an account, or otherwise interact with us.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy. Where consent is required under applicable law, we will obtain your consent before processing your personal data for the relevant purpose. We may update this Privacy Policy from time to time, and the updated version will be posted on this page with the revised "Last Updated" date.
1. Information We Collect
Depending on how you interact with us, we may collect the following information:
Information you provide directly:
- Your name, email address, mobile number, billing address, shipping address, and other contact details.
- Account information, such as your login details and preferences.
- Order and transaction information, including products purchased, order history, delivery details, and relevant payment information.
- Information you provide when contacting customer support, submitting a review, requesting a return or refund, or otherwise communicating with us.
- Information you voluntarily provide through forms, surveys, promotions, contests, or other features of our website.
Information collected automatically:
- IP address, browser type, device type, operating system, approximate location, and similar technical information.
- Website activity, such as pages viewed, products searched for, links clicked, and approximate time spent on our website.
- Information collected through cookies and similar technologies, as described in the Cookies section below.
We aim to collect only personal data that is reasonably necessary for the purposes for which it is processed. Where required by applicable law, we will provide appropriate notice and obtain valid consent before processing personal data. The Digital Personal Data Protection Act, 2023 requires consent, where consent is the basis for processing, to be free, specific, informed, unconditional, and unambiguous, with a clear affirmative action.
2. How We Use Your Information
We may use personal information for purposes including:
- Processing, confirming, shipping, and delivering your orders.
- Processing payments and facilitating refunds, returns, and exchanges.
- Creating and managing customer accounts.
- Responding to questions, complaints, and customer-service requests.
- Sending order confirmations, shipping updates, delivery notifications, and other service-related communications.
- Providing customer support and improving our products and services.
- Personalising your shopping experience where permitted by law.
- Sending promotional or marketing communications where permitted and, where required, with your consent.
- Detecting, preventing, and investigating fraud, misuse, security incidents, or other unlawful activity.
- Maintaining the security and functionality of our website and systems.
- Complying with applicable legal, tax, accounting, regulatory, and law-enforcement requirements.
- Establishing, exercising, or defending legal claims and protecting our rights and interests.
We will not use your personal data for purposes that are incompatible with the purposes disclosed to you or otherwise permitted under applicable law.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
3. Cookies and Similar Technologies
Our website may use cookies, pixels, tags, local storage, and similar technologies to operate the website and understand how visitors use it.
Cookies may be used to:
- Keep products in your shopping cart.
- Remember your preferences and account settings.
- Maintain website security and functionality.
- Understand website traffic and performance.
- Improve our website and customer experience.
- Support advertising or marketing activities where applicable and permitted by law.
Some cookies are necessary for the website to function, while others may be optional. Where required by applicable law, we will request your consent before placing or using non-essential cookies or similar technologies.
You can also control or delete cookies through your browser settings. Disabling certain cookies may affect the availability or functionality of some parts of our website.
4. Third-Party Services and Data Sharing
We may use trusted third-party service providers to operate our business and provide services to you. Depending on our operations, these providers may include:
- Payment gateways and payment processors.
- Shipping and logistics providers.
- Website hosting and cloud-service providers.
- E-commerce and technology platforms.
- Customer-support and communication providers.
- Analytics and website-performance providers.
- Marketing and advertising service providers.
- Fraud-prevention and security providers.
- Professional advisers, including accountants, auditors, lawyers, and consultants.
We may share relevant personal data with these providers only to the extent reasonably necessary for the services they provide or for other lawful purposes.
We may also disclose personal data where required or permitted by applicable law, including in response to lawful requests from government authorities, courts, regulators, or law-enforcement agencies, or where necessary to protect our rights, customers, property, or the security of our services.
We do not intend to sell your personal data as a standalone commercial asset.
Where third parties process personal data on our behalf, we will take appropriate steps to require appropriate handling and protection of that data, consistent with applicable law.
5. Payment Information
Payments made through our website may be processed by third-party payment providers. Depending on the payment method, your payment information may be collected and processed directly by the relevant payment provider.
We generally do not need to store your complete debit-card, credit-card, banking, or other sensitive payment credentials on our own systems. Payment providers may have their own privacy policies and terms, which govern their processing of payment information.
Please review the relevant payment provider's terms and privacy notice before completing a transaction where appropriate.
6. Data Security
We take reasonable security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse, or destruction.
Depending on the nature of the information and risks involved, our security measures may include access controls, authentication procedures, encryption or equivalent protections where appropriate, secure hosting, monitoring, backups, staff controls, and other technical and organisational safeguards.
However, no website, online transaction, or electronic storage system can be guaranteed to be completely secure. You should also take reasonable steps to protect your account credentials and devices and should notify us promptly if you believe your account or information has been compromised.
Where required by applicable law, we will follow applicable requirements concerning personal-data security and personal-data breaches.
7. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or processed, or for as long as required or permitted by applicable law.
For example, certain transaction, tax, accounting, fraud-prevention, dispute-resolution, or legal records may need to be retained for a longer period even after your account is closed or your relationship with us ends.
When personal data is no longer required and there is no legal or legitimate reason to retain it, we will take reasonable steps to delete, anonymise, or otherwise dispose of it in accordance with applicable law.
8. Your Privacy Rights
Subject to applicable law and any conditions or limitations that may apply, you may have rights relating to your personal data, including the right to:
- Request information about the personal data being processed about you and how it is being used.
- Request correction or updating of inaccurate or incomplete personal data.
- Request deletion or erasure of personal data where permitted by applicable law.
- Withdraw consent where processing is based on consent.
- Raise a grievance regarding our processing of your personal data.
- Nominate another individual to exercise applicable rights on your behalf in circumstances permitted by law.
The Digital Personal Data Protection Act, 2023 provides Data Principals with rights including access to information about personal data, correction and erasure, grievance redressal, and nomination.
To exercise an applicable right, please contact us using the details in the Contact Information section below. We may need to verify your identity before acting on a request to protect your personal data from unauthorised access.
We will handle valid requests within the time periods and according to the procedures required by applicable law.
9. Marketing Communications
Where permitted by applicable law, we may send you promotional communications about products, offers, discounts, new launches, or other updates that may be relevant to you.
You can unsubscribe from marketing emails by using the unsubscribe option provided in the communication or by contacting us at [EMAIL ADDRESS].
Please note that even if you opt out of promotional communications, we may continue to send essential service-related communications, such as order confirmations, payment notifications, delivery updates, security notices, or information relating to your account or transactions.
10. Children's Privacy
Our services are intended for use by customers who are legally able to use the services under applicable law. We do not knowingly seek to collect or process children's personal data except as permitted and required under applicable law.
Where applicable legal requirements relating to children's personal data apply, including requirements concerning verifiable parental consent and restrictions on certain forms of processing, we will comply with those requirements.
If you believe that a child has provided personal data to us in circumstances where it should not have been collected, please contact us at [EMAIL ADDRESS].
11. International and Third-Party Data Processing
Some of our service providers, technology partners, hosting providers, payment processors, or other third parties may process personal data outside India.
Where personal data is transferred or processed outside India, we will take steps required by applicable Indian law and any other applicable law relating to such processing or transfer.
The Digital Personal Data Protection framework also permits the Central Government to restrict transfers of personal data to certain countries or territories as may be notified.
12. Data Breaches and Security Incidents
If we become aware of a personal-data breach that is subject to notification requirements under applicable law, we will take the steps required by law, which may include investigating the incident, taking remedial measures, and providing notifications to affected individuals and/or relevant authorities within the applicable timeframes.
13. Changes to This Privacy Policy
We may update this Privacy Policy when our business practices, technology, services, or applicable laws change.
When we make material changes, we will update the "Last Updated" date and, where appropriate, provide additional notice or obtain consent as required by applicable law.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle personal data.
14. Contact Information and Grievances
If you have questions about this Privacy Policy, want to exercise an applicable privacy right, or wish to raise a grievance regarding the processing of your personal data, please contact us:
Store Name: Chillytude
Email: Chillytude8@gmail.com
Please include enough information in your request for us to understand the issue and, where appropriate, verify your identity.
We will acknowledge and handle privacy requests and grievances in accordance with applicable law and our legal obligations.
15. Governing Law
This Privacy Policy is intended to be governed by the laws applicable in India. Any dispute relating to this Privacy Policy or the processing of personal data will be subject to the applicable jurisdiction and dispute-resolution requirements under Indian law.
This Privacy Policy should be read together with our Terms and Conditions, Shipping Policy, Returns and Refund Policy, and any other policies displayed on [STORE NAME]'s website.
Effective Date: 16/08/26
Last Updated: 16/08/26