Privacy Policy

Swan Silks December 01, 2025

1. Introduction

Swan Silks ("we", "us", "our", or the "Company") is committed to protecting the privacy and personal data of our customers and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 of India.

This policy applies to personal data collected through our website, mobile application, retail stores in India, and any other channels through which you interact with us.

2. Data Fiduciary Information

Swan Silks operates as a Data Fiduciary under the DPDP Act. Our details are as follows:

• Registered Name: Swan Silks - House of Sarees

• Registered Address: Thrissur Muni. Corp. Room No. 3/1953, Ground Floor, Shivayogini Complex, Cosmopolitan Rd, Chembukkav, THRISSUR, KERALA 680020, India

• Contact Email: swansilks1001@gmail.com

• Contact Phone: +91-79941 54224

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

• Name, email address, phone number, and postal address

• Payment information (processed securely through our payment partners)

• Order history and product preferences

• Account login credentials

• Communication preferences and feedback

3.2 Information Collected Automatically

• Device information (IP address, browser type, operating system)

• Website usage data (pages visited, time spent, click patterns)

• Cookies and similar tracking technologies

4. Purpose of Processing Personal Data

We process your personal data for the following specific purposes:

1. Order Fulfilment: Processing and delivering your orders, managing returns and exchanges

2. Customer Service: Responding to your enquiries, complaints, and providing support

3. Account Management: Creating and managing your customer account

4. Marketing Communications: Sending promotional offers, newsletters, and updates (with your consent)

5. Legal Compliance: Meeting our obligations under applicable Indian laws, including GST regulations

6. Website Improvement: Analysing usage patterns to enhance user experience

5. Consent and Lawful Basis for Processing

Under the DPDP Act, we process your personal data based on your free, specific, informed, unconditional, and unambiguous consent. You provide consent when you create an account, place an order, or subscribe to our communications.

We may also process your data without consent for certain legitimate uses as permitted under the DPDP Act, including:

• Fulfilling orders you have voluntarily placed

• Compliance with legal obligations under Indian law

• Responding to medical emergencies or threats to life

• Employment-related processing for our staff

6. Your Rights as a Data Principal

Under the DPDP Act, you (the "Data Principal") have the following rights:

1. Right to Access: Request a summary of your personal data being processed and the processing activities undertaken

2. Right to Correction: Request correction or completion of inaccurate or incomplete personal data

3. Right to Erasure: Request deletion of your personal data where processing is no longer necessary

4. Right to Withdraw Consent: Withdraw your consent at any time with ease equal to that with which it was given

5. Right to Grievance Redressal: Lodge a complaint with our Grievance Officer or the Data Protection Board of India

6. Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity

7. How to Exercise Your Rights

To exercise any of the above rights, you may:

• Email us at: swansilks1001@gmail.com

• Use the request form on our website at: [www.swansilks.com/privacy-request]

• Write to our Grievance Officer at the address provided in Section 14

We will respond to your request within a reasonable timeframe as prescribed under the DPDP Rules.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Once the purpose is fulfilled and no legal retention requirement applies, we will delete or anonymise your personal data.

Specific retention periods:

• Transaction records: As required under GST and Income Tax laws (typically 8 years)

• Customer account data: Until account deletion or 3 years of inactivity

• Marketing preferences: Until you withdraw consent

9. Data Security Measures

We implement reasonable security safeguards to protect your personal data, including:

1. Encryption of data in transit and at rest

2. Secure payment processing through certified payment gateways

3. Access controls limiting data access to authorised personnel only

4. Regular security assessments and updates

5. Data backup procedures to ensure continuity

10. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act and Rules. Notifications will be provided within the timeframes prescribed by law.

11. Cross-Border Data Transfers

As Swan Silks serves customers globally, your personal data may be transferred to and processed in countries outside India for purposes such as order fulfilment and customer support. Such transfers will only be made to countries not restricted by the Central Government of India under Section 16 of the DPDP Act.

12. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. You can manage your cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy available on our website.

13. Children's Personal Data

We do not knowingly collect personal data from children under 18 years of age. If we become aware that we have collected such data without verifiable parental consent, we will take immediate steps to delete it. Parents or guardians may contact us to request deletion of their child's data.

14. Grievance Officer

In accordance with the DPDP Act, we have appointed a Grievance Officer to address your concerns:

• Name: Grievance Officer - S. Nambiar

• Email: swansilks1001@gmail.com

• Address: Thrissur Muni. Corp. Room No. 3/1953, Ground Floor, Shivayogini Complex, Cosmopolitan Rd, Chembukkav, THRISSUR, KERALA 680020, India

• Response Time: We aim to acknowledge complaints within 48 hours and resolve them within 30 days

15. Complaint to Data Protection Board of India

If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India. Details on how to file a complaint can be found on the official website of the Data Protection Board once it is operational.

16. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated through our website or by email. The "Effective Date" at the top indicates when this policy was last updated.

17. Language

This Privacy Policy is provided in English. In accordance with the DPDP Act, we can provide this policy in any of the 22 languages listed in the Eighth Schedule of the Constitution of India upon request.