Privacy policy

1. Introduction

Swan Silks – House of Sarees ("we", "us", "our", or the "Company") operates this store and website, including all related information, content, features, tools, products and services, to provide you with a curated shopping experience (the "Services"). Our Services are powered by Shopify.

This Privacy Policy describes how we collect, use, store, disclose, and protect your personal information when you visit, use, or make a purchase through the Services or otherwise communicate with us.

This policy is primarily governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 of India. Although we sell only within India, our website may be accessed by visitors located elsewhere. Where the data-protection laws of a visitor’s own country apply to them, we seek to honour the corresponding rights, including through the cookie-consent choices described in Section 14.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

2. Data Fiduciary Information

Under the DPDP Act, Swan Silks – House of Sarees operates as a Data Fiduciary. Our details are as follows:

•       Registered Business Name: Swan Silks – House of Sarees

•       Registered Address: Shivayogini Complex, Ground Floor, Cosmopolitan Road, Cherumukku, Chembukkavu, Thrissur, Kerala – 680022, India

•       Contact Email: swansilks1001@gmail.com

•       Platform Provider: Shopify Inc.

3. Personal Information We Collect

When we use the term "personal information" or "personal data," we refer to information that identifies or can reasonably be linked to you. Personal information does not include anonymised or de-identified data. We collect the following categories depending on how you interact with the Services:

3.1 Information You Provide Directly

•       Contact Details: Name, address, billing address, shipping address, phone number, and email address

•       Financial Information: Credit card, debit card, UPI details, net banking information, payment card details, transaction details, and payment confirmation (processed securely through our payment partners)

•       Account Information: Username, password, security questions, preferences, and settings

•       Transaction Information: Items you view, add to cart, wishlist, purchase, return, exchange, or cancel, and your order history

•       Communications: Information in your correspondence with us, including customer support enquiries, feedback, and reviews

3.2 Information Collected Automatically

•       Device Information: Information about your device, browser, network connection, IP address, and unique identifiers

•       Usage Information: How and when you interact with or navigate the Services, pages visited, time spent, and click patterns

3.3 Information from Third Parties

•       From service providers who collect or process information on our behalf

•       From business partners and marketing partners

•       From Shopify as our platform provider

4. How We Use Your Personal Information

We process your personal data for the following specific purposes:

1. Provide and Improve Services: To perform our contract with you, process payments, fulfil orders, arrange shipping, facilitate returns and exchanges, manage your account, remember your preferences, and create a customised shopping experience

2. Marketing and Advertising: To send marketing communications by email, SMS, or postal mail, and to show you relevant advertisements (with your consent where required)

3. Security and Fraud Prevention: To authenticate your account, provide secure payment processing, detect and prevent fraudulent or illegal activity, and protect public safety

4. Customer Communication: To provide customer support, respond to your enquiries, and maintain our business relationship

5. Legal Compliance: To comply with applicable Indian laws including GST regulations, respond to legal process, and enforce our terms and policies

5. Consent and Lawful Basis for Processing

Under the DPDP Act, we process your personal data based on your free, specific, informed, unconditional, and unambiguous consent. You provide consent when you create an account, place an order, subscribe to our communications, or use our Services.

We may also process your data without explicit consent for certain legitimate uses permitted under the DPDP Act, including:

•       Fulfilling orders you have voluntarily placed

•       Compliance with legal obligations under Indian law

•       Responding to medical emergencies or threats to life

•       Employment-related processing for our staff

6. How We Disclose Personal Information

We may disclose your personal information to third parties in the following circumstances:

•       Service Providers: With Shopify, vendors, and third parties who perform services on our behalf (IT management, payment processing, data analytics, customer support, cloud storage, fulfilment, and shipping)

•       Marketing Partners: With business and marketing partners for personalised advertising based on your online activity (you may opt out of this)

•       At Your Direction: When you direct us to share information, such as for shipping or through social media integrations

•       Corporate Affiliates: With our affiliates within our corporate group

•       Legal Requirements: In connection with business transactions, to comply with legal obligations, respond to lawful requests, enforce our policies, and protect rights

7. Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit will be transmitted to and shared with Shopify and third parties located in countries other than India to provide and improve the Services.

We use certain Shopify enhanced features that incorporate data from your interactions with our store. For these features, Shopify acts as an independent data controller and is responsible for processing your personal information.

To learn more about how Shopify uses your personal information and your rights, visit the Shopify Consumer Privacy Policy at shopify.com/legal/privacy/consumers. You may also exercise rights directly with Shopify at privacy.shopify.com.

8. Your Rights as a Data Principal

Under the DPDP Act and applicable laws, you (the "Data Principal") have the following rights:

1. Right to Access: Request access to and a summary of personal data we hold about you

2. Right to Correction: Request correction of inaccurate or incomplete personal data

3. Right to Erasure/Deletion: Request deletion of your personal data where processing is no longer necessary

4. Right to Withdraw Consent: Withdraw your consent at any time with ease equal to that with which it was given

5. Right to Portability: Receive a copy of your personal data in a structured format (where applicable)

6. Right to Grievance Redressal: Lodge a complaint with our Grievance Officer or the Data Protection Board of India

7. Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity

8. Right to Opt-Out: Opt out of marketing communications using unsubscribe links or contacting us; opt out of data sharing for targeted advertising

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your requests.

9. How to Exercise Your Rights

To exercise any of the above rights, you may:

•       Email us at: swansilks1001@gmail.com

•       Write to our Grievance Officer at the address provided in Section 15

•       For Shopify-related requests, visit: privacy.shopify.com

We will respond to your request within a reasonable timeframe as prescribed under the DPDP Rules. You may also designate an authorized agent to make requests on your behalf.

10. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods include:

•       Transaction Records: As required under GST and Income Tax laws of India (typically 8 years)

•       Customer Account Data: Until account deletion request or 3 years of inactivity

•       Marketing Preferences: Until you withdraw consent

•       Security/Breach Data: Minimum 1 year as per DPDP Rules for breach detection and investigation

11. Data Security

We implement reasonable security safeguards to protect your personal data, including:

1. Encryption of data in transit and at rest

2. Secure payment processing through PCI DSS compliant payment gateways

3. Access controls limiting data access to authorised personnel

4. Regular security assessments and updates

5. Data backup procedures for continuity

6. Firewalls and intrusion detection systems

Please be aware that no security measures are perfect or impenetrable. We recommend that you do not use unsecure channels to communicate sensitive information to us and that you keep your account credentials safe.

12. Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act and Rules. Notifications will be provided within the timeframes prescribed by law, and we will take immediate steps to mitigate any harm.

13. International Data Transfers

Although we sell only within India, some of our platform and service providers — including Shopify (store platform), Google (analytics), and Meta (marketing) — operate and store data on servers located outside India. As a result, your personal data may be transferred to, stored, and processed outside India by these providers.

Such transfers will only be made to countries not restricted by the Central Government of India under Section 16 of the DPDP Act. Where a visitor accesses our website from the European Economic Area or the United Kingdom, these providers rely on their own recognised transfer safeguards for any processing of that visitor’s data.

14. Cookies and Similar Tracking Technologies

Our website uses cookies and similar technologies to operate the store, remember your preferences, understand how visitors use the site, and support our marketing. We use essential cookies (required for core functions such as maintaining your cart and enabling secure checkout, which operate without separate consent) and non-essential cookies for analytics and marketing, which we activate only after you consent through our cookie banner.

The main third-party tools we use are:

•       Google Analytics 4 (provided by Google): collects information such as your device and browser type, IP address, pages visited, and on-site actions (for example, viewing a product, adding to cart, and completing a purchase) to help us understand traffic and improve the shopping experience.

•       Meta Pixel and Conversions API (provided by Meta Platforms, including Facebook and Instagram): collects information about your interactions with our site and, in hashed (encrypted) form, certain identifiers such as your email or phone number, to measure the performance of our marketing and reach relevant audiences.

These tools may process your information on servers located outside India (see Section 13). You can accept or decline non-essential cookies through our consent banner, and you may change or withdraw your choice at any time using the cookie-preferences link on our site. Declining will not prevent you from browsing or purchasing, but some analytics and marketing features will not operate. We honour "Do Not Track" signals and Global Privacy Control where applicable.

15. Grievance Officer

In accordance with the DPDP Act, we have appointed a Grievance Officer to address your privacy concerns:

•       Name: S. Nambiar

•       Email: swansilks1001@gmail.com

•       Address: Shivayogini Complex, Ground Floor, Cosmopolitan Road, Cherumukku, Chembukkavu, Thrissur, Kerala – 680022, India

•       Response Time: We aim to acknowledge complaints within 48 hours and resolve them within 30 days

16. Complaint to Data Protection Board of India

If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India. Details on how to file a complaint will be available on the official website of the Data Protection Board.

Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

17. Children's Personal Data

The Services are not intended to be used by children. We do not knowingly collect personal data from children under 18 years of age (the age of majority in India). If you are a parent or guardian and believe your child has provided us with their personal information, please contact us to request deletion.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" personal information of individuals under 16 years of age.

18. Third Party Websites and Links

The Services may contain links to websites or platforms operated by third parties. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any personal information.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on our website and update the "Last Updated" date. Significant changes will be communicated through our website or by email.

20. Language

This Privacy Policy is provided in English. In accordance with the DPDP Act, we can provide this policy in any of the 22 languages listed in the Eighth Schedule of the Constitution of India upon request.

21. Contact Us

For questions about this Privacy Policy or to exercise your rights, please contact us:

•       Email: swansilks1001@gmail.com

•       Address: Shivayogini Complex, Ground Floor, Cosmopolitan Road, Cherumukku, Chembukkavu, Thrissur, Kerala – 680022, India