Privacy Policy

Scope of This Policy

This Privacy Policy applies to information collected through our website, customer accounts, shopping and checkout functionality, order-management systems, customer-support communications, custom-order functionality, and other services that link to this Privacy Policy.

By using our Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent or another lawful basis for processing, we will process information in accordance with that requirement.

This policy does not control the privacy practices of independent third parties such as payment providers, hosting providers, authentication providers, delivery partners, or external websites. Their own privacy policies may apply to information they process.

Information We Collect

Information You Provide Directly

Depending on how you use the Services, we may collect:

• Your name.
• Email address.
• Mobile or telephone number.
• Shipping and billing addresses.
• Account and authentication information.
• Order and purchase information.
• Product preferences and wishlist information.
• Information you voluntarily provide when contacting us.
• Measurements or other information voluntarily supplied for a custom order.
• Images or files voluntarily uploaded for a custom order.
• Information contained in customer-service communications.

Order Information

When you place an order, we may process information necessary to identify the order, communicate with you, arrange fulfilment, provide customer support, process cancellation requests, maintain order history, and meet accounting or legal obligations.

Information You Do Not Need to Provide

We do not intentionally request information that is unnecessary for providing our Services. Please do not submit sensitive personal information unless it is specifically requested and reasonably necessary for a stated purpose.

Information From Third Parties

Where you use third-party authentication or payment services, we may receive limited information from those providers that is necessary to authenticate your account, identify your transaction, or provide the requested service.

How We Use Your Information

We may use personal information for purposes including:

• Creating and maintaining customer accounts.
• Authenticating users.
• Processing and fulfilling orders.
• Processing cancellation requests.
• Arranging shipping and delivery.
• Processing payments through our payment provider.
• Providing customer support.
• Responding to questions, complaints, and requests.
• Maintaining shopping carts and wishlist functionality.
• Providing custom-order services.
• Maintaining records of transactions and orders.
• Detecting and preventing fraud, abuse, or unauthorized activity.
• Maintaining and improving the website.
• Monitoring technical performance and diagnosing errors.
• Protecting the rights, property, and security of Vandals Fashion and its users.
• Complying with applicable legal, tax, accounting, regulatory, or governmental requirements.

Marketing Communications

Where we send promotional communications, we will do so in accordance with applicable law and any consent or opt-out requirements that apply. You may contact us if you no longer wish to receive promotional communications.

Transactional or administrative communications, such as order confirmations, payment notifications, cancellation updates, security messages, and important service notices, may still be sent when reasonably necessary to provide the Services.

Payment Information

Payments made through our Services may be processed by Razorpay or another payment provider made available through our checkout system.

We may receive transaction-related information such as payment status, transaction identifiers, payment method type, order amount, and other information necessary to identify and reconcile a transaction.

We do not intentionally store complete card numbers, CVV/security codes, UPI PINs, banking passwords, or other authentication credentials used by your payment provider.

Payment providers may independently collect and process payment information under their own terms and privacy policies. Customers should review the applicable payment provider's privacy documentation before using its payment services.

Cookies, Local Storage and Technical Information

Cookies

We may use cookies or similar technologies where necessary for website functionality, authentication, security, preferences, analytics, or other legitimate purposes.

Local Storage

Certain shopping features may use browser local storage to temporarily retain information such as cart contents, checkout information, wishlist state, or custom-order information so that the website can function correctly between page visits.

Clearing your browser's stored data may remove locally stored shopping information. This may affect your cart, preferences, or other website functionality.

Technical Information

Depending on the technical configuration of the Services, our systems or service providers may process information such as IP address, browser type, device information, operating-system information, timestamps, referring pages, error information, and other technical information required for security and operation.

Service Providers and Information Sharing

We may use third-party service providers to support the operation of our website and business. Depending on the services currently enabled, these may include providers for:

• Website hosting and infrastructure.
• Database and authentication services.
• Payment processing.
• Image and file storage.
• Email delivery.
• Shipping and logistics.
• Security and fraud prevention.
• Technical monitoring and analytics.

We share information with these providers only to the extent reasonably necessary for the service they provide, subject to applicable law and contractual or technical safeguards where appropriate.

Legal and Safety Disclosures

We may disclose information where reasonably necessary to comply with a legal obligation, court order, governmental request, regulatory requirement, fraud investigation, dispute, or to protect the rights, safety, and property of Vandals Fashion, customers, or other persons.

Business Transfers

If Vandals Fashion or substantially all of its assets are reorganized, transferred, sold, merged, or otherwise acquired, information associated with the business may be transferred as part of that transaction, subject to applicable law.

We do not sell personal information as a business practice.

Google and Authentication Services

Vandals Fashion may provide account authentication through Google or other authentication providers.

If you choose to sign in through a third-party authentication provider, that provider may provide us with information such as your name, email address, profile identifier, or profile image, depending on the permissions and configuration of the authentication service.

We use such information to create, authenticate, maintain, and secure your Vandals Fashion account and to provide account-related functionality.

Third-party authentication providers operate independently from Vandals Fashion. Their collection and use of information is governed by their own policies and terms.

Where our use of information obtained through Google APIs is subject to Google's applicable API policies, we intend to use such information only for permitted purposes.

Custom Orders and Uploaded Images

If you use our custom-order functionality, you may voluntarily provide measurements, preferences, instructions, images, or other information required to prepare the requested product.

Such information may be stored or processed through our website and third-party storage infrastructure used to operate the custom-order service.

You should only upload images or information that you have the right to provide and that are reasonably necessary for your order.

We do not use customer-submitted custom-order images for unrelated advertising or publication merely because they were submitted to us. If we wish to publicly use customer content for promotional purposes, we will seek appropriate permission where required.

Data Retention

Retention periods depend on the type of information and why it was collected. For example, account information may be retained while an account remains active, while transaction and order information may need to be retained for accounting, tax, legal, fraud-prevention, or dispute-resolution purposes.

When information is no longer reasonably required and there is no legal, security, dispute, or other legitimate reason to retain it, we may delete, anonymize, or otherwise securely dispose of it.

Deleting an account does not necessarily mean that every associated record can be immediately erased where retention is required or permitted by applicable law.

Information Security

We take reasonable steps designed to protect personal information against unauthorized access, alteration, disclosure, misuse, or destruction.

Depending on the system involved, safeguards may include authentication controls, access restrictions, encrypted connections, secure service providers, limited administrative access, and security monitoring.

However, no internet transmission, database, website, or electronic storage system can be guaranteed to be completely secure. You should use strong, unique passwords and avoid sharing your account credentials with others.

If we become aware of a personal-data security incident that requires notification under applicable law, we will take the steps required by the applicable legal framework.

Children and Minors

Our Services are intended to be used by persons who are legally capable of entering into applicable agreements and transactions.

We do not knowingly permit children under 18 to independently create or operate customer accounts. Where a minor's purchase or use of our products is involved, the transaction should be made or supervised by a parent or lawful guardian where required.

Where applicable law requires verifiable parental consent or imposes additional protections for processing children's personal data, we will comply with those requirements.

If you believe that we have collected personal information from a child in circumstances where we should not have done so, please contact us so that we can review the matter and take appropriate action.

Your Privacy Rights

Subject to applicable law and any applicable conditions or exceptions, you may have rights regarding your personal information, including:

• Requesting access to personal information processed about you.
• Requesting correction of inaccurate or incomplete information.
• Requesting deletion or erasure where applicable.
• Withdrawing consent where processing is based on consent.
• Raising a grievance concerning our processing of personal data.
• Exercising other rights available under applicable data-protection law.

Some requests may require us to verify that the person making the request is the relevant individual or is authorized to act on that individual's behalf.

We may retain information where retention is required or permitted by law, or where reasonably necessary for security, fraud prevention, dispute resolution, legal compliance, or other legitimate purposes.

To exercise an applicable privacy right, contact us using the details in Section 16.

Complaints and Grievances

If you have a concern about how your personal information has been handled, we encourage you to contact us first so that we can investigate and attempt to resolve the issue.

Your communication should include enough information for us to understand the concern, while avoiding unnecessary sensitive information.

We will handle privacy-related grievances in accordance with applicable law and the procedures applicable to our Services.

Third-Party Websites and Services

Our Services may contain links to websites, payment services, social networks, delivery services, or other third-party platforms.

We are not responsible for the privacy practices, security, content, or policies of third-party services that we do not control.

Before submitting information to a third-party service, you should review its applicable privacy policy and terms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date displayed at the beginning of the policy.

If we make a material change that requires additional notice under applicable law, we will provide notice through an appropriate method.

We encourage customers to periodically review this page to remain informed about how Vandals Fashion handles personal information.

Contact Information

If you have questions, requests, complaints, or concerns about this Privacy Policy or the handling of your personal information, contact us: