Privacy policy

At Fatakha, we respect your privacy and are committed to protecting your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and other applicable Indian laws. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website, shop with us, or interact with our services. By using our store, you consent to the practices described here.

1. Information We Collect

We collect the following categories of personal data:

  • Personal Identifiers: Name, email address, phone number, shipping and billing address, date of birth (optional).
  • Account & Order Information: Username/password (if you create an account), order history, payment details (processed securely by third-party gateways), and preferences.
  • Technical & Usage Data: IP address, browser type, device information, pages visited, time spent on site, and cookies/tracking data.
  • Other Information: Any data you voluntarily provide through reviews, customer support chats, newsletters, or surveys.

We only collect what is necessary for the purposes outlined below.

2. How We Use Your Information

We process your personal data only with your consent or for legitimate purposes permitted under the DPDP Act. We use it to:

  • Process and fulfill your orders, including shipping and payments.
  • Communicate with you about orders, updates, and customer service.
  • Improve our website, products, and services through analytics.
  • Send marketing communications (only with your explicit consent).
  • Comply with legal obligations, prevent fraud, and ensure site security.
  • Personalize your shopping experience.

We do not use your data for any purpose incompatible with what we disclosed at the time of collection.

3. Cookies and Similar Technologies

We use cookies and similar tracking technologies (such as pixels and web beacons) to:

  • Enable essential site functions (cart, login, checkout).
  • Analyze site traffic and improve user experience (via tools like Google Analytics).
  • Deliver personalized content and advertisements (with consent).

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect site functionality. For details, see our separate Cookie Policy (if applicable).

4. Third-Party Services

We may share your personal data with trusted third parties who help us operate our store, including:

  • Payment Gateways (e.g., Razorpay, Stripe) for secure transactions.
  • Shipping & Logistics Partners for order delivery.
  • Analytics & Marketing Tools (Google Analytics, email service providers).
  • Shopify (our e-commerce platform) and other service providers.

These third parties are contractually obligated to protect your data and use it only for the services they provide to us. We do not sell your personal data to third parties for their own marketing purposes. Any international transfers comply with applicable Indian laws.

5. Data Security

We implement reasonable security safeguards as required under Section 8 of the DPDP Act, including:

  • Encryption of sensitive data (SSL/TLS).
  • Secure servers and access controls.
  • Regular security audits and updates.

While we strive to protect your information, no system is completely secure. In the event of a personal data breach, we will notify you and the Data Protection Board of India as required by law.

6. Your Rights (Data Principal Rights)

Under the DPDP Act, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Correction: Ask us to correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data (subject to legal retention requirements).
  • Right to Withdraw Consent: Withdraw consent for processing at any time (this may affect your ability to use certain services).
  • Right to Grievance Redressal: File a complaint with our designated grievance officer.
  • Right to Nominate: Nominate another person to exercise your rights in case of your death or incapacity.

To exercise any of these rights, contact us using the details below. We will respond within the timelines prescribed by law.

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by law (e.g., for tax, accounting, or legal compliance). Inactive accounts and associated data are typically retained for up to 3 years after your last interaction, after which we may delete or anonymize it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted here with an updated effective date. We encourage you to review this page periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: [EMAIL ADDRESS] Address: [BUSINESS ADDRESS] Grievance Officer: [Name & Contact Details – to be added]

We are committed to resolving your concerns promptly and transparently.

Thank you for trusting Fatakha with your personal information. Your privacy matters to us. ❤️