Privacy Policy

Vami Clubwear (“we”, “us”, “our”) operates the website vamiclubwear.in and a physical store in Manjeri, Malappuram, Kerala, India. This policy explains what personal data we collect, why we collect it, how we use and store it, and the rights you have over it. We follow the requirements of India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

• Account & identity: name, email address, profile picture (when you sign in with Google).
• Order & delivery: phone number, delivery address, pincode, city, state, order notes.
• Payment: we do not store card numbers, UPI IDs, or net-banking credentials. Payments are processed by Razorpay; we receive only a payment ID and status.
• Usage: pages visited, items viewed, basic device and browser information, cookies needed for the cart, sign-in session and basic analytics.

2. How we use your data

• Process, fulfil and ship your orders, including handover to courier partners.
• Communicate order status, delivery updates and replies to your queries by email, SMS or WhatsApp.
• Issue invoices and meet our tax and accounting obligations.
• Prevent fraud, abuse and chargebacks.
• Improve the website — understand which products and pages are popular.

We do not sell your personal data. We do not use it for advertising profiling beyond the basic analytics needed to keep the site working.

3. Who we share data with

We share the minimum data required with the following processors so we can deliver your order:

• Razorpay — payment processing.
• Courier partners (e.g. Delhivery, India Post, Shiprocket) — name, phone, address, pincode for shipping.
• Google — only your basic profile (name, email, picture) when you choose to sign in with Google.
• WhatsApp Business — phone number when you message us via WhatsApp.

We may disclose data when required to comply with Indian law, a court order or a lawful request from a government authority.

4. How long we keep it

Order, invoice and tax records are kept for the period required by Indian tax law (currently up to 8 years). Account data is kept while your account is active and is deleted (or anonymised) within 90 days of you asking us to close it.

5. Cookies

We use a small number of essential cookies and browser-storage entries to remember your cart, your sign-in session and your saved delivery address. These cannot be disabled without breaking core checkout functionality.

6. Your rights under the DPDP Act

You have the right to:

• Access the personal data we hold about you.
• Request that we correct, complete or update inaccurate data.
• Request that we erase your data (subject to legal retention obligations).
• Withdraw your consent for any processing that is based on consent.
• Nominate another person to exercise these rights on your behalf.
• File a grievance with us — we will respond within a reasonable time.

To exercise any of these rights, write to us at the contact address below.

7. Children

Our products are intended for adult shoppers. We do not knowingly collect personal data from anyone under 18. If you believe a minor has shared data with us, please contact us and we will delete it.

8. Security

The website is served over HTTPS. Passwords are not stored — sign-in is delegated to Google OAuth. Database access is restricted to authorised staff. We follow industry practice to protect your data, but no internet service can be guaranteed 100% secure.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change. Material changes will be communicated by email or via a notice on the site.

10. Contact & grievance officer