Privacy Policy

1. Data Fiduciary Information

As per the Digital Personal Data Protection Act, 2023 (DPDP Act), Temptation Thread is the Data Fiduciary responsible for processing your personal data.

2. What Personal Data We Collect

2.1 Data You Provide Directly

• Full name, email address, phone number
• Delivery address (street, city, state, pincode)
• Order and payment history (not card details)
• Account credentials via Google OAuth (name, email, profile picture)
• Newsletter subscription email

2.2 Data Collected Automatically

• IP address, browser type, device type
• Pages visited, time on site, referral URL
• Cookies and local storage data (see Section 7)

3. How We Use Your Data (Purpose of Processing)

As required under the DPDP Act 2023, we only process your data for the following lawful purposes:

• Order Fulfillment: Processing, shipping, and delivering your orders
• Customer Support: Responding to queries, complaints, and returns
• Payment Processing: Securely processing transactions via Razorpay
• Logistics: Sharing shipping details with Shiprocket for delivery
• Account Management: Enabling login, autofill, and order tracking
• Marketing (with consent): Sending collection drops and offers if you subscribe
• Legal Compliance: Complying with applicable Indian laws

We never sell your personal data to third parties for their own marketing purposes.

4. Third-Party Data Processors

We share your data with the following trusted service providers (Data Processors) strictly for the purposes described above:

Cross-Border Transfer Disclosure: Some of our processors (Supabase, Vercel, Google) process data outside India. These transfers are governed by their respective data protection frameworks and Standard Contractual Clauses.

5. Data Retention

• Order data: Retained for 7 years (as required by Indian tax/GST laws)
• Account data: Retained until account deletion is requested
• Marketing preferences: Retained until you unsubscribe
• Server/access logs: Retained for 90 days

6. Your Rights under DPDP Act 2023

As a Data Principal (user) under the DPDP Act 2023, you have the following rights:

• Right of Access: Request a summary of personal data we hold about you
• Right to Correction: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Grievance Redressal: File a complaint with our Grievance Officer
• Right to Nominate: Nominate an individual to exercise rights on your behalf
• Right to Withdraw Consent: Withdraw marketing consent at any time

To exercise any of these rights, contact us at contact@temptationthread.com. We will respond within 30 days.

7. Cookies & Tracking

We use cookies and browser local storage to enhance your experience. These include:

• Essential Cookies: Required for cart functionality, authentication sessions
• Preference Cookies: Remembering your theme (dark/light mode)
• Analytics Cookies: Understanding site usage (anonymous)

You can manage or disable cookies through your browser settings. Essential cookies cannot be disabled without affecting site functionality.

8. Data Security

We implement industry-standard security measures to protect your personal data, including:

• HTTPS/TLS encryption for all data in transit
• Encrypted database storage via Supabase
• PCI-DSS compliant payment processing via Razorpay (we do not store card data)
• HTTP security headers (CSP, HSTS, X-Frame-Options)
• Access control and role-based permissions

9. Children's Privacy

Our platform is not intended for children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately for deletion.

10. Grievance Officer

As mandated under the IT Act, 2000 and DPDP Act, 2023, we have designated a Grievance Officer:

11. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised date. We encourage you to review this page regularly. Continued use of our platform after changes constitutes acceptance of the updated policy.