Privacy Policy
How Shree Banarasi Sarees collects, uses, safeguards, and respects your personal information under applicable Indian data protection laws.
Shree Banarasi Sarees ("we", "our", or "us"), operating our physical showroom at Rudauli Chowk, Harpur Aloth, Samastipur, Bihar – 848103, and our online storefront at shreebanarasisarees.in, is deeply dedicated to preserving the privacy and data security of our patrons.
This Privacy Policy governs the collection, storage, processing, transfer, and disclosure of personal data gathered when you browse our website, interact with our customer support channels, or purchase sarees through our storefront. It complies with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection (DPDP) Act, 2023 framework.
1. Personal Information We Collect
Depending on how you engage with our store, we collect only necessary and proportionate categories of information:
A. Contact & Identity Information
- Full name and preferred salutation
- Primary mobile telephone number
- Email address
- Account login identifiers (via secure Google OAuth authentication)
B. Delivery & Billing Addresses
- Complete shipping address (building, street, landmark)
- City, State, and 6-digit postal PIN code
- Delivery instructions and recipient contact details
C. Transaction & Order History
- Sarees ordered, SKU codes, color, fabric, and quantities
- Order timestamps and invoice totals
- Chosen payment method (e.g. Cash on Delivery)
- Return, replacement, and refund audit history
D. Technical, Device & Analytics Data
- IP address and approximate geographic location (city level)
- Browser type, operating system, and device screen resolution
- Page visits, time spent, and referring URLs
- Cookies and local session storage records
Important Note on Payment Card Data:
Shree Banarasi Sarees does NOT collect, capture, or store payment card details (credit or debit card numbers, expiration dates, or CVV security codes). All digital card entries occur on authorized PCI-DSS certified third-party payment gateways.
2. Purpose of Information Processing
We process your personal information strictly for legitimate commercial and operational purposes:
- Order Fulfillment: Processing your saree purchase, packaging the items at our Samastipur showroom, and assigning local riders or national couriers.
- Delivery Coordination: Sharing recipient name, contact number, and address with assigned courier partners for physical delivery and live tracking.
- Transactional Communications: Sending order confirmations, dispatch updates, invoice PDFs, and delivery status alerts via SMS, WhatsApp, and email.
- Customer Service: Responding to sizing queries, blouse tailoring requests, return inspections, and warranty questions.
- Fraud Detection & Security: Preventing automated bot attacks, unauthorized account takeovers, and fraudulent Cash on Delivery orders.
- Website Improvement & Analytics: Analyzing aggregated user navigation metrics via Google Analytics and Microsoft Clarity to optimize load times and page ergonomics.
- Legal Compliance: Complying with GST invoicing requirements, tax audits, and lawful statutory disclosures.
3. Information Sharing & Third-Party Providers
We do not sell, rent, trade, or monetize your personal information to third-party advertisers. Information is disclosed strictly on a need-to-know basis to trusted operational partners who are bound by stringent confidentiality agreements:
- Logistics & Courier Partners: India Post (SpeedPost), BlueDart, Delhivery, and local express delivery personnel for parcel transportation.
- Cloud Infrastructure & Database Hosting: Supabase and Cloudflare for encrypted data storage, authentication tokens, and content distribution.
- Analytics & Performance Tools: Google Analytics (aggregated traffic statistics) and Microsoft Clarity (session ergonomics).
- Communication & Authentication Providers: Authentication and messaging providers (e.g. Google OAuth, Resend) to manage secure sign-in and deliver transactional order alerts.
- Legal & Law Enforcement Authorities: Where mandated by a valid judicial warrant, court order, or statutory enforcement directive under Indian law.
4. Data Security & Retention
Security Measures: We employ industry-standard administrative, physical, and technical safeguards. All data transmitted between your browser and our servers is encrypted using 256-bit SSL/TLS encryption. Sensitive access tokens are hashed and stored securely.
Data Retention: We retain customer personal data only as long as necessary to fulfill the purposes outlined in this policy, manage customer accounts, handle return/warranty windows, and comply with statutory legal and GST accounting obligations (typically 7 years for tax audit records). Non-identifiable analytics data may be retained in anonymized aggregate formats.
5. Your Privacy Rights Under Indian Law
Under the Digital Personal Data Protection Act, 2023 and applicable regulations, you enjoy the following rights:
- Right to Access: You may request a summary of the personal data held about you.
- Right to Correction: You may edit or update inaccurate addresses or contact numbers anytime in your "My Account" profile.
- Right to Erasure / Deletion: You may request the deletion of your customer profile, subject to statutory tax retention requirements.
- Right to Withdraw Consent: You may opt out of non-essential promotional communications at any time.
6. Protection of Children's Information
Our website is intended for use by individuals who have attained the age of majority (18 years) in India. We do not knowingly collect personal data from minors without parental or legal guardian consent. If a parent or guardian discovers that a minor has submitted personal data without authorization, please contact us for immediate deletion.
7. Data Incident & Breach Protocol
In the event of a security breach affecting personal data, Shree Banarasi Sarees maintains an incident response protocol to investigate, contain the vulnerability, notify affected users without undue delay, and report to the Indian Computer Emergency Response Team (CERT-In) in accordance with applicable cybersecurity directives.
8. Grievance Redressal & Privacy Officer
In compliance with the Information Technology Act, 2000 and the DPDP framework, you may direct any privacy concerns, data rectification requests, or statutory grievances to our appointed Grievance Officer:
Name: Rajeev kumar sharma
Designation: Grievance Officer
Business: Shree Banarasi Sarees
Physical Address: Rudauli Chowk, Harpur Aloth, Samastipur, Bihar – 848103, India
Email: shreebanarasi180@gmail.com
Phone: +91 62039 09946
Response Timeline: Acknowledged within 48 hours; resolved within 30 days.
Have Questions About This Policy or an Order?
Our customer desk at our Samastipur showroom is available daily from 10:00 AM to 9:00 PM IST.