Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how RIWAAZ ("we", "us", "our") collects, uses, stores, shares and protects your personal information when you visit or shop on our website. We follow the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020. By using this website you agree to the practices described here.

1. Information we collect

We collect only the information needed to run the store and fulfil your orders:

Account information: your name, email address, mobile number, and optionally your gender and date of birth, which you provide when you create an account or update your profile.
Delivery information: the recipient name, phone number, full postal address and PIN code you save in your address book or enter at checkout.
Order information: the items you buy, order value, coupons applied, order history and returns or exchange requests.
Payment information: we do not collect or store your card number, CVV, UPI PIN, net-banking password or any other payment credential. All prepaid payments are processed on the secure servers of our payment gateway, Razorpay. We receive only a transaction reference, the amount, and whether the payment succeeded or failed.
Content you submit: product reviews, ratings, review photographs, contact-form messages and newsletter subscriptions.
Technical information: IP address, browser and device type, pages viewed and approximate location derived from your IP address, collected through cookies and server logs.

2. How we use your information

To create and secure your account and to authenticate you when you sign in.
To process, pack, ship and deliver your orders, and to handle cancellations, returns, exchanges and refunds.
To send transactional communication - order confirmation, dispatch and tracking updates, delivery confirmation, and return or refund status.
To respond to your enquiries and provide customer support.
To display your approved reviews alongside the product you purchased.
To detect and prevent fraud, misuse and abuse of promotional offers.
To improve our products, sizing guidance, site performance and customer experience.
To send marketing communication such as new-collection announcements and offers, only where you have subscribed. You can unsubscribe at any time using the link in every marketing email.

3. Cookies

We use cookies and similar technologies for essential functions such as keeping you signed in, remembering your cart between visits, and maintaining your recently viewed items. We may also use analytics cookies to understand how the site is used in aggregate. You can block or delete cookies in your browser settings; if you block essential cookies, sign-in and checkout will not work.

4. Sharing your information

We do not sell, rent or trade your personal information. We share it only with the service providers required to complete your order, and only to the extent necessary:

Payment gateway (Razorpay Software Private Limited): to process prepaid payments and refunds.
Logistics partner (Shiprocket / its courier partners): your name, delivery address, PIN code and phone number, so your parcel can be delivered and you can be contacted by the delivery executive.
Communication providers: to deliver transactional email and SMS.
Hosting and infrastructure providers: who store the data on our behalf under contractual confidentiality obligations.
Law enforcement or regulators: where disclosure is required by law, court order or a lawful government request.

5. Data retention

We retain your account and order records for as long as your account remains active, and thereafter for the period required under applicable tax, accounting and consumer-protection law. Invoice and transaction records are generally retained for eight financial years. You may ask us to delete your account at any time; we will delete or irreversibly anonymise your personal data except where we are legally required to retain it.

6. Your rights

You may at any time:

Access the personal information we hold about you.
Correct or update your profile, phone number and saved addresses from your account.
Withdraw consent for marketing communication.
Request deletion of your account and associated personal data.

To exercise any of these rights, write to us at the email address given below. We will respond within thirty days.

7. Security

The site is served over HTTPS. Passwords are stored only as salted hashes and are never visible to us. Access to customer data is restricted to authorised personnel, database access is protected by row-level security rules, and payment credentials never touch our servers. No method of transmission over the internet is perfectly secure; while we take reasonable measures aligned with accepted security practices, we cannot guarantee absolute security.

8. Children

This website is not intended for persons under the age of 18. We do not knowingly collect personal information from children. A minor may use the site only under the supervision of a parent or legal guardian.

9. Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new "Last updated" date. Material changes will be notified to registered customers by email.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the contact details of our Grievance Officer are:

Name: [Grievance Officer name]
Email: [grievance email address]
Address: [registered store address]
Response time: acknowledgement within 48 hours, resolution within one month of receipt.