Privacy Policy

01About this policy

This Privacy Policy explains how Aquadoir India ([LEGAL NAME OF THE INDIAN BUSINESS]), [REGISTERED ADDRESS], Ahmedabad, Gujarat, India ("we", "us"), collects, uses, shares and protects your personal data when you visit aquadoir.com from India, place an order for delivery in India, sign up for our emails or contact us. For this data we are the Data Fiduciary and you are the Data Principal.

Today, how we handle your data is governed by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. We have also written this policy to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, most of whose duties come into force on 13 May 2027, and the Consumer Protection (E-Commerce) Rules, 2020.

If you live in the United Kingdom, our UK Privacy Policy applies, and anywhere else outside India our Global Privacy Policy. Please read this policy with our Terms of Use and Cookies Policy.

02The information we collect

We collect only what we need to sell you clothing, deliver it and look after you afterwards.

An account is optional: you can always order as a guest. If you create one, your password is stored only in a protected (hashed) form that no one at Aquadoir can read (see Your account). We do not ask for, and you should not send us, sensitive information such as health or biometric data, or government identity numbers. We do not need them to process your order.

03Your account

An account is optional; you can always order as a guest. If you create one, we keep the account details listed above together with the orders linked to it: those you place while signed in, and earlier orders placed with the same email address once you have confirmed that address is yours.

• What it is for: signing you in, showing your orders and where they are, filling in checkout with your saved addresses, and keeping your saved pieces on every device you sign in to.
• Emails about your account: a code to confirm your email address when you create the account or change it, a code if you reset your password, and a note whenever your password or email address changes or the account is deleted. These are service emails, not marketing.
• Keeping it safe: your password is stored only in a protected (hashed) form; signing in keeps one secure cookie on your device (see our Cookies Policy); after five wrong passwords, signing in with that email pauses for 15 minutes; and changing your password signs you out on your other devices.
• Where it is held: on our store system (WooCommerce, on panel-aqdo.aquadoir.com), with your orders.
• Your control: you can see and change your details, addresses, saved pieces and newsletter choice, sign out of every device, or delete the account at any time in My Account. Deleting it removes the account, your saved addresses and saved pieces straight away; records of past orders are kept as described in How long we keep it.

We use these details to provide the account you asked for (Section 7(a) of the Digital Personal Data Protection Act, 2023), and you can withdraw by deleting the account at any time.

04How we use your information

We use your personal data only for the purposes below, and will not use it for a new, unrelated purpose without telling you first and, where needed, asking for your consent.

• To process your order: confirming it, checking prices and stock, issuing your tax invoice and collecting payment.
• To deliver your order: sharing your name, phone number and address with the courier, showing delivery options for your address, and sending tracking updates.
• To look after you: answering questions, arranging pickups for returns and exchanges, issuing refunds, and handling complaints and grievances.
• To prevent fraud and misuse: confirming Cash on Delivery orders in Ahmedabad, spotting fake or abusive orders, and protecting our customers, couriers and business.
• To run the website: showing prices in your currency and the right version of our policies, based on your country.
• To meet legal obligations: keeping accounting and GST records, responding to lawful requests, and enforcing our Terms of Use.
• To send your receipt and tracking details on WhatsApp: only if you tick the box at checkout. We send them from our WhatsApp Business account, one message at a time, never for marketing.
• To run your account, if you create one: signing you in, showing your orders, and keeping your saved addresses and saved pieces (see Your account).
• To send you our news and new releases: only if you have signed up. You can stop at any time (see Marketing emails).
• To improve what we make: looking at overall trends, such as popular sizes and common reasons for returns, without identifying you.

05Why we are allowed to use it

• For a purpose you gave it to us for: when you give us your details to place an order, ask a question or request a return, we use them for that purpose (Section 7(a) of the Digital Personal Data Protection Act, 2023).
• Consent: for our newsletter and any other optional use, we ask for your clear, specific consent. You can withdraw it as easily as you gave it; this does not affect anything we did before.
• Legal obligations: where a law requires us to keep or share data, such as GST, accounting and tax laws, or a lawful order from a court or authority.

If you give us a bank account or UPI ID for a Cash on Delivery refund, you consent to us using it only to send and reconcile that refund.

06Cookies and on-device storage

Our own pages set no cookies, except one that keeps you signed in if you use an account. They run no advertising or analytics tools, and keep your bag, saved pieces and currency in your browser's own storage on your device. Some content from other services, and the secure payment page, may set their own cookies. All of this, and how to control it, is explained in our Cookies Policy.

07Who we share it with

We never sell, rent or trade your personal data, and we do not use it for advertising. Each provider receives only what it needs, and is bound by contract or by its own legal duties to protect it. If our business is ever sold or restructured, your data may pass to the new owner, who must honour this policy; we will tell you before that happens.

08Where your data is processed

Our team is in India and handles your order here. Some of our service providers, such as website hosting, location lookup, fonts and Instagram, process data on servers outside India, and if a piece for your order is sent from our UK studio, your order details go to Aquadoir UK in the United Kingdom. We transfer personal data outside India only as Indian law allows, and never to a country the Central Government has restricted.

09How long we keep it

If the law requires us to keep data for longer, or it is needed for a dispute or investigation, we keep it only for that purpose and only as long as necessary. After that, we delete it or make it anonymous.

10How we protect it

We protect your personal data with security measures appropriate to the data we hold, including:

• encrypted (HTTPS) connections for every page and every order;
• the keys that connect our website to our order system stay on our server and are never sent to your browser;
• prices, stock and delivery charges are checked again on our server when you order, so an order cannot be changed in your browser;
• online payments are handled entirely by Razorpay, so card and banking details never reach our systems;
• account passwords are stored only in a protected (hashed) form, signing in pauses after repeated wrong passwords, and the sign-in cookie cannot be read by scripts on the page;
• access to order data is limited to the people who need it to serve you.

No way of sending or storing data online is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will tell you without undue delay what happened, what it may mean for you, what we are doing about it and what you can do, and we will report it to CERT-In and the Data Protection Board of India as the law requires. You can also report fraud to the National Cyber Crime helpline 1930 or cybercrime.gov.in.

11Your rights

You can ask us to:

• Access a summary of the personal data we hold about you, what we do with it and who we have shared it with;
• Correct, complete or update your data;
• Erase your data once it is no longer needed for the purpose it was collected, unless the law requires us to keep it (for example, invoices);
• Withdraw consent you have given, such as for our newsletter, at any time;
• Resolve a grievance through our Grievance Officer, within the times below;
• Nominate another person to exercise these rights for you if you die or become unable to.

We offer all of these rights now, ahead of the Digital Personal Data Protection Act's rights coming into force.

How to use your rights

If you have an account, you can see and correct your details, and delete the account, yourself at any time in My Account.

Email care@aquadoir.com with the subject "Privacy request", from the email address you used for your order, and include your order number if you have one. We may ask you to confirm your identity first, to protect your data from anyone pretending to be you. Using your rights is free.

We acknowledge every request within 48 hours and respond in full within 30 days. If we cannot do what you ask, for example because the law requires us to keep the data, we will explain why. If you are not satisfied, raise it with our Grievance Officer; once the relevant provisions are in force, you can then complain to the Data Protection Board of India.

12Children

Our website and products are meant for adults. Under Indian law, anyone under 18 is a child. If you are under 18, please ask a parent or legal guardian to place the order for you. We do not knowingly collect personal data from children without verifiable consent from a parent or guardian, and we never track, profile or target advertising at children. If you believe a child has given us personal data without a parent's consent, email us and we will delete it.

13Marketing emails

We send news and new releases by email only if you sign up through the newsletter form on our website, where you give your title, name, country and email address and tick the consent box. Every marketing email has an unsubscribe link, or you can email us to stop them. We do not send marketing SMS or calls; if we ever do, we will respect your Do Not Disturb (DND) preferences under TRAI rules.

Even if you unsubscribe, we will still send messages about your orders, such as confirmations, delivery updates and replies about returns and refunds.

14Links to other websites

Our website links to other sites and services, such as Instagram, WhatsApp, Razorpay and courier tracking pages. Their privacy practices are their own and are not covered by this policy, so please read their privacy policies before sharing personal data with them.

15Changes to this policy

We may update this policy when our services or the law change. The "Last updated" date at the top shows the latest version. If we make a significant change to how we use your personal data, we will tell you by email (if we have your address) or with a clear notice on our website before it takes effect, and ask for fresh consent where required.

16Contact and Grievance Officer

For any question, request or complaint about your personal data, contact our Grievance Officer. We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.

SELLER

Aquadoir India ([LEGAL NAME OF THE INDIAN BUSINESS])

REGISTERED ADDRESS

[REGISTERED ADDRESS], Ahmedabad, Gujarat, India

GSTIN

[GSTIN]

CUSTOMER CARE

care@aquadoir.com
+91 6353731518

GRIEVANCE OFFICER

Parth Darji, Grievance Officer
parthdarji@aquadoir.com (subject: "Grievance")

RESPONSE TIMES

Acknowledged within 48 hours. Resolved within one month.