This document represents a structural template in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000. Configurable parameters must be finalized prior to public launch.
Privacy & Data Protection Policy
Last Updated: September 2026 · Applicable to Indian Jurisdiction
1. Data Fiduciary Identity
This website is operated by [CONFIGURE: LEGAL BUSINESS NAME] (“Weatherby & Vane”, “we”, “us”, or “our”), acting as Data Fiduciary under the Digital Personal Data Protection Act, 2023.
Registered Entity: [CONFIGURE: LEGAL BUSINESS NAME]
CIN: [CONFIGURE: CIN / COMPANY IDENTIFICATION NUMBER]
Registered Office: [CONFIGURE: REGISTERED BUSINESS ADDRESS]
GSTIN: [CONFIGURE: GST NUMBER]
PAN: [CONFIGURE: PAN]
2. Personal Data We Collect
We collect digital personal data solely for specified, lawful purposes necessary to fulfill your orders and enhance your atelier experience:
- Contact & Identity Data: Name, phone number (+91), email address, delivery address, and pincode.
- Transaction Data: Razorpay order identification tokens, transaction statuses, and itemized invoice details. (We do not store complete payment card credentials or UPI PINs on our servers).
- Technical Data: IP address, device telemetry, browser type, and navigation timestamps for security audits and fraud mitigation.
3. Processing Grounds & Consent
We process personal data on grounds of explicit user consent provided at the time of account registration, newsletter inquiry, or checkout initiation, as well as for the legitimate purpose of fulfilling commercial contracts (dispatching garments).
4. Data Sharing & Third-Party Services
We do not monetize, rent, or sell your personal information. We transmit requisite subsets of data strictly to authorized service providers:
- Payment Processing: Razorpay Software Private Limited (RBI-regulated payment aggregator).
- Logistics Partners: [CONFIGURE: COURIER PARTNER NAMES] (strictly delivery address and phone number for delivery coordination).
- Cloud Infrastructure: Google Cloud Platform / Firebase (encrypted storage and authentication services).
5. Grievance Redressal & Data Protection Officer
In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, you may address inquiries, withdraw consent, or file grievances with our designated officer:
Designated Officer: [CONFIGURE: DATA PROTECTION OFFICER NAME]
Email: [CONFIGURE: DATA PROTECTION OFFICER EMAIL]
Atelier Redressal Hours: Monday – Friday (10:00 AM – 6:00 PM IST)