Privacy policy

Privacy Policy

Rag Clothing ("Rag Clothing", "Company", "we", "our", or "us") is committed to protecting your personal data in accordance with:

  • The Information Technology Act, 2000

  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

  • The Digital Personal Data Protection Act, 2023 (DPDP Act)

By accessing RagClothing.in, our Shopify store, mobile interfaces, social media channels, or purchasing from us, you agree to this Privacy Policy.

1. Role of the Company

Under the DPDP Act, Rag Clothing acts as a Data Fiduciary, meaning we determine the purpose and means of processing your personal data.

2. Personal Data We Collect

We collect only the information necessary for lawful business purposes.

A. Identity & Contact Data

  • Name

  • Email address

  • Mobile number

  • Billing address

  • Shipping address

B. Transaction Data

  • Order history

  • Payment transaction reference details

  • Refund and return information

C. Account Data

  • Username

  • Encrypted password

D. Technical Data

  • IP address

  • Browser type

  • Device information

  • Cookies and analytics data

We do not knowingly collect personal data from children below 18 years of age.

3. Purpose of Processing

We process personal data for:

  • Order fulfillment

  • Customer support

  • Account management

  • Marketing and promotional campaigns

  • Fraud prevention and security monitoring

  • Legal and regulatory compliance

  • Improving website performance and user experience

  • Sending order updates and service communications

Personal data will not be processed for purposes other than those stated above unless required by law or with your explicit consent.

4. Consent

Consent under the DPDP Act must be:

  • Free

  • Specific

  • Informed

  • Unconditional

  • Unambiguous

  • Given through clear affirmative action

By creating an account, placing an order, subscribing to our communications, or clicking "I Agree," you provide consent for processing your personal data for the specified purposes.

You have the right to:

  • Withdraw consent at any time

  • Request correction of data

  • Request erasure of data

  • Access information regarding data processing

To exercise these rights, contact us at:

Email: care@ragclothing.in

Withdrawal of consent will not affect processing carried out before the withdrawal.

5. Data Principal Rights

Under the DPDP Act, you have the following rights:

Right to Access Information

You may request:

  • A summary of personal data being processed

  • Information regarding processing activities

  • Details of third-party processors involved

Right to Correction and Erasure

Users may request correction or deletion of personal data.

Process:

Submit a Request
Send an email to care@ragclothing.in.

Provide Details
Include your name, registered email/mobile number, and details of the information to be corrected or deleted.

Verification
We may verify your identity before processing the request.

Processing
After verification, appropriate action will be taken.

Timeline
Requests will be responded to within 15 working days.

Exceptions
Certain information may be retained where required by law, taxation, accounting, fraud prevention, or dispute resolution requirements.

Right to Grievance Redressal

Users may raise concerns regarding the collection, storage, or processing of personal data.

Process:

  • Submit your grievance through email.

  • Provide your name, contact information, and details of the issue.

  • We will acknowledge the complaint within 3–5 working days.

  • We aim to resolve complaints within 15 working days.

Right to Nominate

You may nominate another individual to exercise your rights in the event of death or incapacity.

6. Children's Data

We do not knowingly process personal data of individuals below 18 years of age.

If such information comes to our attention, it will be deleted promptly.

No behavioral tracking or targeted advertising is knowingly conducted toward minors.

7. Data Security Safeguards

We implement reasonable security measures including:

  • SSL encryption

  • Secure payment gateway integration

  • Restricted access controls

  • Vendor confidentiality obligations

  • Regular security reviews and monitoring

In the event of a data breach, we will take actions required under applicable law, including notifications where legally required.

8. Data Retention

We retain personal data only as long as necessary for:

  • Order fulfillment

  • Customer service

  • Tax, accounting, and legal compliance

  • Fraud prevention

  • Dispute resolution

Data that is no longer required will be securely deleted or anonymized.

9. Sharing of Personal Data

We may share limited personal data with trusted service providers including:

  • Payment gateway providers

  • Shipping and logistics partners

  • Shopify and cloud hosting providers

  • IT and website support providers

  • Legal, audit, and compliance professionals

  • Government and regulatory authorities when legally required

All third parties are contractually required to maintain confidentiality and protect personal data.

10. Cross-Border Data Transfers

Personal data may be processed outside India through Shopify, cloud service providers, or related infrastructure.

Such transfers will comply with applicable Indian data protection laws.

11. Non-Personal Information

We may collect anonymous and aggregated information regarding:

  • Website traffic

  • Product popularity

  • Customer behavior trends

  • Sales performance

This information does not identify individual users and is used to improve our services.

12. Cookies

We use cookies and similar technologies to:

  • Recognize returning visitors

  • Improve website functionality

  • Analyze website traffic

  • Personalize user experiences

Cookies may collect information such as IP address, browser type, device information, and browsing activity on our website.

Users may disable cookies through browser settings, although some website features may not function properly.

13. Deletion of Transaction Data

Certain transaction records may be retained for accounting, tax, legal, and fraud prevention purposes.

Any personal data not required for these purposes may be deleted upon verified request.

14. Confirmation of Data Deletion

Upon successful deletion of personal data, Rag Clothing may provide confirmation via email or another agreed communication method.

15. Data Backup and Recovery

Website and business data are periodically backed up for security and disaster recovery purposes.

Deleted data may remain in secure backup systems for a limited period before being permanently overwritten.

16. Changes to this Privacy Policy

Rag Clothing reserves the right to update this Privacy Policy at any time.

Any updates will be posted on this page and become effective immediately upon publication.

For any questions regarding this Privacy Policy or your personal data, contact:

Email: care@ragclothing.in

Website: https://www.ragclothing.in