Privacy Policy

Last updated: September 2026

Dharsan Dresses ("we", "us", "our") operates dharsangroups.com and the physical store at Yadava Street, Varadaraja Nagar, Tirupati, Andhra Pradesh. This policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have over it. We comply with India's Digital Personal Data Protection Act 2023 (DPDP).

1. Information we collect

• Identity & contact: name, email address, phone number, shipping & billing address.
• Order data: products viewed, items purchased, order history, returns, reviews.
• Payment data: processed by Razorpay (PCI DSS Level 1). We never store full card numbers, CVV, or UPI PINs.
• Account data: hashed password, login timestamps, IP address of last login.
• Device & browsing: browser type, device type, pages visited, referrer URL, anonymised IP for analytics.
• Optional: measurements you provide for custom stitching, photos you upload to reviews.

2. Why we use it

• To fulfil your orders, ship items, and process returns/refunds.
• To respond to customer support enquiries.
• To send transactional messages (order confirmation, shipping updates, invoices) by email, SMS, or WhatsApp.
• To send marketing offers — only if you opted in. You can opt out anytime.
• To improve the website, detect fraud, and meet legal/tax obligations (GST, income tax).

3. Who we share it with

We share the minimum data necessary with:

• Razorpay — for payment processing.
• Delhivery / shipping partners — for delivery; they receive name, phone, address.
• Google (Analytics & OAuth login) — anonymised usage metrics; full Google account data only if you choose Sign in with Google.
• Tax authorities — when required by Indian law (GST returns, income tax).
• We do not sell your data to advertisers or third-party data brokers. Ever.

4. How we protect it

• All traffic over HTTPS with TLS 1.3.
• Passwords hashed with industry-standard one-way functions; we cannot view your password.
• Database access restricted to authorised personnel; admin access requires two-factor authentication.
• Application hosted on Vercel (US East) and database on Neon Postgres (US East); uploaded images on Vercel Blob.
• Encrypted backups with limited retention.
• All admin actions are audit-logged.

Where your data is stored: our hosting and database providers (Vercel and Neon) operate from data centres in the United States, so your account and order data is stored and processed outside India. Payment data stays with Razorpay in India. We transfer only what is needed to run the site, and only to countries not restricted by the Central Government under the DPDP Act.

5. How long we keep it

Order, invoice, and tax records are retained for 7 years (Indian tax law requirement). Account information is kept while your account is active. Inactive accounts and their data are deleted after 5 years of no activity unless you specifically ask us to retain them.

6. Your rights under the DPDP Act

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate or incomplete information.
• Erasure — request deletion of your account and data (subject to legal retention obligations).
• Withdraw consent — for marketing communications, anytime.
• Grievance redressal — raise a complaint with our Grievance Officer (below).

7. Cookies

We use a small number of strictly necessary cookies for login sessions and cart contents, and analytics cookies (Google Analytics 4) only if you accept them via the cookie banner. We do not use third-party advertising cookies.

8. Children

The website is not directed at children under 18. We do not knowingly collect data from minors. If you believe we have, please contact us immediately and we will delete it.

9. Changes to this policy

We may update this policy as the business or law evolves. The "Last updated" date at the top reflects the most recent change. For material changes we'll notify registered customers by email.

10. Grievance Officer (mandatory under DPDP Act)

For any privacy-related question, write to grievance@dharsangroups.com or call us on the number above.