Privacy Policy

1. Information We Collect

We collect the following types of information when you use our website:

• Personal Information: Name, email address, phone number, and delivery address provided during account registration or checkout.
• Payment Information: We do not store card numbers or CVVs. Payments are processed securely through Razorpay, which is PCI-DSS compliant.
• Order Details: Product choices, personalization inputs, gift messages, and order history.
• Device & Usage Data: IP address, browser type, pages visited, time spent, and referral URL — collected via cookies and analytics tools.
• Communications: Emails, messages, or enquiries you send us.

2. How We Use Your Information

We use your data to:

• Process and fulfil your orders, including personalization and delivery.
• Send order confirmations, shipping updates, and invoices.
• Respond to customer support queries.
• Improve website experience, product offerings, and marketing (with your consent).
• Detect and prevent fraud or unauthorized account access.
• Comply with legal and regulatory obligations under Indian law.

3. Sharing Your Information

We do not sell, rent, or trade your personal information. We share data only with trusted parties who help us operate our service:

• Razorpay — Payment processing.
• Logistics Partners — Order fulfillment and last-mile delivery.
• Email / SMS Providers — Transactional communication.
• Analytics Tools — Anonymized website traffic analysis.

All third-party partners are contractually bound to protect your data and use it only for the purposes specified.

4. Data Security

We implement industry-standard measures to protect your data:

• HTTPS/SSL encryption for all data transmitted on our site.
• Passwords are hashed using bcrypt and never stored in plain text.
• Access to personal data is restricted to authorized personnel only.
• Regular security audits and vulnerability monitoring.

While we take every precaution, no internet transmission is 100% secure. Please use strong, unique passwords for your account.

5. Cookies

We use cookies to enhance your experience:

• Essential Cookies: Required for login sessions, cart functionality, and security.
• Analytics Cookies: Help us understand how visitors use the site (Google Analytics).
• Marketing Cookies: Used only with your consent to show relevant ads.

You can disable cookies in your browser settings; however, some features may not work correctly without them.

6. Your Rights

Under applicable Indian data protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information via your Account → Profile page.
• Delete your account and associated personal data (subject to legal retention requirements).
• Withdraw consent for marketing communications at any time via the unsubscribe link in our emails.
• Lodge a complaint with the relevant data protection authority if you believe your rights have been violated.

To exercise any of these rights, email us at privacy@thingsremembered.in.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Order records are retained for 7 years to comply with Indian GST and accounting regulations. After this period, data is securely deleted or anonymized.

8. Third-Party Links

Our website may contain links to third-party websites (e.g., social media, payment gateways). We are not responsible for the privacy practices of those sites. We encourage you to review their policies before submitting personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. Continued use of our site after updates constitutes your acceptance of the revised policy. For significant changes, we will notify registered users via email.

10. Contact Us

For any privacy-related concerns or requests:

• Email: privacy@thingsremembered.in
• Address: Things Remembered, Mumbai, Maharashtra, India

We aim to respond to all privacy requests within 30 days.