TERMS, SHIPPING & POLICIES

When you browse our storefront, register a membership account, or purchase items, we collect specific categories of information necessary to deliver seamless e-commerce services:

• Identity & Contact Details: Full name, telephone number, mobile number, email address, and shipping/billing addresses for order delivery and customer notification.
• Order & Transaction Details: Products purchased, garment sizes, prices, order identifiers, transaction timestamps, payment confirmation references, and order status tracking.
• Account Credentials: Username, password hash (encrypted via strong one-way Argon2/Bcrypt cryptography), and security tokens. Plaintext passwords are never visible or accessible to anyone.
• Technical & Telemetry Data: IP address, device operating system, browser type, referral URLs, access timestamps, and shopping bag session identifiers used for fraud defense and interface optimization.

To provide safe and seamless online payments across India, we integrate certified, RBI-compliant payment gateways (supporting UPI, Credit Cards, Debit Cards, and Net Banking).

We only receive an encrypted payment authorization token and transaction status reference (“SUCCESS”, “FAILED”, or “PENDING”) from the payment gateway to confirm and fulfill your order.

Your personal data is used solely for lawful commercial and operational purposes, including:

• Processing, packing, and dispatching your orders, limited drops, and advance pre-bookings.
• Generating GST invoices and shipping waybills for express courier transit.
• Sending real-time order tracking updates, SMS dispatch alerts, and transactional confirmations.
• Providing customer support, answering inquiries, and managing size exchanges or return requests.
• Detecting and mitigating fraud, card abuse, bots, or unauthorized account takeovers.
• Sending voluntary VIP drop updates and email newsletters (only when you have expressly opted in; unsubscribe option is included in every email).

We share necessary information only with vetted service partners bound by strict non-disclosure obligations:

• Payment Gateways: To authorize and settle payments securely (e.g., Razorpay, Cashfree, PayU, PhonePe PG).
• Express Logistics Carriers: Courier networks (such as BlueDart, Delhivery, DTDC, India Post) to print shipping labels and deliver packages to your doorstep.
• SMS & Email Providers: Transactional communication partners to transmit order status updates and one-time password (OTP) verification codes.
• Statutory Authorities: When strictly mandated by Indian law, judicial summons, or law enforcement warrants.

NIRNTH implements enterprise-grade technical and organizational safeguards to protect your personal data against accidental loss, unauthorized access, alteration, or disclosure:

• 256-Bit SSL/TLS Encryption: All traffic between your browser and our servers is encrypted in transit using industry-standard TLS encryption.
• Cryptographic Password Hashing: Passwords are protected using salted one-way algorithms that cannot be reversed.
• Server Access Controls: Database and server environments are locked down behind firewalls with strict role-based access controls and activity logging.

Our website utilizes necessary first-party cookies and session identifiers to facilitate essential website functionalities:

• Session & Bag Cookies: To keep items saved in your shopping bag as you browse between drops and collections.
• Authentication Cookies: To remember your secure logged-in status across pages without prompting for repetitive credential entries.
• User Preferences: Storing tailoring preferences or device layout adjustments for your convenience.

You may choose to disable cookies through your browser settings; however, doing so may prevent adding items to your cart or completing online checkout.

Under Indian data protection laws, you enjoy comprehensive rights regarding your personal data:

• Right to Access & Review: You can view and verify your saved addresses, orders, and profile information at any time via your Member Account.
• Right to Rectification: You may update or correct inaccurate contact information directly in your profile or by emailing our team.
• Right to Erasure / Account Deletion: You may request the deletion of your account and personal records by contacting our Data Protection Concierge, subject to statutory tax and financial record-keeping obligations required under Indian law (typically 7 years for financial audit invoices).
• Right to Opt-Out: You may opt out of promotional emails at any time by clicking the “Unsubscribe” link located at the footer of our newsletters.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, if you have any questions, concerns, or grievances regarding the processing of your personal data, you may reach out to our designated Privacy & Grievance Officer:

All privacy inquiries and grievance notices will be acknowledged within 24 hours and resolved within 15 working days as mandated under Indian IT regulations.