Privacy policy
PRIVACY POLICY
1. Introduction
Anumyas Attire Private Limited respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, how we use it, why we use it, with whom we share it, how long we retain it, and how you can exercise your rights.
By using www.anumya.com, placing an order, contacting us, subscribing to our communications, or interacting with us through Instagram, WhatsApp, email, or other channels, you agree to this Privacy Policy.
This Policy is drafted with reference to both the currently applicable Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023, which is being brought into force in phases.
2. Data Fiduciary / Controller
For the purpose of applicable privacy laws, Anumyas Attire Private Limited is the entity responsible for deciding the purpose and means of processing your personal data. Anumya acts as the Data Fiduciaryin respect of personal data collected through this website.
Legal Entity: Anumyas Attire Private Limited
Registered Office: 157/1, Chander Nagar, SBI Road, Alambagh, Lucknow – 226005, Uttar Pradesh, India
Privacy Contact: +91-925 002 7829
Grievance Officer / Privacy Contact Person: Mrs. Anita Ahuja, +91–925 002 7829
3. Personal Data We Collect
We may collect the following categories of personal data:
- Identity details: full name, username, account details, social media handle, and customer ID.
- Contact details: email address, phone number, billing address, shipping address, city, state, country, PIN/postal code.
- Order details: products ordered, order number, invoice, payment status, return/exchange requests, credit notes, customer service history.
- Payment details: payment method, transaction ID, payment confirmation, refund details, UPI/bank details for COD refunds where necessary. We do not store full card number, CVV, UPI PIN, banking password, or similar sensitive payment credentials.
- Delivery details: courier tracking ID, delivery status, proof of delivery, recipient details, failed delivery records.
- Communication details: emails, WhatsApp messages, Instagram DMs, customer support queries, feedback, reviews, complaints, and call records where applicable.
- Marketing preferences: newsletter subscription, consent status, offer preferences, opt-in/opt-out records.
- Technical data: IP address, browser type, device type, operating system, pages visited, time spent, referral source, cookies, and analytics data.
- User-generated content: reviews, photographs, videos, testimonials, social media tags, and comments shared with us.
- Any information voluntarily submitted through forms or enquiries.
We collect only such personal data as is reasonably necessary for the purposes specified in this Policy.
4. How We Collect Personal Data
We may collect personal data when you:
- Visit or browse our website;
- Create an account;
- Place an order;
- Make payment;
- Request shipping, return, exchange, refund, or credit note;
- Contact us by phone, email, WhatsApp, Instagram, or other channels;
- Subscribe to newsletters or marketing communications;
- Participate in offers, campaigns, surveys, or promotions;
- Post reviews, comments, photos, or tags related to Anumya;
- Use cookies or similar technologies on our website.
We may also receive personal data from payment gateways, courier partners, website hosting providers, analytics providers, social media platforms, marketing service providers, and other third-party service providers involved in our business operations.
5. Purpose of Processing
We use your personal data for the following purposes:
- To create and manage your account;
- To process, confirm, ship, deliver, return, exchange, replace, or refund your order;
- To process payments and prevent payment fraud;
- To verify COD orders;
- To issue invoices, credit notes, and transaction records;
- To provide customer support and respond to queries;
- To manage complaints and grievance redressal;
- To communicate order updates, delivery updates, return status, and service messages;
- To send marketing communications, offers, new collection updates, and promotional messages where permitted;
- To improve our website, products, customer experience, and operations;
- To detect, prevent, and investigate fraud, misuse, security incidents, or unlawful activity;
- To comply with legal, tax, accounting, regulatory, consumer protection, and law enforcement obligations;
- To maintain website security
- To enforce our terms, policies, and legal rights.
6. Consent
Where required under the applicable Act or Digital Personal Data Protection Act, 2023, which is being brought into force in phases, we obtain your consent before processing your personal data.
Your consent shall be free, specific, informed, unconditional; and given through a clear affirmative action.
You may withdraw your consent at any time by contacting us using the details provided below.
Withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal.
7. Legal Basis
We process your personal data only for lawful purposes, including:
- Where you have provided consent;
- Where processing is necessary to fulfil your order or provide requested services;
- Where you voluntarily provide personal data for a specified purpose;
- Where processing is necessary for compliance with law;
- Where processing is necessary for fraud prevention, security, dispute resolution, legal claims, or legitimate business operations, as permitted by law.
You may withdraw consent where processing is based on consent. Withdrawal of consent will not affect processing already completed before withdrawal. If you withdraw consent required for order fulfilment or service delivery, we may be unable to provide the relevant service.
8. Marketing Communications
We may send you marketing communications by email, SMS, WhatsApp, social media, or other channels where permitted.
You may opt out of marketing communications at any time by using the unsubscribe option, replying with an opt-out request, or contacting us at hello@anumya.com.
Even if you opt out of marketing, we may still send transactional or service-related messages, such as order confirmations, delivery updates, payment confirmations, return updates, policy updates, or legal notices.
9. Cookies and Analytics
Our website may use cookies, pixels, tags, and similar technologies to operate the website, remember preferences, analyse traffic, improve performance, personalise content, and support marketing.
You may control cookies through your browser settings. If you disable cookies, some website features may not function properly.
Details of specific analytics, advertising, and cookie tools used by Anumya should be listed in a cookie notice or cookie banner where required.
10. Sharing of Personal Data
We may share your personal data with:
- Payment gateways, banks, card networks, UPI providers, and payment service providers;
- Courier, logistics, delivery, customs, and fulfilment partners;
- Website hosting, domain, IT, security, cloud, analytics, and technology service providers;
- Customer support, communication, email, WhatsApp, SMS, and marketing service providers;
- Accountants, auditors, tax consultants, legal advisors, insurers, and professional advisors;
- Government, regulatory, law enforcement, tax, customs, consumer forum, or judicial authorities where required;
- Social media platforms or advertising partners, where permitted and subject to your choices;
- Any successor entity in case of merger, restructuring, business transfer, or corporate transaction.
We require service providers to process personal data only for authorised purposes and to adopt reasonable security measures.
11. International Transfers
If you place an international order, your personal data may be shared with international courier partners, customs authorities, payment service providers, and other entities involved in cross-border delivery and payment processing.
Some of our technology, hosting, analytics, payment, or communication service providers may process data outside India. Where required by law, we will take appropriate measures for such transfers.
International payments are processed through RBI-authorised payment aggregators/gateways in compliance with the Foreign Exchange Management Act, 1999 and RBI's Master Directions on cross-border payment aggregators, and that export proceeds will be realised and reported in accordance with FEMA export regulations
12. Data Retention
We retain personal data only for as long as necessary for the purposes stated in this Privacy Policy, including order fulfilment, customer support, returns, refunds, accounting, tax, legal, audit, fraud prevention, dispute resolution, and regulatory compliance.
We may retain transaction records, invoices, tax records, and legal records for the period required under applicable law.
When personal data is no longer required, we will delete, anonymise, or securely archive it, subject to legal and operational requirements.
13. Information Sharing
Notwithstanding anything contained to the contrary, your information may be shared by Anumya:
i. with its legal counsel/s or upon a law enforcement agency's request or in response to a legal process (for instance, in response to a court order or a summons;
ii. during investigations, for prevention of any illegal activities or suspected fraud;
iii. situations involving potential threats to the physical safety of any person;
iv. violations of any of the terms of the Privacy Policy and to verify or enforce compliance with the policies governing the Website or its applications and applicable laws or as otherwise required or permitted by law or as consistent with the legal requirements of India;
v. to operate its systems properly; or
vi. to protect other Website users; or
vii. with third party subcontractors solely for the purpose of or in connection with the services, who are contractually bound to protect your information from unauthorized use or transfer and who will have appropriate confidentiality and security measures, at least as protective as those described in this Privacy Policy, to handle your personal information. Additionally, in the event of reorganization, bankruptcy, merger, or sale of company assets, financing, or acquisition of all or a portion of our business to another company, we may transfer any and all personal information we collect to the relevant third party. You will have the opportunity to opt out of any such transfer if the new entity's planned processing of your information differs materially from that set forth in this Privacy Policy.
14. Data Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
The security of your personal information is important to us. Anumya takes precautions, including administrative, technical and physical measures, to safeguard your personal information against loss, theft and misuse, as well as against unauthorized access, disclosure, alteration and destruction. This Website has various electronic, procedural and physical security measures in place to protect the loss, misuse and alteration of information, or any accidental loss, destruction or damage to data. There may be instances where Anumya requires proof of identity before disclosing any of your information to you.
You agree to be responsible to protect the security of your username and password and other registration details,if any. Anumya may create links to other websites. You are requested to be aware that Anumya does not provide any personally identifiable information to such other websites and that it is not responsible for the privacy practices of third parties.
You agree that Anumya cannot control these links and Anumya shall not be responsible for any use of such websites. If you have any questions about the security at the Website, you may contact us. Please be aware, however, that despite our efforts, no security measures are impenetrable as no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your account credentials confidential and using secure devices/networks.
15. Your Rights
Subject to applicable law, you may have the right to:
- Access information about personal data processed by us;
- Request correction of inaccurate or misleading personal data;
- Request completion or updating of incomplete/outdated personal data;
- Request erasure of personal data where permitted by law;
- Withdraw consent where processing is based on consent;
- Opt out of marketing communications;
- Raise a grievance regarding processing of your personal data;
- Nominate another person to exercise your rights where applicable under law.
To exercise these rights, please contact us at support@anumya.com.
We may need to verify your identity before responding to your request.
16. Children’s Privacy
Our website and products are not directed at children below 18 years of age.
If you are below 18, you may use the website only with involvement and consent of a parent or legal guardian.
We do not knowingly collect personal data from children without appropriate consent. If we become aware that we have collected such data without required consent, we will take steps to delete it, subject to applicable law.
17. Accuracy of Information
You are responsible for providing accurate, complete, and updated information.
Anumya is not responsible for failed delivery, refund delay, communication failure, or order issue caused by incorrect or incomplete information provided by you.
18. Grievance Redressal – Privacy
For privacy-related concerns, please contact:
Privacy Contact / Grievance Officer: Mrs. Anita Ahuja
Designation: Partner
Email: support@anumya.com
Phone: +91-925 002 7829
Address: 157/1, Chander Nagar, SBI Road, Alambagh, Lucknow – 226005, Uttar Pradesh, India
We will acknowledge grievances within 48 hours and endeavour to resolve them within one month, or within such period as may be required under applicable law.
19. Changes to Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the website with the effective date.
Your continued use of the website after the updated Privacy Policy is posted will constitute acceptance of the revised policy, where permitted by law.
20. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the provisions of the Digital Personal Data Protection Act, 2023.
Subject to applicable consumer protection laws and any mandatory legal rights available to consumers, Any disputes arising out of this Privacy Policy shall be subject to the jurisdiction of the the courts at Lucknow, Uttar Pradesh, India.
For customers located outside India, mandatory consumer protection laws of the customer's home jurisdiction, where applicable and not capable of being contractually excluded, shall not be affected by this clause.