Privacy Policy

We only collect what an order actually needs:

• Identity and contact data — your name, email address and mobile number.
• Delivery data — the shipping address and pincode you enter at checkout.
• Order data — the items, sizes and quantities you buy, and the amount paid.
• Account data — if you create an account, your saved addresses, wishlist and a one-way encrypted (bcrypt) hash of your password. We never store the password itself.
• Technical data — IP address, browser type and pages viewed, used to keep the site secure and working.

We do not store card numbers, CVV codes or UPI PINs at any point. Payment credentials are entered directly with our payment partner and never reach our servers, in line with the RBI tokenisation guidelines.

We process your data only for these purposes:

• To take, pack, ship and deliver your order.
• To send transactional messages — order confirmation, dispatch and delivery updates.
• To handle returns, refunds, cancellations and support requests.
• To meet our legal obligations, including GST invoicing and record-keeping.
• To detect and prevent fraudulent or abusive orders.

Marketing email is sent only if you opt in, and every message carries an unsubscribe link.

Your data is shared only where an order cannot be completed without it:

• Courier partners — your name, address and phone number, so your parcel can be delivered.
• Payment gateway — the order reference and amount, so your payment can be processed.
• Email provider — your email address, so transactional mail reaches you.
• Government authorities — where we are required by law to disclose.

Each partner is bound to use the data only for the service they provide to us.

We use a small number of cookies and equivalent browser storage:

• Essential — your session, your shopping bag and your wishlist. The site cannot work without these.
• Analytics — anonymous, aggregated usage statistics, only if analytics is enabled for this store.

Your shopping bag and guest wishlist are stored in your own browser, not on our servers. Clearing your browser data clears them.

Our web fonts are served from this site rather than a third-party CDN, so browsing here does not disclose your visit to another provider.

Order and invoice records are retained for eight years, as required by Indian tax law. Account data is kept while your account is open. Support correspondence is kept for two years. Technical logs are kept for 90 days. Once a retention period ends, data is deleted or irreversibly anonymised.

Under the Digital Personal Data Protection Act, 2023 you may:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct anything inaccurate or incomplete.
• Ask us to erase data we no longer need to keep by law.
• Withdraw consent for marketing at any time.
• Nominate another person to exercise these rights on your behalf.

Write to us using the contact details below and we will respond within 30 days. If you are not satisfied with our response you may complain to the Data Protection Board of India.

The site is served over HTTPS. Passwords are hashed with bcrypt and are not readable by us or anyone else. Database credentials are held server-side only and are never present in any page, script or API response. Access to order data is restricted to staff who need it. We review these measures regularly, but no method of transmission over the internet is completely secure, so please use a strong, unique password.

We sell boys’ clothing, but the account and the purchase are made by an adult. This site is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

If we change this policy we will update the date at the top of this page. Material changes affecting how we use your data will also be notified by email to account holders.