Privacy Policy

1. Data controller

Pleats & You, A-14, Shri Ram Homes, Lamti, Vijay Nagar, Jabalpur, Madhya Pradesh, India 482002, determines how and why your personal data is processed. You can reach us at contact@pleatsandu.com.

2. What we collect

• Identity and contact data — your name, email address, mobile number, and billing and shipping addresses.
• Order data — the products you buy, order value, order history, and any customisation or body measurements you submit for made-to-order garments.
• Transaction data — the amount, date, currency and status of a payment, plus the reference number returned by the payment gateway.
• Technical data — IP address, approximate location derived from it, browser type and version, device type, operating system, referring URL and pages visited.
• Communications — emails, chat messages and support tickets you send us, and your marketing preferences.

3. What we do not collect

We never receive or store your full card number, CVV, card expiry, UPI PIN or net-banking credentials. Those are captured directly by our payment gateway on its own PCI-DSS compliant infrastructure. We only receive confirmation that a payment succeeded or failed, together with a reference number.

4. Why we use it

• To process, produce, ship and support your order, and to send you transactional emails and SMS about it.
• To stitch made-to-order garments to the measurements you supply.
• To create and maintain your account, and to authenticate you by one-time password.
• To display prices in your local currency, using your IP-derived location.
• To detect and prevent fraud, and to comply with our legal and tax obligations.
• To send you marketing emails — only if you have opted in, and you can opt out at any time.
• To understand aggregate usage of the website so we can improve it. This analysis is performed on data that does not identify individual users.

5. Who we share it with

We do not sell, rent or trade your personal data. We share it only with service providers who need it to deliver the service you asked for, and only to that extent:

• Payment gateways — to take payment and process refunds.
• Courier and logistics partners — your name, address and phone number, so they can deliver your order.
• Email and SMS providers — to send order updates and, where you have opted in, newsletters.
• Hosting, storage and analytics providers — who process data on our instructions under contract.
• Law enforcement and regulators — where we are required to disclose data by law or a valid court order.

6. Cookies

Like most e-commerce sites we use cookies and similar technologies. Strictly necessary cookies keep you signed in, hold the contents of your cart between pages and remember your selected currency — the site will not work without them. Analytics cookies help us understand how the site is used in aggregate. You can block or delete cookies in your browser settings, but doing so may prevent parts of the site from working.

7. How long we keep it

We keep order, invoice and transaction records for as long as required by Indian tax and accounting law, which is presently eight years from the end of the relevant financial year. Account and marketing data is kept until you close your account or withdraw consent, after which it is deleted or anonymised. Measurements are kept for as long as your account is active so you do not have to re-enter them, and are deleted on request.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

• Ask for a summary of the personal data we hold about you and how we process it.
• Ask us to correct or complete data that is inaccurate or out of date.
• Ask us to erase your data, where we are not required by law to retain it.
• Withdraw a consent you previously gave — for example, to marketing email — without affecting processing carried out before you withdrew it.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, write to contact@pleatsandu.com. We respond within 30 days. We may need to verify your identity before acting on a request.

9. Security

All traffic between your browser and our servers is encrypted in transit using TLS. Access to personal data is restricted to those who need it to do their job, and payment credentials never touch our infrastructure. That said, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The website is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has supplied us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified on this page, and the revision date at the top will be updated. Please also read our Terms & Conditions, which govern your use of the website.

12. Grievance redressal

Any complaint about how your personal data has been handled may be addressed to our Grievance Officer, appointed under Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.