Privacy & Cookie Governance
Your sacred trust is our paramount commitment. How we safeguard and steward your personal data at Roye Vastraa Atelier.
1. Information We Collect
To fulfill your bridal orders, arrange video call consultations, and ensure secure dispatch from our Madurai showroom, we collect the following categories of personal information:
- Contact & Identity Data: Full Name, Email Address, WhatsApp/Phone Number, Delivery Address, Postal Code.
- Order History: Pure silk saree acquisitions, temple jewellery selections, bespoke blouse measurements, and styling notes.
- Technical & Session Data: IP Address, browser type, device identifiers, and browsing patterns on our digital lookbook.
2. Payment Security & Zero Card Storage
Roye Vastraa NEVER stores, logs, or views your credit card numbers, CVVs, debit card PINs, or UPI credentials on our servers. All transactions are securely routed through RBI-licensed payment gateways featuring end-to-end 256-bit TLS encryption.
3. Purpose & Legal Basis for Processing
We process your data strictly under the legal bases established by the Digital Personal Data Protection Act, 2023 (India) and the General Data Protection Regulation (EU/UK):
- To prepare, package, and dispatch your silk and jewellery orders via verified courier partners (BlueDart, Shiprocket, Delhivery).
- To transmit automated WhatsApp order confirmations, AWB tracking coordinates, and private drop invitations.
- To facilitate live HD video call styling appointments with our Madurai drapery masters.
- To comply with statutory taxation, GST reporting, and consumer protection mandates.
4. Cookies & Tracking Technologies
Our website employs cookies—small cryptographic text tokens stored in your browser—to elevate your browsing experience:
Strictly necessary for cart preservation, secure checkout, and user session continuity.
Anonymized traffic metrics helping us understand which handloom drapes resonate with our global patrons.
You can alter your cookie consent preferences at any time through our on-site banner or by configuring your browser settings.
5. Your Rights as a Data Principal
Under the DPDP Act 2023 and GDPR, you are endowed with complete sovereignty over your information:
- Right of Access & Correction: Request a copy of your stored records or rectify inaccuracies.
- Right of Erasure ("Right to be Forgotten"): Request permanent deletion of your customer profile.
- Right to Withdraw Consent: Unsubscribe from bridal newsletter and WhatsApp drops with a single click.
6. Grievance Redressal Officer
In compliance with Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the DPDP Act 2023, our designated Grievance Officer is: