PRIVACY POLICY

Operated by Divisha Yarn2Fab Private Limited

Welcome to Homeful Style (www.homefulstyle.com), operated by Divisha Yarn2Fab Private Limited ("Homeful Style", "we", "us", or "our"). Your privacy matters to us, and we are fully committed to protecting your personal information. This policy outlines what we collect, how we use it, and the rights you hold over your data.

This Privacy Policy is published in compliance with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"). We are also preparing for full compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules"), which are being implemented in phases and come into full effect on 13 May 2027.

1. Information We Collect

a. Personal Information

We collect information you voluntarily provide when using our platform, including:

Name, email address, and phone number.
Billing and shipping address.
Payment details (processed securely via payment gateways; we do not store card data).
Optional preferences such as product interests or home furnishing choices.

b. Automatically Collected Information

When you use our website, we may automatically collect:

IP address, device type, and browser information.
Pages visited, time spent, clicks, and browsing behaviour.
Cookies, pixels, and similar tracking technologies (see Section 4).

c. Information from Third Parties

We may receive data from trusted sources, including:

Payment gateways, for transaction verification.
Logistics partners, for delivery status updates.
Social media platforms, if you interact with us through those channels.

2. How We Use Your Information

We use your personal data for the following purposes:

Order fulfilment: Processing payments, delivering products, managing returns and exchanges, and responding to queries.
Account management: Creating and maintaining your account and purchase history.
Website improvement: Analysing usage, troubleshooting issues, and improving functionality.
Communication: Sending order confirmations, shipping updates, and, with your explicit consent, newsletters, offers, and marketing communications.
Legal compliance and security: Meeting applicable legal obligations, preventing fraud, and maintaining records as required by law.

We process your personal data only for the purposes described above and only to the extent necessary. We do not use your data for automated profiling or AI-based decision-making that affects you materially.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share it only in the following situations:

Service providers: Payment processors, delivery partners, IT vendors, and marketing agencies, only to the extent necessary to fulfil the stated purpose.
Legal obligations: Government authorities, regulators, courts, or the Data Protection Board of India, as required by law.
Business transactions: During mergers, acquisitions, or asset sales, with your data remaining protected under equivalent terms.
Marketing partners: Only with your explicit, separate consent, for personalised offers.

All third parties with whom we share data are bound by contractual obligations to handle it securely and only for the specified purpose.

4. Cookies and Tracking

We use cookies and similar technologies to improve website performance, personalise your experience, and understand usage patterns. The types of cookies we use are as follows:

Essential cookies: Required for the website to function (login sessions, cart, checkout).
Analytics cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
Marketing cookies: Used to show relevant advertisements, only with your consent.

You may manage or disable non-essential cookies through our cookie consent banner or your browser settings. Please note that disabling essential cookies may impact your experience on our website.

5. Data Security

We implement industry-standard safeguards to protect your data against unauthorised access, misuse, or disclosure, including:

SSL/TLS encryption for all data transmitted on our website.
Secure payment processing via PCI-DSS compliant payment gateways.
Access controls limiting who within our organisation can access personal data.
Regular security assessments of our systems and practices.

In the event of a personal data breach that is likely to affect your rights or interests, we will notify you and, where required, the Data Protection Board of India within 72 hours of becoming aware of the breach, as required under the DPDP Rules, 2025.

While we take every reasonable precaution, no system is entirely immune to security risks. We encourage you to keep your account credentials confidential and notify us immediately if you suspect any unauthorised access.

6. Your Rights

Under applicable Indian law (IT Act, SPDI Rules, and the forthcoming DPDP Act), you have the right to:

Access: Obtain a summary of the personal data we hold about you and how it is being used.
Correction: Request correction of inaccurate or incomplete personal data.
Deletion: Request deletion of your personal data, subject to legal and business retention requirements.
Withdraw Consent: Withdraw your consent for marketing communications or data processing at any time (see Section 7).
Data Portability: Request your data in a structured, commonly used, machine-readable format by writing to hello@homefulstyle.com with the subject line "Data Portability Request".
Grievance Redressal: Lodge a complaint with our Grievance Officer (see Section 9) or, once fully operational, with the Data Protection Board of India.

To exercise any of these rights, please write to hello@homefulstyle.com with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and resolve it within 30 days.

7. Consent and Withdrawal

Where we process your personal data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

You may withdraw consent in any of the following ways:

Click "Unsubscribe" in any marketing email we send you.
Email hello@homefulstyle.com with the subject line "Withdraw Consent" and specify what you are withdrawing consent for.
Call us at +91 92174 49993 during business hours (Monday to Saturday, 10 AM to 6 PM IST).

Withdrawing consent for marketing will not affect order processing or delivery communications, which are required to fulfil your purchase.

8. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy, or as required by applicable law. Our general retention guidelines are as follows:

Order and transaction data: 7 years (as required by Indian accounting and tax laws).
Account data: For as long as your account remains active, plus 2 years post-closure.
Marketing preferences and consent records: Until consent is withdrawn, plus 1 year.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Children's Privacy

Our website is intended for users aged 18 years and above. We do not knowingly collect personal data from anyone under 18 without verifiable parental or guardian consent.

If you are a parent or guardian and believe your child has provided personal information on our platform, please contact us immediately at hello@homefulstyle.com. Upon verification, we will promptly delete the data.

In line with forthcoming DPDP Act obligations, we will implement age-verification and verifiable parental consent mechanisms before processing data of anyone below 18 years of age.

10. Cross-Border Data Transfers

Homeful Style primarily stores and processes your data within India. In limited circumstances (for example, through the use of international cloud platforms, payment gateways, or analytics tools), your data may be processed outside India.

Such transfers are made only to countries or service providers that offer adequate data protection standards, in line with the provisions of the DPDP Act, 2023 on cross-border data transfer. We ensure all such third parties are bound by contractual data protection obligations equivalent to those described in this policy.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in laws, business operations, or technology, including as the DPDP Act 2023 comes into full effect. The latest version, with its effective date, will always be available at www.homefulstyle.com/privacy-policy.

For material changes, we will notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.

We are here to help: hello@homefulstyle.com | +91 92174 49993 Address: R-11/132, 1st Floor, Raj Nagar, Ghaziabad, Uttar Pradesh | www.homefulstyle.com