Privacy policy

Who is responsible

TODO — registered entity name, trading as Suka Indian Handlooms, is the data fiduciary for the information described here. Write to sukahandlooms@gmail.com about anything on this page.

What is collected

Nothing on this site asks you to create an account, and you can read the whole of it without giving us anything. What is collected falls into four groups:

• Stored in your browser only: your bag, your saved pieces, your chosen language and your accessibility preferences. These live in your browser's local storage, never reach our servers, and are cleared when you clear your browser data.
• When you place an order: your name, delivery address, email address and phone number — collected because a parcel cannot be sent without them.
• When you subscribe to the newsletter: your email address, and nothing else.
• When you write to us: whatever you choose to put in the message.

Payment details

We do not collect, see or store your card number, CVV or UPI PIN. Payment is handled entirely by our payment gateway on its own systems. We receive only the fact that a payment succeeded, its amount, and a reference number.

Why it is collected

Order details are used to fulfil and support your order, and are kept as long as tax and accounting law requires us to keep them.

A newsletter address is used to send the newsletter and nothing else. Every edition carries an unsubscribe link, and unsubscribing deletes the address.

We do not sell your data, we do not share it for anyone else's marketing, and we do not build advertising profiles.

Who else sees it

A short list, and what each one gets:

• Shopify — our commerce backend, which holds the product catalogue and processes orders.
• Our payment gateway — handles the payment itself; see its own privacy policy for what it retains.
• Courier partners — receive the name, address and phone number needed to deliver the parcel.
• A machine-translation provider — when you switch the site to another language, the visible text of the page is sent for translation. That text is editorial copy from this site, not anything about you. Weaver profiles are sent only where that weaver consented to translation; where consent was withheld, the prose is never transmitted.

Cookies and tracking

This site sets no advertising cookies and runs no cross-site trackers. The preferences described above use your browser's local storage rather than cookies, which is why you have not been asked to dismiss a consent banner.

Cookies strictly necessary for checkout may be set by Shopify and by the payment gateway during a purchase.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us for a copy of what we hold about you, ask us to correct it, ask us to erase it, or withdraw a consent you previously gave. Nominate someone to exercise these rights on your behalf if you wish.

Write to sukahandlooms@gmail.com. We will answer within 48 hours and act within 30 days. Some records — invoices, for example — we are obliged to keep for a statutory period even after an erasure request, and we will tell you when that applies.

Security and retention

Data in transit is encrypted. Access to order data is limited to the people who need it to fulfil an order. No system is perfectly secure, and we will not pretend otherwise — but we will tell you promptly if something happens that affects you.

Order records are kept for as long as tax law requires. Newsletter addresses are kept until you unsubscribe. Enquiry emails are kept for two years.

Children

This site is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has given us information, write to us and we will delete it.