Privacy Policy

Introduction

Welcome to MUDNAAZ Fashion ("MUDNAAZ", "we", "our", or "us"). We are a luxury South Asian womenswear boutique based in Bharuch, Gujarat, India, operating online.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, or interact with us in any way. By using our services, you agree to the terms described in this Policy.

Information We Collect

We collect information you provide directly to us, as well as information collected automatically through your use of our services.

Information you provide:

• Name, email address, phone number, and shipping address when you create an account or place an order
• Payment information (processed securely by our payment partners — we do not store card details)
• Communication history when you contact us via email, WhatsApp, or our contact form
• Reviews, feedback, or any content you submit to us

Information collected automatically:

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, and browsing behaviour on our site
• Referring URLs and search terms used to find our website
• Cookie and tracking data (see Section 4)

How We Use Your Data

We use the information we collect to provide, maintain, and improve our services. Specifically, we use your data to:

• Process and fulfil your orders, including sending confirmation and shipping notifications
• Communicate with you about your purchases, queries, and customer support requests
• Personalise your shopping experience and recommend products relevant to your interests
• Send marketing communications (only if you have opted in — you may opt out at any time)
• Analyse website usage to improve our user experience and product offerings
• Comply with legal obligations and prevent fraud

We will never sell your personal information to third parties for their own marketing purposes.

Cookies & Tracking

We use cookies and similar tracking technologies to improve your browsing experience. Cookies are small text files stored on your device.

• Essential Cookies: Required for the website to function (cart, checkout, session management)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Marketing Cookies: Used to deliver relevant advertising (Meta Pixel, Google Ads)
• Preference Cookies: Remember your language, currency, and other settings

You may disable cookies in your browser settings. Note that disabling essential cookies may impair your ability to use our website.

Third-Party Services

We work with trusted third-party service providers to operate our business. These partners may have access to your personal information only to perform specific tasks on our behalf.

• Shopify Inc. — E-commerce platform and data processor (governed by Shopify's Privacy Policy)
• Cashfree Payments — Payment processing and gateway services
• Google LLC — Analytics (GA4) and advertising services
• Meta Platforms — Social media advertising and analytics
• WhatsApp / Meta — Customer support communications
• Shipping Partners — Order fulfillment and delivery tracking (e.g., Delhivery, DTDC

We encourage you to review the privacy policies of our third-party partners for information on their data practices.

Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are typically retained for 7 years in accordance with Indian accounting and tax law.

You may request deletion of your personal data at any time (see Section 7). We will delete your data unless we are legally required to retain it.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate or incomplete information
• Erasure: Request that we delete your personal data
• Objection: Object to processing of your data for marketing purposes
• Portability: Request your data in a portable, machine-readable format
• Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at the details below. We will respond within 30 days.

Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our website uses SSL/TLS encryption and our payment processing is handled by PCI-DSS compliant providers.

While we implement robust security measures, no internet transmission is 100% secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised access to your account.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us.