Privacy Policy

1. Introduction

Xorrent("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, mobile application, or make a purchase from us. This policy applies to all users in India and internationally.

2. Information We Collect

2.1 Personal Information

When you create an account, place an order, or contact us, we may collect:

• Full name and contact details (email address, phone number)
• Shipping and billing addresses
• Payment information (processed securely via Razorpay; we do not store card details)
• Date of birth (if provided, for birthday offers)
• Order history and preferences
• Custom order specifications and uploaded images
• Authentication data (login method used, OTP verification status, account verification timestamps)

2.2 Automatically Collected Information

• IP address, browser type, and device information
• Pages visited, time spent, and navigation patterns
• Cookies and similar tracking technologies (see our Cookie Policy)
• Referral source and search terms

3. How We Use Your Information

• Process and fulfil your orders, including custom and personalised products
• Send order confirmations, shipping updates, and delivery notifications via email, SMS, and WhatsApp
• Verify your identity through OTP (one-time password) sent via email or SMS during login and registration
• Manage your account, loyalty points, and referral rewards
• Provide customer support and respond to enquiries
• Personalise your shopping experience and recommend products
• Send promotional communications (with your consent; you can opt out anytime)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations under Indian law

4. Information Sharing

We do not sell your personal information. We may share data with:

• Logistics partners (Shiprocket, Delhivery, BlueDart) for order delivery
• Payment processors (Razorpay) for secure transaction processing
• Communication providers (MSG91, Twilio) for OTP verification and order notifications via SMS and WhatsApp
• Analytics services (Google Analytics) to improve our website
• Legal authorities when required by Indian law or court order

5. Data Security

We implement industry-standard security measures including SSL encryption, secure payment processing via PCI-DSS compliant gateways, regular security audits, and access controls. However, no method of transmission over the Internet is 100% secure.

6. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for marketing communications
• Lodge a grievance with the Data Protection Board of India

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Order records are retained for 7 years for tax and legal compliance. Upon account deletion, personal data is permanently removed within 30 days, except where retention is required by law.

8. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related enquiries or to exercise your rights, contact our Grievance Officer: