Privacy Policy
Policy Effective Date: 14 March 2026
Last Updated On: 19 May 2026
This Privacy Policy is intended to help you understand how Silk Culture by Sunita collects, uses, and shares your personal data. Please read this policy before using our website or making a purchase.
1. Who we are
We are
Silk Culture by Sunita, an online saree boutique operating at
silkculturebysunita.in (referred to as “the Website”, “we”, “us”, or “our”).
Data Controller:
Silk Culture By Sunita
Thane West,
Thane – 400608, Maharashtra
India
Contact for Privacy Matters:
Email: support@silkculturebysunita.in
Phone: +91 96196 64990
2. Personal Data We Collect
2.1 Data You Provide Directly
When you create an account, place an order, or contact us, we collect:
Identity data: Full name
Contact data: Email address, phone number
Address data: Billing address, shipping/delivery address
Transaction data: Products ordered, order value, order date, payment method type
Communications data: Messages you send us via email or WhatsApp
What is mandatory vs. optional:
Fields marked as required during checkout (name, email, address, phone) are necessary to complete your purchase. You may choose not to provide optional fields without affecting your ability to order.
2.2 Data Collected Automatically
When you browse the Website, we automatically collect:
Device data: Browser type, operating system, device type
Usage data: Pages viewed, products clicked, time spent on pages
Traffic data: IP address, referring website or search terms, session timestamps
Cookie data: See Section 8 for full details
2.3 Data Received From Third Parties
We receive limited data from:
Payment processors: Razorpay is our payment gateway. From Razorpay we recieve payment confirmation status and transaction reference number. We do not receive or store your full card number or CVV – this is handled directly by Razorpay.
Shipping/logistics partners: We receive delivery status and tracking updates from our shipping/logistics partners, DTDC.
Google Analytics: Aggregated, anonymised traffic and behaviour data about how visitors use our Website
3. Why We Process Your Data (Purposes & Basis)
We only process your personal data when we have a lawful reason to do so. The table below explains each purpose, the data used, and the legal basis under India’s Digital Personal Data Protection Act (DPDPA), 2023.
Purpose | Data Used | Basis |
Processing and fulfilling your order | Name, address, email, phone, order details | Contract – necessary to complete your purchase |
Sending order confirmation and shipping updates | Email, phone, order details | Contract – necessary to complete your purchase |
Processing payment through our payment gateway | Email, order amount, transaction reference | Contract – necessary to complete your purchase |
Sharing your order confirmation email with Google for the Customer Reviews survey opt-in | Email address, order details | Consent – you choose whether to opt in at checkout |
Improving our Website and understanding usage patterns | Anonymised analytics data | Legitimate interest – to provide support |
Responding to your customer service enquiries | Responding to your customer service enquiries | Legitimate interest – to provide support |
| Complying with legal obligations (tax, government requests) | Name, address, transaction records | Legal obligation |
Sending promotional emails or newsletters (if you have subscribed) | Email address, name | Consent – you may unsubscribe at any time |
4. Third-Party Data Sharing
We share your personal data only with the third parties described below. We do not sell your personal data to any party.
4.1 Payment Gateway
We share your order details (email address, order amount, transaction reference) with our payment gateway provider, Razorpay, to process your payment. Your full card number and CVV are handled directly by the payment processor and are never seen or stored by us.
4.2 Logistics & Shipping Partners
We share your name, phone number, and delivery address with our logistics partners, DTDC, solely to arrange delivery of your order.
4.3 Google - Customer Reviews Program
When you place an order on our Website, we share your order confirmation email address and order details with Google LLC (United States) in connection with the Google Customer Reviews program.
This is done to enable Google to display a post-purchase survey opt-in on our order confirmation page. If you choose to opt in, Google may email you a survey after your order is delivered, asking you to rate your shopping experience.
- Your participation in the survey is entirely voluntary. You can decline the opt-in at the point of purchase.
- Google may place cookies on your browser in connection with this program. You can manage cookie preferences through our Cookie Settings (see Section 8).
- Once your email address is shared with Google, Google handles your data in accordance with the Google Privacy Policy.
- Google LLC is incorporated in the United States. Data transferred to Google is subject to cross-border transfer (see Section 6).
- Google is granted a licence to use transaction information in connection with Google products and services, per the Google Customer Reviews Program Agreement.
4.4 Google Analytics
We use Google Analytics to understand how visitors use our Website. The data collected is aggregated and anonymised – it does not identify you personally. Google Analytics may place cookies on your device (see Section 8). Google Analytics data is processed by Google LLC (United States).
5. Data Retention
We retain your personal data only for as long as necessary for the purpose it was collected, or as required by law.
Data Type | Retention Period | Reason |
Account and contact information | Duration of account + 1 year after closure | Account recovery, dispute resolution |
Order and transaction records | 7 years from order date | Indian tax and accounting obligations |
Delivery address data | 90 days after delivery | Returns and dispute handling |
Customer support communications | 2 years from last contact | Service quality and complaint resolution |
Analytics data | 14 months | Google Analytics default retention |
Cookies | 30 days to 2 years depending on cookie type | See Cookie Policy |
Marketing email subscriptions | Until you unsubscribe | Compliance with opt-out request |
When data reaches the end of its retention period, we delete or anonymise it. You may also request early deletion – see Section 7.
6. International Data Transfers
Some of our third-party service providers are based outside India. When we share your personal data with these providers, your data may be transferred to and processed in countries outside India, including the United States. Specifically:
– Google LLC (United States) receives your email address and order details for the Google Customer Reviews program, Google Analytics, and reCAPTCHA.
– Your payment gateway provider may process data on infrastructure located outside India.
These transfers occur because these services are operated internationally and are necessary to provide you with the services we offer. By completing a purchase on our Website and seeing the Google Customer Reviews opt-in widget, you are informed that this transfer occurs.
Google is subject to the
EU-US Data Privacy Framework and implements
Standard Contractual Clauses for data transfers where applicable, providing a level of data protection. For full details, refer to
Google’s Privacy Policy.
Note: We will update this policy promptly to align with India’s DPDPA cross-border data transfer framework.
7. Your Rights Under DPDPA
Under India’s Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
Right to Access
You may request a summary of the personal data we hold about you and how it is being used.
Right to Correction
You may request that we correct any inaccurate or incomplete personal data we hold about you. You can also update most of your details directly in your account on our Website.
Right to Erasure (Deletion)
You may request deletion of your personal data. We will delete data that we are not legally required to retain. Data we must keep for legal or tax reasons (such as transaction records) will be noted in our response.
Right to Withdraw Consent
Where we process your data based on your consent (e.g., marketing emails, Google Customer Reviews survey opt-in), you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Grievance Redressal
If you believe we have violated your data rights, you may file a complaint with us (see Section 10). If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
How to exercise your rights:
Email us at support@silkculturebysunita.in with the subject line “Data Rights Request”. Please include your name and registered email address so we can verify your identity. We will respond within 30 days.
8. Cookies
We use cookies and similar tracking technologies on our Website. When you first visit, our cookie consent banner allows you to choose which cookie categories to enable. Essential cookies cannot be disabled as they are required for the Website to function.
Visit our detailed
Cookie Policy to know about different types of cookies that we use.
Google Customer Reviews Cookies:
When the Google Customer Reviews opt-in widget is displayed on our order confirmation page, Google may place or read cookies on your browser in connection with the program. You can manage these through our Cookie Settings or your browser settings.
Managing your cookie preferences:
You can change your cookie preferences at any time using the Cookie Settings option in the footer of our Website. You can also manage cookies through your browser settings. For more details, see our full
Cookie Policy.
9. Information Security
We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, use, modification, or disclosure. These include:
- Encrypted HTTPS connections for all data transmitted between you and our Website
- Controlled server access with password protection
- We do not store payment card numbers – all payment data is handled by our certified payment gateway
While we take data security seriously, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security against all threats.
10. Grievance Officer & Contact
If you have any questions about this Privacy Policy, or wish to exercise your data rights, raise a concern, or make a complaint about how we handle your personal data, please contact:
Grievance Officer:
Sunita Dhamankar
Silk Culture by Sunita
Thane West, Thane-400608, Maharashtra, India
Email: support@silkculturebysunita.in
Phone: +91 96196 64990
Response Time: We aim to acknowledge your request within 7 days and resolve it within 30 days.
If you are not satisfied with our response, you may escalate your complaint to the **Data Protection Board of India** once the Board’s complaint portal is operational.
11. Links to Other Websites
Our Website may contain links to external websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any website you visit.
12. Children's Privacy
Our Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at support@silkculturebysunita.in and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Last Updated On” date at the top of this page. We encourage you to review this policy periodically.
Continued use of our Website after any changes constitutes your acknowledgement of the updated policy.
14. Legal Disclaimer
This Privacy Policy has been prepared based on current best practices and applicable Indian law, including the Digital Personal Data Protection Act (DPDPA), 2023, and the requirements of the Google Customer Reviews Program Agreement. This document does not constitute legal advice. Silk Culture by Sunita recommends consulting a qualified data protection attorney licensed in India to review this policy before publication, particularly as the DPDPA’s subordinate rules and cross-border transfer notifications are still being finalised by the Government of India.
© 2026Silk Culture By Sunita. All Rights Reserved.
