Privacy Policy

Who we are

This policy applies to SOFT DRIP (“we”, “us”, “our”) — the online store at our website where you browse and buy socks and related products. When this policy says “you”, we mean visitors and customers who use the site or place orders.

Information we collect

• Account & contact: name, email address, phone number, and password (stored securely; we never store your password in plain text).
• Orders & delivery: shipping and billing addresses, order contents, payment method type (e.g. card, UPI, COD), and transaction references needed to fulfil and support your purchase.
• Support & enquiries: anything you send us by email, contact forms, or chat — including attachments you choose to share.
• Technical & usage: IP address, device and browser type, general location (e.g. country or city), pages viewed, and approximate timestamps — to keep the site secure, fix errors, and understand how people use the store.

Card numbers, UPI IDs, and full payment credentials are handled by our payment partners (such as Razorpay). We do not store your full card details on our servers.

How we use your information

• To process payments, ship orders, and send order updates.
• To create and manage your account and sign you in safely.
• To answer questions, handle returns, and resolve disputes.
• To detect fraud, abuse, and security issues.
• To improve the website, products, and customer experience (including analytics in aggregated form where possible).
• To send marketing only if you have opted in — you can unsubscribe anytime from those messages.

Legal bases & consent

We process personal data where it is necessary to perform a contract with you (for example, delivering what you bought), where we have a legitimate interest that is not overridden by your rights (for example, fraud prevention or improving the service), or where you have given consent (for example, marketing emails). Where the law requires explicit consent for certain processing, we will ask for it clearly.

Who we share data with

• Service providers who help us run the store: hosting and database (e.g. Supabase), payments (e.g. Razorpay), email delivery, analytics, and customer support tools — only on our instructions and under appropriate safeguards.
• Logistics partners to deliver your order (name, address, phone, and package details they need).
• Authorities when required by law, court order, or to protect our rights, customers, or the public.

We do not sell your personal information to data brokers.

Cookies & similar tech

We use cookies and similar technologies for essential site functions (such as keeping you signed in and remembering your bag), security, and — where allowed — analytics and preferences. You can control cookies through your browser settings; blocking some cookies may limit certain features.

How long we keep data

We retain information only as long as needed for the purposes above — for example, order and tax records for the period required by law, account data while your account is active, and support emails for a reasonable period to resolve issues. When retention is no longer necessary, we delete or anonymise data where we can.

Security

We use industry-standard measures (encryption in transit, access controls, and secure infrastructure) to protect your information. No method of transmission or storage is 100% secure; if we become aware of a breach that affects you materially, we will notify you where the law requires us to.

Your rights

• Access & correction: You can ask what we hold about you and request corrections to inaccurate data.
• Deletion & restriction: You may ask us to delete or restrict certain processing, subject to legal exceptions (such as records we must keep for tax or disputes).
• Object & withdraw consent: You can object to certain processing or withdraw consent where processing is consent-based (e.g. marketing).
• Grievance: If you are in India and have concerns under applicable privacy law (including the Digital Personal Data Protection Act, 2023), you may contact us using the details below; we will respond within a reasonable time.

Children

Our store is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a minor has provided us data, please contact us and we will take steps to delete it.

International transfers

Some of our service providers may process data outside India. Where that happens, we rely on appropriate safeguards (such as contractual clauses) as required by applicable law.

Changes to this policy

We may update this page from time to time. The “Last updated” date at the top will change when we do. For material changes, we may also notify you by email or a notice on the site. Continued use after updates means you accept the revised policy, except where the law requires otherwise.