What we collect, why we collect it, how long we keep it and what you can ask us to do with it.
SUROTHIYA FABRICS is a registered entity incorporated in India and is the data fiduciary responsible for the personal data described in this policy. Our registered office is at 1st Floor, 64, Ahilya Nagar Main, Indore, Madhya Pradesh - 452009. You can reach us at support@surothiyafabrics.com.
This policy is published in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
We collect only what is needed to take an order, deliver it and answer questions about it.
We do not collect or store your card number, UPI PIN, CVV, bank credentials or any other payment credential. Payments are handled entirely by our payment gateway on its own infrastructure.
| Purpose | Data used | Basis |
|---|---|---|
| Processing and delivering your order | Identity, delivery, order | Performance of contract |
| Order confirmations and delivery updates | Identity, order | Performance of contract |
| Answering support and return requests | Identity, order, correspondence | Performance of contract |
| Tax records and statutory invoicing | Identity, order | Legal obligation |
| Fraud prevention and site security | Technical, order | Legitimate interest |
| Marketing emails | Email address | Your consent |
Where we rely on consent — the newsletter is the only such case — you can withdraw it at any time using the unsubscribe link in any email, or by writing to us. Withdrawing consent does not affect anything we did before you withdrew it.
We do not sell personal data, and we do not share it for anyone else's advertising. We share the minimum necessary with:
We use cookies and similar browser storage to keep your bag between visits and to understand which pages people use. Your bag is stored locally in your own browser and is never uploaded to us until you place an order. You can clear or block this storage in your browser settings; the site will still work, but your bag will not be remembered.
Order and invoice records are retained for eight years, as required under Indian tax law. Support correspondence is kept for three years. Marketing consent records are kept until you withdraw consent and for one year afterwards. Server logs are kept for twelve months. After these periods, data is deleted or irreversibly anonymised.
The site runs over HTTPS with a valid TLS certificate. Access to order data is restricted to authorised staff through an authenticated admin panel. Payment credentials never touch our systems. We keep our software patched and follow reasonable security practices as required under the IT Rules, 2011. No system is perfectly secure, and if a breach affects your data we will notify you and the Data Protection Board as required.
Under the Digital Personal Data Protection Act, 2023, you may ask us to:
Write to support@surothiyafabrics.com with enough detail to identify your order. We respond within 30 days.
This site sells children's clothing but is intended to be used by adults. We do not knowingly collect personal data directly from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.
In accordance with the Information Technology Act, 2000 and the rules made under it, complaints about the handling of personal data may be addressed to our grievance officer:
Full details are on the grievance redressal page. We acknowledge complaints within 48 hours and resolve them within 30 days.
If we change this policy we will update the date at the top of this page. Material changes will also be announced on the site. Continued use of the site after a change means you accept the updated policy.
This policy is governed by the laws of India, and any dispute arising from it is subject to the courts at Madhya Pradesh.