Last updated 1 October 2026. This notice explains, as India's Digital Personal Data Protection Act, 2023 (DPDP Act) requires, what personal data we collect, why, and the choices you have.
Who we are
The data fiduciary responsible for your personal data is:
Arha SareesBeeramguda,
Rama Chandra puram (RC Puram)
Hyderabad - 502032
What we collect, and why
- Your account — your phone number (how you sign in), and the name and email you add. If you sign in with a third-party account, we receive your name, email address and profile photo from that service. Used to run your account and reach you about your orders.
- Your orders — what you bought, the delivery name, address and phone number, the amounts and how you paid. Used to deliver, invoice, and handle cancellations, returns and refunds. We never see or store your card, UPI or bank details — payments are handled entirely by our payment gateway.
- Messages you send us — through the Contact Us form: your name, email, phone, any order number and your message. Used only to answer you.
- Back-in-stock requests — your name, email and (if you give it) WhatsApp number. Used only to tell you once when that saree is back.
- Reviews — your rating, words and any photos you add, shown on the saree's page with your first name and last initial (e.g. “Priya S.”).
- Your saved preferences — addresses, wishlist, cart, and whether you want marketing messages.
- Technical data — the sign-in and cart cookies described below, and your IP address, used briefly to stop abuse such as repeated sign-in attempts. Page-speed measurements are collected without identifying you.
You give us these details to shop with us, and we use them only for that purpose. We don't sell personal data, and we don't use it for advertising profiles.
Marketing messages
We send offers and new-arrival messages by email, SMS or WhatsApp only if you opt in — the box at checkout or in your account is never pre-ticked, and you never have to tick it to buy. You can withdraw at any time, as easily as you gave it: untick it in your account, use the unsubscribe link in any marketing message, or ask us. Messages about your orders, returns and refunds are not marketing and continue either way. We keep a record of when you gave or withdrew consent.
Who we share it with
Only with the service providers that help us run the store, each for its one job and bound to use your data only for us:
- our payment gateway — to take online payments;
- our shipping and courier partners — to pick up and deliver your order (your delivery name, address and phone);
- our email and SMS providers — to send order updates, and offers if you opted in;
- our website hosting, database and image-storage providers — where the store, its data and its photos are kept;
- a third-party sign-in service — only if you choose to sign in with one;
- an AI service provider — only if you use our saree advisor chat, and only the messages you type there (never your name, phone, email or orders). We don't keep those messages.
Some of these providers process data outside India — our database, for example, is hosted in the United States. The DPDP Act allows this except to countries the Government of India restricts, and we will follow any such restriction. We share personal data with authorities only when the law requires it.
How long we keep it
- Orders and invoices — for as long as GST and income-tax law require us to keep business records (currently up to about eight years), then deleted.
- Contact messages — deleted 12 months after the conversation last moved.
- Back-in-stock requests — deleted 12 months after you make them.
- If you delete your account — your addresses, wishlist, cart, reviews, back-in-stock requests and marketing consent are deleted at once, and you're signed out everywhere. Your phone and email are kept only while an order still needs them (on its way, or open for a return or refund) and erased after that — within 6 months at most. Your orders stay, as tax law requires, with the name and address they were invoiced to but without your phone number.
Deletions run automatically every day.
Cookies
We use only essential cookies — to keep you signed in, remember your cart and protect the site. We don't use advertising or tracking cookies. Blocking cookies in your browser will stop sign-in and checkout from working.
Your rights
Under the DPDP Act, you can:
- ask for a summary of the personal data we hold about you and who we've shared it with;
- correct or update it — most of it directly in your account;
- have it erased — use Delete Account in your profile, or ask us (see “How long we keep it”);
- withdraw your consent to marketing at any time;
- nominate someone to exercise these rights for you in the event of your death or incapacity;
- raise a grievance with us, and if it isn't resolved, complain to the Data Protection Board of India.
To use any of them, contact us or our Grievance Officer below.
Children
Our store is for adults. We don't knowingly collect personal data from anyone under 18.
Keeping it safe
Encrypted connections throughout, sign-in codes stored only in hashed form, strict access controls with two-factor sign-in for our staff, and a PCI-DSS compliant payment gateway. If a breach ever affects your data, we'll tell you and the Data Protection Board as the law requires.
Changes to this notice
When we change what we do with your data, we update this page and its date above; a change that needs your consent will ask for it.
Contact & grievances
For any privacy request or grievance, reach our Grievance Officer, Ashwini B (Grievance Office), at arhasareessupport@gmail.com or +9199889511132. Complaints are acknowledged within 48 hours and resolved within one month.
