Privacy policy

Privacy Policy

Last Updated: 16 May 2026

Welcome to Rriwaayat ("we," "us," or "our"). We are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or make a purchase from www.rriwaayat.com (the "Store"). Please read this policy carefully. By using our Store, you consent to the practices described herein.

1. About Our Platform

Our Store is hosted on Shopify Inc., a third-party e-commerce platform that provides us with the online infrastructure to sell our products. As a result, Shopify may collect, store, and process certain data on our behalf. Your data is stored through Shopify's secure servers and databases. We encourage you to review Shopify's Privacy Policy at https://www.shopify.com/legal/privacy to understand how they handle your information.

2. Information We Collect

We collect the following categories of personal data:

Information you provide directly:

  • Full name
  • Email address
  • Phone number
  • Shipping and billing address
  • Payment information (processed securely — see Section 5)
  • Order details and purchase history
  • Any messages or inquiries you send us

Information collected automatically:

  • IP address and device type
  • Browser type and version
  • Pages visited, time spent, and referral source
  • Cookie data and browsing behaviour on our Store (see Section 7)

3. How We Use Your Information

We use your personal data for the following purposes:

  • Processing, fulfilling, and shipping your orders
  • Sending order confirmations, shipping updates, and delivery notifications
  • Providing customer support and responding to queries
  • Improving our website's performance and user experience
  • Sending promotional emails or offers (only if you have opted in — you may opt out at any time)
  • Complying with legal obligations under applicable Indian and international laws
  • Detecting and preventing fraud or unauthorised transactions

4. Legal Basis for Processing (International Customers)

For customers located in the European Economic Area (EEA) or United Kingdom, we process your data under the following lawful bases as required by GDPR:

  • Contract performance — to process and fulfil your order
  • Legitimate interests — to improve our services and prevent fraud
  • Consent — for marketing communications, which you may withdraw at any time
  • Legal obligation — to comply with applicable laws

For customers in California, USA, we comply with the CCPA/CPRA. You have the right to know what personal data we collect, request deletion, and opt out of any data sale (note: we do not sell your data).

For customers in India, we operate in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000. You have the right to access, correct, and request erasure of your personal data.

5. Payment Security

All payment transactions are processed through PCI-DSS compliant third-party payment gateways (such as Razorpay, Shopify Payments, or similar). We do not store, view, or have access to your full credit/debit card number, CVV, or net banking credentials. Payment data is encrypted and handled entirely by our payment processors, who maintain their own security standards. For more information, refer to the respective payment provider's privacy policy.

6. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties. However, we may share your data with trusted service providers strictly to operate our business, including:

  • Shopify Inc. — our e-commerce platform provider
  • Payment processors — to complete your transactions securely
  • Shipping and logistics partners — to deliver your orders domestically and internationally
  • Email and marketing tools — only if you have opted in (e.g., for newsletters)
  • Analytics providers — such as Google Analytics, to understand site usage (anonymised where possible)
  • Legal authorities — if required by law, court order, or to protect our rights

All third parties we work with are contractually obligated to keep your data secure and use it only for the specified purpose.

7. Cookies and Tracking Technologies

Our Store uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device. We use:

  • Essential cookies — required for the Store to function (e.g., your shopping cart, session data)
  • Analytics cookies — to understand how visitors interact with our Store (e.g., Google Analytics)
  • Marketing/advertising cookies — if you have consented, to show relevant ads (e.g., Meta Pixel)

You may disable cookies through your browser settings at any time. However, disabling essential cookies may affect your ability to browse or complete purchases on our Store. Shopify also sets certain cookies necessary for platform functionality — details of these are available in Shopify's Cookie Policy.

8. Data Retention

We retain your personal data only as long as necessary:

  • Order and transaction data is retained for a minimum of 7 years to comply with Indian tax and accounting laws (GST requirements)
  • Marketing data is retained until you withdraw consent or unsubscribe
  • Account data is retained for as long as your account remains active

Upon request, we will delete or anonymise your data, subject to any legal retention obligations.

9. International Data Transfers

We ship to customers across India and worldwide. If you are located outside India, your data may be transferred to and processed in India or in the country where our service providers (including Shopify) operate. By placing an order, you consent to such transfer. We take reasonable steps to ensure your data is handled securely regardless of where it is processed.

10. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Withdraw consent for marketing communications at any time
  • Object to or restrict certain processing activities
  • Data portability — receive your data in a structured, machine-readable format (where applicable)

To exercise any of these rights, please contact us at the details in Section 12. We will respond within 30 days.

11. Children's Privacy

Our Store is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us immediately and we will take steps to delete such data.

12. Contact Us

For any privacy-related concerns, data requests, or complaints, please reach out to our Privacy Officer:

Rriwaayat 📧 Email: rriwaayat18@gmail.com 🌐 Website: www.rriwaayat.com

We aim to respond to all privacy enquiries within 30 business days.

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page will reflect the most recent revision. We recommend checking this page periodically. For significant changes, we may notify you via email or a notice on our Store.

This policy applies to all customers shopping from Rriwaayat, whether based in India or internationally.