Privacy Policy

1. Who we are

SuitPunjabi runs the SuitPunjabi app and suitpunjabi.com, a marketplace for Punjabi fashion and tailoring. We are the data controller (data fiduciary under India's Digital Personal Data Protection Act) for the personal data described here. Sellers on the marketplace are separately responsible for the buyer details they receive to fulfil orders. Contact: privacy@suitpunjabi.com.

2. What we collect

When you browse

You can browse without an account. The app stores your chosen country, language and saved items on your device. The website uses only the cookies needed to keep seller and staff accounts signed in; it does not use advertising or analytics cookies, and any future analytics will only run if you opt in. See the cookie policy.

When you create an account

Contact details: your phone number or email address (used to send your sign-in code) and the name you give us.
Preferences: country, language and currency.

When you use the marketplace

Saved items and follows (wishlist, stores you follow).
Messages you send to sellers or buyers, including photos, quotes and measurement cards.
Measurement profiles you save for yourself or family members.
Orders: items, delivery address and phone, order status and history, and payment status. Card and UPI details are entered with our payment partner (Razorpay) and are never seen or stored by us.
Reviews, reports and blocks you make, and support requests you send.
Technical data: your account ID and the security logs of our hosting provider (for example IP address and time of sign-in), used to keep the service secure.

If you sell

Store details (name, type, city and region, contact email and phone, categories, shipping countries, return policy), your listings and photos.
Verification documents you upload (for example identity and business documents), and tax registration details if you give them.
Subscription and billing records for your seller plan. Plan payments are taken on our website by Razorpay (India) or Stripe (other countries); we do not see full card details.

We do not collect your precise location, contacts, or health data, and the app accesses your camera or photo library only when you choose to add a photo. The app does not currently include analytics, advertising or crash-reporting SDKs and we do not track you across other companies' apps or websites.

3. How we use it

To run your account and sign you in (performance of our contract with you).
To show listings, deliver your messages, process orders and payments, and let sellers fulfil them (contract).
To verify sellers, prevent fraud and abuse, enforce our terms, and review reports (legitimate interests and legal obligations).
To keep tax, accounting and consumer-protection records (legal obligation).
To send service messages about your orders, chats and account. We do not send marketing without your consent.

Sellers you buy from or message: your name, the messages you send and, for orders, your delivery address and phone. Measurement profiles are shared only when you send one in a chat or attach it to an order, and the seller receives a copy of that profile only.
Service providers acting on our instructions: Supabase (database, sign-in and file storage), Vercel (website hosting), Razorpay and Stripe (payments), and our SMS and email providers (sign-in codes and service messages).
Authorities when the law requires it, and professional advisers under confidentiality.

We do not sell personal data, and we do not share it for advertising.

5. International transfers

Buyers and sellers are in several countries, so data is processed in the countries where our providers host it (for example India, Singapore, the EU or the United States) and in the seller's country. Where the law requires, we use contractual safeguards such as standard contractual clauses.

6. How long we keep it

Account, profile, saved items, measurements and addresses: until you delete them or your account.
Messages: for as long as the conversation exists for the other person. If you delete your account, the text and photos you sent are removed and the other person sees that the messages were deleted.
Orders, payments, refunds and invoices: kept for at least 8 years to meet tax and accounting law, with your name and contact details removed from your account when you delete it.
Reports and moderation records: up to 3 years, to handle repeat abuse and legal claims.
Records of the consents you gave: for as long as we need to show we had them.

7. Your rights and choices

Access and portability: in the app, go to Account → Download my data to get a copy of your profile, addresses, orders, reviews, measurement profiles and the messages you sent, as a JSON file.
Correction: edit your name in the app, and your addresses and measurements where you saved them.
Deletion: Account → Delete account removes your account in the app. See Delete your account for what is kept and how to ask by email.
Objection, restriction and withdrawal of consent: email privacy@suitpunjabi.com.
Complaints: contact our Grievance Officer (grievance@suitpunjabi.com) first. You can also complain to your data protection authority (for example the Data Protection Board of India, the UK ICO, your EU supervisory authority, the Office of the Privacy Commissioner of Canada or the OAIC in Australia).

We answer requests within one month (sooner where local law requires) and may need to confirm your identity first.

8. Security

Data is encrypted in transit, access is limited by role (staff accounts need two-factor authentication), and database rules restrict each user to their own data. No system is perfectly secure; we will tell you and the authorities about a breach where the law requires.

9. Children

Accounts are for people aged 18 or over. We do not knowingly collect personal data from children; contact us if you think we have.

10. Changes

We will post any update here with a new date, and tell you in the app before a significant change takes effect. Questions: privacy@suitpunjabi.com or support@suitpunjabi.com.