Privacy Policy.

Depending on how you interact with Siffis Shop, we may collect personal information that you provide directly to us or that is generated automatically when you use our website.

We may process personal information for purposes reasonably connected with operating our e-commerce business and providing products and services to you.

• Creating and managing customer accounts.
• Processing, confirming and fulfilling orders.
• Arranging shipping, delivery, returns, replacements and refunds where applicable.
• Sending transactional messages relating to orders and account activity.
• Responding to enquiries, complaints and customer-support requests.
• Preventing fraud, misuse, unauthorised access and security incidents.
• Maintaining website performance, functionality and technical security.
• Maintaining records required for accounting, taxation, compliance and dispute resolution.
• Sending promotional communications where permitted and where the required consent or other lawful basis exists.
• Complying with applicable laws, regulations, court orders and lawful government requests.

We process personal data only for lawful purposes and in accordance with applicable Indian law. Depending on the circumstances, processing may be based on your consent, actions taken at your request, legitimate statutory uses or another lawful basis recognised under applicable law.

Where processing relies on your consent, you may withdraw that consent using an available mechanism or by contacting us. Withdrawal will not affect processing already lawfully completed before the withdrawal and may affect our ability to provide a service that requires the relevant information.

When you place an order, we collect information necessary to process the transaction, provide the products purchased, communicate with you and maintain transaction records.

Our website may use cookies and similar technologies to support website functionality, maintain sessions, remember cart contents, authenticate users, improve security and understand website performance.

You may be able to control non-essential cookies through available website controls or your browser settings. Disabling essential cookies may prevent certain website functions from working correctly.

We do not disclose personal information merely because it has commercial value. Information may, however, be shared with service providers when reasonably necessary to operate our business or fulfil a transaction.

• Payment gateways and payment service providers.
• Courier, logistics, shipping and delivery service providers.
• Website hosting, cloud, technical-support and cybersecurity providers.
• Communication, email and notification service providers.
• Analytics or website-performance providers where such services are enabled.
• Accountants, auditors, professional advisers or service providers where reasonably required.
• Government authorities, courts or regulators where disclosure is required by applicable law.
• Parties involved in a lawful corporate restructuring, merger, transfer or similar business transaction, subject to applicable law.

Where third parties process personal information on our behalf, we seek to use appropriate contractual, organisational or technical safeguards as required under applicable law.

Personal information is retained only for as long as reasonably required for the purpose for which it was collected or for another lawful purpose.

Retention periods may depend on the nature of the information, transaction history, applicable tax or accounting requirements, fraud-prevention needs, dispute-resolution requirements and other legal obligations.

When personal data is no longer required and retention is not otherwise legally necessary, we may delete, anonymise, de-identify or otherwise securely dispose of the information in accordance with applicable requirements.

We seek to use reasonable security safeguards appropriate to the nature of the personal information processed and the risks associated with such processing.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Users should also protect their account credentials and avoid sharing passwords or authentication information with others.

Subject to applicable law and any relevant exceptions, you may have rights in relation to your personal data, including the ability to request:

We may need to verify your identity before processing certain privacy requests. Rights are subject to applicable law, legal exemptions and information we are required to retain.

Our website is intended for general e-commerce use and is not designed for children to independently provide personal information or enter into purchases without appropriate parental or guardian involvement.

Where processing of children's personal data is subject to special consent, verification or other requirements under applicable law, we intend to process such information only in accordance with those requirements.

Our website may contain links to or integrations with third-party websites, payment systems, shipping providers, social platforms or other external services.

Those third parties operate independently and may maintain their own privacy policies, terms and data-processing practices. We encourage you to review the relevant policies before providing personal information directly to a third party.

We may update this Privacy Policy when our business practices, website functionality, service providers or applicable legal requirements change.

Any revised version may be published on this page with an updated revision date. Where required by applicable law, we may provide additional notice or request fresh consent before materially different processing occurs.