Skip to main content

Cash on Delivery available on eligible orders

Privacy policy

Privacy Policy

Last updated: 18th August 2026

STRAND operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). STRAND is powered by Shopify, which enables us to provide the Services to you. Payments on our platform are securely processed through Razorpay, and logistics are fulfilled via Shiprocket. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

In compliance with the Digital Personal Data Protection (DPDP) Act, 2023 (India), this policy outlines your rights regarding your personal data and our obligations as a Data Fiduciary. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

 

1. Personal Information We Collect or Process

We may collect or process the following categories of personal information depending on how you interact with the Services:

  • Contact Details: Your name, residential address, billing address, shipping address, phone number, and email address.
  • Financial and Payment Information: Secure transaction details, payment confirmation, preferred form of payment, and basic transaction records. Please note: Your core payment card numbers or UPI credentials are encrypted and securely collected directly by our payment partner, Razorpay. STRAND does not store raw credit card details on its servers.
  • Account Information: Your username, password, security questions, and saved account preferences.
  • Transaction Information: Items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, along with your past order history.
  • Communications Data: Information included in any digital messages or correspondence you send to our customer support team.
  • Device and Technical Information: Information about your device, browser type, network connection, IP address, and other unique network identifiers.
  • Usage Information: Data regarding how and when you navigate, interact with, or browse our online storefront.

 

2. Personal Information Sources

We collect personal information from the following sources:

  • Directly from You: When you create an account, purchase products, or contact customer support.
  • Automatically through the Services: Collected from your device when you interact with our website via tracking cookies, pixels, and similar diagnostic tools.
  • From Service Providers & Partners: Third parties that enable our infrastructure, including Shopify (hosting), Razorpay (payment processing), and Shiprocket (shipping and delivery fulfillment).

 

3. How We Use Your Personal Information

We process your personal data on the basis of your consent, and — for a limited set of purposes such as fulfilling an order you have placed, meeting legal obligations, and preventing fraud — on the basis of the "certain legitimate uses" permitted under **Section 7 of the DPDP Act, 2023.

All marketing, advertising, and behavioural tracking is carried out only with your consent, which you may withdraw at any time.

  • Fulfillment and Service Delivery: To process your transactions, manage your customer account, facilitate returns or exchanges, secure order payments, and share necessary address details with Shiprocket to ensure your package is successfully delivered.
  • Marketing and Advertising: To share tailored promotional alerts, text messages, or emails regarding new arrivals or specific discounts on STRAND, subject to your right to opt-out at any time.
  • Behavioral Advertising and Tracking Technologies: We engage in interest-based and behavioral advertising to enhance your shopping experience. To achieve this, our online storefront utilizes tracking tools, including the Meta Pixel and Meta Conversions API (CAPI), provided by Meta Platforms, Inc. These tools automatically collect and securely transmit behavioral event data from your browsing session (such as pages visited, items added to your cart, and completed purchases) directly to Meta. Meta processes this information to optimize ad delivery, measure conversion efficiency, and customize advertisement targeting across Facebook and Instagram based on your interaction with STRAND STUDIO LLP. The data transmission and personalization functions comply with Meta’s independent data handling framework and privacy rules.

Your control over tracking. We ask for your consent to advertising and analytics cookies before any tracking begins. You can change or withdraw that consent at any time via the "Cookie Preferences" link in our footer. Withdrawing is as straightforward as giving consent, and withdrawing will not affect your ability to shop with us.

  • Security and Fraud Prevention: To authenticate active accounts, monitor for malicious or fraudulent transaction activity, protect public safety, and ensure a secure checkout loop.
  • Customer Support: To respond to queries, troubleshoot checkout challenges, and maintain an active consumer relationship.
  • Legal Compliance: To comply with valid Indian statutory obligations, tax requirements, regulatory frameworks, or explicit law enforcement directives under the Information Technology Act, 2000.

 

4. How We Disclose Personal Information

We share personal data with specific business third parties only to safely execute our core operational services:

  • Shopify: Our primary e-commerce platform provider.
  • Razorpay Secure: Our integrated third-party payment aggregator to authenticate and settle transactions.
  • Shiprocket: Our logistics partner to manage domestic tracking and home delivery routing.
  • Meta Platforms, Inc.: We transmit digital interaction data via tracking scripts to Meta to facilitate our targeted social media advertising campaigns. You may manage or opt out of personalized tracking surfaces directly within your Facebook or Instagram profile settings via Meta’s centralized ad preferences control panels.
  • Corporate Actions: In the event of a legitimate business transfer, merger, or legal restructuring, data may be transferred to successor entities as permitted under Indian law.

 

5. Data Retention, Storage, and Cross-Border Transfers

We retain your data only as long as we need it:

Data Retention

Order and invoice records - 8 years, as required under s.36 of the CGST Act, 2017

Account details -  While your account is active; deleted 3 years after last activity

Marketing consent records - Until withdrawn, plus 3 years as proof of consent

Support correspondence - 3 years from resolution

Analytics and advertising data - 26 months

 

After these periods we delete or irreversibly anonymise the data.

 

Storage and Cross-Border Transfers

Because our storefront runs on Shopify, some data is processed on servers outside India. Section 16 of the DPDP Act, 2023 permits such transfers except to countries restricted by the Central Government; we do not transfer personal data to any restricted country. Our processors are bound by contract to protect your data to the standard this policy describes.

 

6. Your Rights Under Indian Data Protection Law

In alignment with the Digital Personal Data Protection (DPDP) Act, 2023, you have the following rights regarding your personal data:

  • Right to Access and Summary: You can request a summary of the personal data we process about you and the identities of third parties with whom it has been shared.
  • Right to Correction and Erasure: You have the right to correct inaccurate data or request that we completely delete your personal information when it is no longer required for active transactional purposes.
  • Right to Withdraw Consent: You may withdraw your consent for promotional processing at any time by using the "unsubscribe" link embedded in our emails or by contacting support.
  • Right to Grievance Redressal: You have the right to register a formal complaint regarding data management directly with our designated Grievance Officer.
  • Right of Nomination: Under s.14 of the DPDP Act you may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity. Email strandfounder@gmail.com to record a nomination.
  • Right to complain to the Data Protection Board: If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India. We ask that you raise it with our Grievance Officer first — we acknowledge within 48 hours and respond substantively within 30 days.

 

7. Children’s Data

Our Services are intended for adults. We do not knowingly collect personal data from anyone under 18.

Where we do process a child's data, we will do so only with verifiable consent from a parent or lawful guardian, as required by s.9 of the DPDP Act, 2023.

We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children in any circumstances, and no consent will be treated as authorising this.

If you believe a child has provided us data, email strandfounder@gmail.com and we will delete it.

 

8. Security Disclaimers

We enforce strict commercial security layers to protect your information. However, please note that no digital transmission over the internet or cloud storage network can be guaranteed as 100% impenetrable. We highly advise against sharing sensitive account credentials or raw financial information over unencrypted communication channels like standard chat applications or open emails.

 

9. Grievance Officer Contact Information

We acknowledge every data-protection grievance within 48 hours with a ticket number and respond substantively within 30 days.

In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023, the contact details of the Grievance Officer for STRAND STUDIO LLP are officially listed below:

  • Name: Taksh Maheshwari
  • Designation: Grievance Officer
  • Address: Strand Studio LLP, T-6, Tower 5, Mana Tropicale, Carmelram, Bangalore South, Bangalore, Karnataka, India, 560035
  • Email: strandfounder@gmail.com
  • Phone: +91-8904986853

 

10. Personal Data Breaches

If a breach affects your personal data, we will notify you and the Data Protection Board of India as required under s.8(6) of the DPDP Act, 2023, without undue delay. Our notice will describe what happened, what data was affected, what we've done about it, and what you should do.

 

We maintain an internal incident response procedure and report qualifying cyber security incidents to CERT-In within 6 hours of becoming aware of them, in accordance with the CERT-In Directions of 28 April 2022.

 

11. Language of this Notice

This notice is published in English. You may request it in any language listed in the Eighth Schedule to the Constitution of India by emailing strandfounder@gmail.com.