Privacy Policy

This policy applies to varashreeluxury.in, our WhatsApp and social channels, and any purchase you make with Varashree Luxury. It explains what personal information we collect, why we collect it, who we share it with, and the choices you have. By using our site or placing an order, you agree to the practices described here.

We are a small, India-based handloom atelier. We collect only what we need to make, ship and stand behind every piece — nothing is collected for its own sake.

You give us directly

• Name, email address, phone number and postal address, when you create an account, check out, or contact us.
• Order details — the pieces you buy, sizing notes, and any bespoke or commission requests.
• Your wishlist and saved items, once you're signed in.
• Anything you send us directly, over email, WhatsApp, Instagram or our contact form.

Collected automatically

• Device and browser type, approximate location (city-level, from IP address), and pages viewed.
• Cookies and similar technologies — see Cookies & tracking below.

From others

• Payment confirmation from Razorpay (we never see or store your full card, UPI PIN, or net-banking credentials).
• Delivery status from our courier partners.

• To process, confirm, pack and ship your order, and to reach you about it.
• To run your account, wishlist, and order history.
• To respond when you contact us, including sizing or bespoke requests.
• To send updates you've opted into — new collections, restocks, or events — which you can unsubscribe from at any time.
• To keep the site secure, prevent fraud, and meet our legal and tax obligations.
• To understand, in aggregate, how the site is used, so we can improve it.

We do not sell your personal information to anyone, for any reason.

For customers in India, we process your information under the Digital Personal Data Protection Act, 2023 — on the basis of your consent (given when you create an account, place an order, or subscribe to updates) and, where applicable, to perform the contract of sale itself.

For customers ordering from outside India, we apply the same standard of care and, where a stricter regime such as the EU/UK GDPR applies to you, we honour the additional rights it grants (see Your rights).

All payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Your card, UPI, or net-banking details are entered directly into Razorpay's secure checkout and are never transmitted to or stored on our servers. We only receive confirmation that a payment succeeded or failed, and a transaction reference.

We use cookies and similar technologies to keep you signed in, remember your cart and wishlist, and understand how the site is used.

You can block or delete cookies in your browser settings; essential cookies are required for checkout and account features to work.

We share only what's necessary, only with partners who help us run the business:

• Razorpay, to process payment.
• Courier and logistics partners, to deliver your order — this is limited to name, address and phone number.
• Service providers who host our site, send email, or support our operations, bound by confidentiality.
• Authorities, only where required by law, such as a valid court order or tax requirement.

We ship worldwide. If you order from outside India, your information is transferred to and processed in India, where our systems and partners are based. We apply the same safeguards described in this policy regardless of where you're ordering from.

We keep order and account information for as long as your account is active, and afterwards for as long as needed to meet tax, accounting and legal record-keeping requirements — typically up to 8 years for financial records under Indian law. You can ask us to delete your account and associated data at any time; see Your rights below.

We use industry-standard measures — encrypted connections (HTTPS/TLS), access controls, and secure hosting — to protect your information. No online system is completely immune to risk, but we treat your data with the same care we'd want for our own.

• Access — ask what personal information we hold about you.
• Correction — ask us to fix inaccurate or incomplete information.
• Deletion — ask us to delete your account and personal data, subject to legal retention requirements.
• Withdraw consent — opt out of marketing emails at any time, or close your account.
• Grievance redressal — raise a complaint about how your data has been handled.

To exercise any of these, write to us — see Contact below. We aim to respond within 30 days. If you're signed in, you can also action Access and Deletion instantly, right here:

Varashree Luxury is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we'll remove it.

We may update this policy as our practices or the law changes. The "Last updated" date at the top will always reflect the most recent revision. Material changes will be flagged on the site or by email where appropriate.