Dham Clothing
Privacy Policy
Last updated: August 2026
Data Fiduciary — Our Status Under DPDPA 2023
Under the Digital Personal Data Protection Act, 2023 (DPDPA), Dham Clothing is classified as a Data Fiduciary. This means we determine the purpose and means of processing your personal data and are legally responsible for protecting it. We process personal data only for lawful purposes with your explicit, informed, and freely given consent.
Information We Collect
We collect information you provide when creating an account (name, email, phone), placing an order (delivery address, payment details via Razorpay), or contacting us. We also collect usage data such as pages visited, device type, and browser, where you have consented to analytics. We collect only the minimum data required to fulfil your order and provide our services (data minimisation).
Lawful Basis for Processing
We process your personal data on the following lawful bases: (1) Contract performance — processing your name, address, and phone to deliver orders; (2) Legal obligation — retaining order records for 7 years for GST/tax compliance (Income Tax Act, CGST Act); (3) Legitimate interests — fraud prevention and customer support; (4) Consent — marketing communications, analytics, and any optional processing. Consent is always separate, granular, and can be withdrawn at any time from My Profile → Language & Communication Preferences.
Purpose Limitation
Data collected for order delivery is not used for any other purpose without your separate, explicit consent. Providing your phone number for delivery does not imply consent to receive marketing messages — these are separate opt-ins.
Payment Security
All payments are processed by Razorpay, a PCI-DSS compliant payment gateway. We do not store your card details on our servers. Payment data is processed and retained by Razorpay under their own privacy policy.
Sharing of Information
We share your data only as necessary: (1) Courier partners (via Shiprocket) receive your name, phone, and delivery address solely to fulfil your orders — they are contractually required to delete this data after delivery; (2) We do not sell your personal data to third parties; (3) Analytics providers receive anonymous usage data only where you have consented; (4) We may disclose data to law enforcement when required by a competent court or authority under applicable Indian law.
Data Retention & Storage Limitation
We retain your account data for as long as your account is active. Order records are kept for 7 years for GST/legal compliance (CGST Act, Income Tax Act). Upon account deletion, your name, email, and phone are removed. Order records are anonymised. Delivery addresses are deleted upon account deletion. Inactive accounts with no orders in 3 years may be deleted. You can request deletion at any time from My Profile → Delete Account.
Cookies
We use strictly necessary cookies to maintain your session and cart. Analytics cookies are only placed with your explicit consent. You can manage cookie preferences from My Profile → Language & Communication Preferences. Disabling session cookies will affect site functionality.
Your Rights as a Data Principal (DPDPA 2023)
Under the DPDPA 2023, you have the following rights: (1) Right to access information about what personal data we hold and how we process it; (2) Right to correction of inaccurate or incomplete data — update from My Account → Edit Profile; (3) Right to erasure — request full account deletion from My Profile → Delete Account; (4) Right to grievance redressal — contact our Grievance Officer within 30 days; (5) Right to nominate — you may nominate another person to exercise your rights in the event of your death or incapacity. To exercise any right, contact: support@dhamclothing.com. We will respond within 30 days.
Children's Privacy (DPDPA 2023 — Significant Data Fiduciary)
Under the DPDPA 2023, we do not knowingly collect personal data of children (under 18 years). We do not serve targeted advertisements to minors. Our site is not directed at children. If you believe a child's data has been collected without parental consent, contact us at support@dhamclothing.com immediately.
Grievance Officer (Consumer Protection E-Commerce Rules 2020 & IT Act 2000)
Please contact us at support@dhamclothing.com for privacy grievances. You may also contact the Data Protection Board of India (once operational). Complaints are acknowledged within 48 hours and resolved within 30 days.
Changes to This Policy
We will notify you of material changes via email and/or a notice on the website at least 7 days before the change takes effect. Continued use after the effective date constitutes acceptance. For material changes affecting your rights, we will request fresh consent.
Contact
For privacy-related questions or to exercise your data rights, contact us at support@dhamclothing.com.