Privacy Policy

This Privacy Policy explains how Rangrav Handlooms ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website rangrav.com (the "Site"), in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and other applicable laws.

01. What We Collect

We collect only the data that is reasonably necessary to fulfil your order, communicate with you, and run our business:

• Identity & Contact Data: Your name, email address, phone number.
• Shipping Data: Your delivery address, city, state, and pincode.
• Order Data: Items purchased, quantities, payment method, transaction reference.
• Technical Data: IP address, browser type, device information, session activity (collected via cookies and standard server logs).
• Communications: Messages you send us via email, contact form, or phone.

We do not store any card details, CVV, or net-banking credentials. All payment processing happens through MMADPay, our regulated UPI gateway partner.

02. Why We Collect It (Lawful Basis)

We process your personal data only for legitimate purposes, with your consent or where necessary to perform the contract you've entered into with us:

• To process and deliver your orders
• To send order confirmations, shipping updates, and customer service communications
• To handle returns, refunds, and grievances
• To improve our products, website, and customer experience
• To comply with legal and tax obligations (GST records, audit trails)
• To prevent fraud and protect our systems

03. Your Rights Under the DPDP Act

As a Data Principal under the DPDP Act, you have the following rights:

• Right to Access: Request a summary of personal data we hold about you.
• Right to Correction & Erasure: Ask us to correct or delete inaccurate or no-longer-needed personal data.
• Right to Withdraw Consent: Withdraw consent for any processing that is based on your consent — you can do this at any time by writing to us.
• Right to Grievance Redressal: Reach out to our Grievance Officer (details below) for any complaint.
• Right to Nominate: Nominate another person to exercise these rights on your behalf in case of incapacity or death.

To exercise any of these rights, please write to us at care@rangrav.com. We will respond within the timelines prescribed under the DPDP Act.

04. How Long We Keep Data

We retain your personal data only for as long as needed:

• Order & transaction data: 7 years (for GST, tax, and statutory compliance)
• Marketing preferences: Until you withdraw consent
• Customer support tickets: 3 years
• Server logs: 90 days

Once a retention period ends, we delete or anonymise the data securely.

05. Sharing & Disclosure

We do not sell your personal data. We share it only with the parties strictly necessary for fulfilling your order:

• Payment Processor: MMADPay, for processing your UPI payment
• Logistics Partners: Courier and delivery agencies, for shipping your order
• Email/SMTP Provider: For transactional emails (order confirmations, shipping updates)
• Government Authorities: When required by law, court order, or regulatory request

All third parties handling your data are bound by confidentiality obligations and process data only on our instructions.

06. Cookies & Tracking

We use cookies and Google Analytics to improve your browsing experience and understand how the Site is used. These cookies do not collect personally identifiable information unless you provide it. You can disable cookies through your browser settings; some Site features may not function fully without them.

07. Security

We implement reasonable security safeguards including HTTPS encryption for all data in transit, encrypted database connections, restricted internal access, and regular security reviews. However, no method of internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

08. Children's Privacy

Our Site is not intended for individuals under 18. We do not knowingly collect personal data from children. If we discover such data has been collected inadvertently, we will delete it promptly.

09. Marketing Communications

We may send you occasional promotional emails regarding new launches, sales, and brand updates if you've consented to receive them. You can opt out at any time using the unsubscribe link in any marketing email or by writing to us.

10. Grievance Officer

In compliance with the IT Rules, 2021 and DPDP Act, our Grievance Officer is:

We aim to acknowledge any privacy-related complaint within 48 hours and resolve it within 15 days.

11. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page. Material changes will be notified via email or a prominent notice on the Site.

12. Contact

For any privacy-related questions, write to us at care@rangrav.com.