Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how we collect, use, and disclose your information as described below. If there is a conflict between our Terms & Conditions and this Privacy Policy, this Privacy Policy controls with respect to your personal information.

1. Information We Collect

"Personal information" refers to information that identifies or can reasonably be linked to you. Depending on how you interact with us, we may collect:

• Contact details — your name, billing and shipping address, and email address.
• Financial information — payment card details, transaction history, and form of payment (processed securely through Shopify's payment infrastructure).
• Account information — your username, password, and preferences.
• Transaction information — items viewed, added to cart or wishlist, purchased, returned, or exchanged.
• Communications — information you share when contacting our support team.
• Device information — your browser, network connection, IP address, and similar identifiers.
• Usage information — how you interact with and navigate the Services.

2. How We Collect Information

• Directly from you — when you create an account, place an order, or contact us.
• Automatically — through cookies and similar technologies as you browse the Site.
• From our service providers — including payment processors, analytics providers, and fulfillment partners.
• From our partners or other third parties.

3. How We Use Your Information

• To provide and improve the Services — process payments, fulfill orders, manage your account, arrange shipping, and facilitate returns and exchanges.
• Marketing and advertising — sending you promotional emails and relevant offers, where you have not opted out.
• Security and fraud prevention — authenticating your account and protecting against fraudulent or malicious activity.
• Customer support — responding to your questions and maintaining our relationship with you.
• Legal compliance — meeting our obligations under applicable law and enforcing our policies.

4. How We Share Your Information

We may disclose your personal information to third parties for legitimate business purposes, including:

• With Shopify and other vendors who perform services on our behalf (payment processing, data analytics, customer support, cloud storage, fulfillment, and shipping).
• With business and marketing partners to provide advertising services, in accordance with their own privacy notices.
• When you direct or consent to disclosure, such as through social media widgets or login integrations.
• In connection with a business transaction, such as a merger, or to comply with legal obligations, enforce our policies, or protect our rights and the rights of our users.

We do not sell your personal information. If you would like to opt out of any data sharing for targeted advertising, email us at bombayberri@gmail.com and we will process your request.

5. Our Relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your access to and use of the Services in order to provide and improve them for you. Information you submit will be transmitted to and shared with Shopify, as well as third parties that may be located outside your country of residence. To learn more about how Shopify uses your personal information, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights over your data through the Shopify Privacy Portal.

6. Third-Party Links

The Services may link to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of these third parties. We encourage you to review their policies before providing any personal information.

7. Children's Privacy

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, please contact us at bombayberri@gmail.com and we will take steps to delete it.

8. Data Security & Retention

We take reasonable measures to protect your personal information, though no method of transmission or storage is completely secure. We recommend avoiding unsecure channels when sharing sensitive information with us.

We retain personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations, and resolve disputes.

9. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Right to Access. Request access to the personal information we hold about you.
• Right to Delete. Request that we delete personal information we maintain about you.
• Right to Correct. Request that we correct inaccurate personal information.
• Right of Portability. Request a copy of your personal information, or that we transfer it to a third party.
• Right to Opt Out. Opt out of the sale or sharing of your personal information for targeted advertising, where applicable.
• Communication Preferences. Unsubscribe from promotional emails at any time using the link in our emails; you may still receive non-promotional emails about your account or orders.

If you reside in the UK or European Economic Area

You may also have the right to object to or restrict our processing of your personal information, and to withdraw consent where we rely on it, without affecting the lawfulness of processing carried out before withdrawal.

You may exercise any of these rights by contacting us at bombayberri@gmail.com. We may need to verify your identity before processing your request, and will respond within the timeframe required by applicable law.

10. Complaints

If you have concerns about how we process your personal information, please contact us at bombayberri@gmail.com. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

11. International Transfers

We may transfer, store, and process your personal information outside the country you live in. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the transfer is to a country deemed to provide an adequate level of protection.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. Any changes will be posted on this page along with an updated "Last updated" date.