Privacy Policy

This Privacy Policy describes how Nemawari Silk Mills ("we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you visit or make a purchase through our website (the "Website").

We are committed to handling your personal data responsibly and in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

By accessing or using the Website, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Website.

We collect the following categories of information:

• Account information — your name, email address, and password (stored in encrypted form) when you register for an account.
• Google sign-in data — if you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We never receive or store your Google password.
• Order and delivery information — shipping address, phone number, and details of the products you order or enquire about.
• Shopping activity — items you add to your cart or wishlist, and your order history, so we can provide these features across your devices.
• Communications — information you provide when you contact us through our contact form, email, phone, or WhatsApp.
• Technical and usage data — IP address, browser type and version, device type, operating system, pages visited, and access times, collected automatically through server logs and cookies for security and analytics purposes.

We do not collect sensitive personal data such as financial account details, health information, or biometric data through the Website.

We use your personal information for the following purposes:

• To create, maintain, and secure your account, including authentication when you sign in.
• To process, fulfil, and deliver your orders, and to communicate with you about them.
• To provide Website features such as your cart, wishlist, saved addresses, and order history.
• To respond to your enquiries, requests, and complaints.
• To send service-related communications, such as order updates or important changes to our terms or policies.
• To detect, prevent, and address fraud, abuse, security incidents, and technical issues.
• To comply with our legal obligations and enforce our legal rights.

We do not send you promotional or marketing communications unless you have opted in to receive them, and you may withdraw that consent at any time.

We process your personal data on the basis of (a) your consent, which you provide when you create an account, place an order, or otherwise submit information to us; and (b) legitimate uses recognised under applicable law, such as processing necessary to provide a service you have requested, to comply with the law, or to respond to legal process.

You may withdraw your consent at any time by contacting us using the details in the “Contact Us & Grievance Redressal” section below. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, but it may limit our ability to provide certain services to you.

The Website offers “Sign in with Google” as a convenient authentication option. When you use it, Google shares limited profile information with us — your name, email address, and profile picture — solely so that we can create and operate your account.

We do not gain access to your Gmail, Google contacts, Google Drive, or any other Google services or data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Your use of Google sign-in is also governed by Google's own Privacy Policy, available at https://policies.google.com/privacy.

Orders placed through the Website are confirmed and completed through WhatsApp or direct communication with our team. We do not collect or store debit card, credit card, UPI, or bank account details on the Website.

Any payment you make is completed through the payment method agreed with our team (for example, UPI or bank transfer). Such payments are processed by the respective payment service and are subject to that service's own terms and privacy policy.

We use cookies and similar technologies that are strictly necessary for the Website to function — for example, to keep you signed in to your account, remember the contents of your cart, and protect the Website against security threats.

You can control or delete cookies through your browser settings. However, because the cookies we use are essential to core functionality, disabling them may prevent parts of the Website (such as sign-in and cart) from working properly.

We do not sell, rent, or trade your personal information to any third party. We share personal information only in the following limited circumstances:

• Service providers — trusted vendors who provide infrastructure for the Website, including Supabase (database and authentication), Vercel (website hosting), and Google (sign-in). These providers process data only on our instructions and are bound by their own security and privacy obligations.
• Delivery partners — courier and logistics providers receive your name, address, and phone number where necessary to deliver your order.
• Legal requirements — courts, law-enforcement, or government authorities, where disclosure is required by applicable law, regulation, or legal process, or to protect our rights, users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of our business or assets, personal data may be transferred as part of that transaction, subject to this Privacy Policy.

Your personal data is stored with our service providers, whose servers may be located outside India. Where data is transferred outside India, we ensure it remains protected by contractual and technical safeguards consistent with applicable law.

We follow reasonable security practices and procedures to protect your personal data, including encryption of data in transit (HTTPS/TLS), encrypted password storage, access controls limiting who can view personal data, and reputable infrastructure providers that maintain industry-recognised security certifications.

While we take security seriously, no method of transmission or storage is completely secure. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by applicable law.

We retain your personal data for as long as your account remains active or as needed to provide you our services. We may retain certain information for longer periods where required for legal, accounting, tax, or dispute-resolution purposes.

When personal data is no longer required, we delete it or anonymise it so that it can no longer be associated with you.

Subject to applicable law, you have the right to:

• Access — request a summary of the personal data we hold about you and how it is used.
• Correction and updating — correct inaccurate or incomplete personal data. You can update most account details and saved addresses directly from your account page.
• Erasure — request deletion of your account and personal data, subject to any data we are legally required to retain.
• Withdrawal of consent — withdraw your consent to processing at any time.
• Grievance redressal — raise a complaint about how your personal data is handled, using the contact details below.
• Nomination — nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the Digital Personal Data Protection Act, 2023.

To exercise any of these rights, contact us using the details in the “Contact Us & Grievance Redressal” section. We may need to verify your identity before acting on your request, and we will respond within the timelines prescribed by applicable law.

The Website is intended for users who are 18 years of age or older. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will take steps to delete it promptly.

The Website contains links to third-party platforms such as YouTube and WhatsApp. We are not responsible for the privacy practices or content of those platforms. We encourage you to review the privacy policies of any third-party service you use.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised “Last updated” date. For material changes, we will provide reasonable notice, such as a notification on the Website. Your continued use of the Website after changes take effect constitutes acceptance of the revised policy.