Your privacy and personal data protection are fundamental to us. This policy details how Nari Niketan collects, uses, protects, and handles your data in full compliance with the laws of the Republic of India.
Who Controls Your Data?
This Privacy Policy applies to the website and Progressive Web Application accessible at https://www.nariniketan.shop (including apex domain nariniketan.shop and subdomains), operated by Nari Niketan ("we", "us", "our"), having its business location in Rihand Nagar, District Sonbhadra, Uttar Pradesh – 231223, India.
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), Nari Niketan functions as the "Data Fiduciary" responsible for determining the purpose and means of processing your personal digital data.
This document is published and construed in accordance with the provisions of Rule 3(1) of the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Consumer Protection (E-Commerce) Rules, 2020.
We collect only the minimum digital personal data necessary to provide seamless e-commerce services, fulfill orders, process payments, and ensure customer satisfaction:
| Category | Specific Data Fields Collected | Source / Method of Collection |
|---|---|---|
| Identity Data | Full Name, Salutation/Gender, Google Account Display Name & Profile Picture (if signing in via Google OAuth). | Provided directly during registration, checkout, or 1-Click Google Sign-In. |
| Contact Data | Postal Delivery Address (Street line, Landmark, City, State, PIN code), Mobile Phone Number, Email Address. | Submitted during order checkout, address saving, or SMS OTP sign-in. |
| Transaction Data | Order ID, Ordered Apparel (Sarees, Suits, Lehengas, etc.), Sizes, Colors, Quantities, MRP & Sale Price, Applied Promo Codes, Order Status, Delivery Logs, Return/Refund Requests. | Generated when browsing, placing orders, applying coupons, or raising return requests. |
| Payment Data | Selected payment method (Cash on Delivery, UPI, Debit/Credit Card reference), Transaction status tokens. | Note: We do NOT store sensitive bank credentials, CVVs, or full credit card numbers on our servers. Online payments are handled via secure RBI-licensed payment gateways. |
| Technical & Device Data | IP address, Browser type and version, Operating System, PWA installation status, login session timestamps. | Collected automatically via standard web server logs and Google Firebase SDKs. |
Under Section 4 and Section 7 of the DPDP Act 2023, we process personal data based on explicit customer consent and for legitimate e-commerce business purposes:
In accordance with Section 43A of the Information Technology Act, 2000 and the SPDI Rules, 2011, Nari Niketan implements robust technical, organizational, and physical security measures:
All web traffic is transmitted via HTTPS with 256-bit SSL/TLS encryption, preventing eavesdropping and man-in-the-middle attacks.
Database access is guarded by server-side Firestore Security Rules. Regular customers can only read/write their own records; administrative privileges are strictly restricted to authenticated owners.
Google invisible reCAPTCHA prevents automated credential stuffing, bot scraping, and unauthorized OTP requests.
Database and hosting environments are backed by Google Cloud's ISO 27001, SOC 2, and PCI-DSS certified data center infrastructure.
As a "Data Principal" residing in India, you enjoy comprehensive rights over your personal data under the Digital Personal Data Protection Act, 2023:
You have the right to obtain a summary of personal data being processed by us and the identities of third-party processors with whom data has been shared.
You can view and modify your profile name, saved addresses, and phone numbers at any time from the My Account page.
You may request deletion of your account and personal data, subject to statutory retention requirements (such as completed GST tax invoices).
You have the right to withdraw consent previously granted for marketing or optional data processing at any point of time.
You have the right to nominate any other individual to exercise your data rights in the event of death or incapacity.
You have the right to readily available grievance redressal with our Grievance Officer and escalate to the Data Protection Board of India if unresolved.
In accordance with Section 9 of the DPDP Act, 2023:
Personal data is retained only for the duration necessary to fulfill the purposes for which it was gathered, unless a longer retention period is mandated by Indian statutory obligations:
In compliance with the Consumer Protection (E-Commerce) Rules, 2020, the Information Technology Act, 2000, and the DPDP Act, 2023, Nari Niketan has appointed a dedicated Nodal & Grievance Redressal Officer:
If you have any questions, concerns, feedback, or grievances regarding the processing of your personal data or wish to exercise your statutory rights, please reach out to our designated officer:
We reserve the right to update or modify this Privacy Policy periodically to reflect changes in our operational practices or applicable Indian regulations. Material revisions will be highlighted on our homepage or notified via email/SMS.
Governing Law & Jurisdiction: This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts in Sonbhadra, Uttar Pradesh, India.
Last Updated: August 31, 2026 · Effective Date: August 31, 2026