Privacy Policy

01About this policy

This Privacy Policy explains how Creative Studio ("we", "us", "our") — the operator of Creative Attire (creativeattire.store) — collects, uses, stores and protects your personal information when you visit our website, place an order, or interact with us in any other way.

By using our website, you consent to the practices described in this policy. We comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), and the Consumer Protection (E-Commerce) Rules, 2020.

02Information we collect

Information you provide directly

• Identity & contact details: Full name, email address, phone number.
• Delivery information: Shipping address, city, state, pincode.
• Order details: Products ordered, sizes, preferences, gift instructions.
• Communications: Messages sent through our contact form, email or chat.

Information we collect automatically

• Device & usage data: IP address, browser type, device type, pages visited, time spent.
• Cookies and similar technologies: Used for session management, analytics and remembering your bag.

Payment information

For UPI payments, we route transactions through our PCI-aware payment processor (MMADPay). We do not store, see or transmit your full UPI PIN, card details, CVV or banking passwords on our servers. We only receive non-sensitive transaction metadata (status, reference number, gateway transaction ID) needed to confirm and account for your order.

03How we use your information

• To process and fulfil your orders, including shipping and delivery.
• To send you order confirmations, shipping updates and receipts.
• To respond to your enquiries, returns, refunds and grievances.
• To prevent fraud, secure our website, and detect abusive activity.
• To comply with applicable tax, GST and consumer-protection laws.
• With your consent, to send you marketing emails (you can opt out anytime).
• To improve our website, products and customer experience.

04Sharing & disclosures

We share information only with the following categories of recipients, on a need-to-know basis:

• Logistics partners (e.g., Delhivery, Bluedart, India Post) for shipping your order.
• Payment processors (e.g., MMADPay) to securely process UPI transactions.
• Email and SMS providers for transactional communication.
• Analytics providers (Google Analytics 4) for aggregate, anonymised website analytics.
• Government, tax or law-enforcement authorities where legally required.

We do not sell your personal data to any third party for advertising or commercial purposes.

05Data security

We use industry-standard security measures including HTTPS/TLS encryption for all data in transit, restricted access controls, and regular security reviews. While we take reasonable precautions to protect your information, no method of transmission over the internet is 100% secure. In line with RBI guidelines, we do not store full card numbers or CVVs at any point.

06Cookies & tracking

We use cookies and similar technologies to:

• Maintain your session and remember items in your shopping bag.
• Analyse traffic and understand how the site is used (via Google Analytics 4 — Measurement ID G-YZGG54TW1G).
• Improve site performance and user experience.

You can control cookies through your browser settings. Disabling cookies may impact certain features of our site.

07Your rights (DPDP Act)

Under applicable Indian data-protection law, you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Erase your data, subject to legal retention obligations (e.g., tax records).
• Withdraw consent for any processing where consent was the basis.
• Nominate another person to exercise your rights in case of incapacity or death.
• File a grievance with our Grievance Officer (details below).

To exercise any of these rights, write to grievance@creativeattire.store with proof of identity. We will respond within 30 days.

08Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, tax and reporting requirements. Order and invoice records are typically retained for 8 years to comply with the GST Act and the Companies Act. Account and marketing data are retained until you withdraw consent or request deletion.

09Children's data

Our website serves women's and girls' fashion. While we offer products designed for girls, the website itself is intended for use by adults (parents and guardians) acting on behalf of minors. We do not knowingly collect data directly from anyone under 18 without verifiable parental consent.

10Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top will reflect the most recent revision. Material changes will be communicated via email to registered customers.

11Contact & grievance redressal

For any questions, requests or grievances regarding this policy or your personal data, please contact our Grievance Officer:

We acknowledge complaints within 48 hours and resolve them within 30 days, in line with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology (Intermediary Guidelines) Rules, 2021.