DATA PRIVACY & PROTECTION POLICY

1. OUR APPROACH TO YOUR PRIVACY

At Paaro, we build apparel around liberation: the freedom to move, breathe, and carry yourself effortlessly. That commitment extends directly to how we treat your personal information. We handle your data transparently, minimally, and strictly in accordance with the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the rules made thereunder, the Information Technology Act, 2000 and the rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020.

This Privacy Policy (“Privacy Policy”) sets out, in a clear and concise manner, how we collect, use, process, store and protect information obtained from or about you when you access or use the Site. You are advised to read this Privacy Policy carefully. This Privacy Policy applies to all users and visitors of the Site. By accessing the Site, registering an account, or purchasing from us, you consent to the collection, use, and processing of your personal data as outlined in this policy. You retain control over your personal data and may withdraw your consent at any time. Where we rely on your consent, we will request it for the specified purpose through a clear affirmative action.

For the purposes of this Privacy Policy, references to “we”, “us” and “our” shall mean PAARO, and references to “you” and “your” shall mean any user, visitor or service provider who accesses or uses the Platform.

2. PERSONAL DATA WE COLLECT & WHY

We collect information, both provided directly by you and gathered automatically during your visit, to ensure a smooth shopping experience, deliver an effortless fit, and process your orders:

• Identity & Contact Data: Your name, email address, shipping address, billing address, and mobile phone number provided during account registration, checkout, or support interactions.
• Fit & Sizing Preferences: Bust and underbust measurements, alpha size selections (XS to 2XL), or fit inquiries shared with our customer care team to recommend your ideal size.
• Transactional & Order Data: Details of products purchased, order values, delivery addresses, and return/exchange records.
• Payment Data: Payment confirmation statuses and transaction reference numbers. Note: All online payments are processed through PCI-DSS compliant, RBI-authorized payment gateways (e.g., Razorpay, Stripe). Paaro does not store raw credit/debit card numbers, net banking credentials, or UPI PINs on our servers.
• Automated Technical & Server Log Data: Device IP address, browser type, operating system, internet service provider, referral sources, pages viewed, and search terms entered on our Site. This data is collected automatically to maintain website security, prevent fraudulent activity, optimize page load speeds, and refine store navigation.

3. GROUNDS FOR PROCESSING & CONSENT

We process your personal data based on explicit consent granted when you interact with the Site. We use your data strictly for the following purposes:

• Processing, packing, and shipping your orders directly to your doorstep.
• Generating OTPs via SMS for secure account access and checkout authentication.
• Sending real-time transactional updates, order confirmations, shipment tracking links, and garment care instructions via Email, SMS, or WhatsApp.
• Providing responsive customer care and facilitating our standard 7-Day Return or Exchange process.
• Sending cart reminder notifications or updates about new collection drops (where explicitly opted into).
• Complying with statutory tax, legal, and accounting obligations under Indian law.

4. TRANSACTIONAL COMMUNICATIONS & DND OVERRIDE

When you place an order or create an account on the Site, you authorize Paaro Lifestyle LLP and our logistics partners to send operational SMS, WhatsApp messages, and emails regarding your order status. You acknowledge that these transactional notifications are essential for order fulfillment and shall apply irrespective of whether your mobile number is registered on the National Do Not Disturb (DND) / National Customer Preference Register (NCPR).

Promotional marketing messages will only be sent if you have explicitly opted in, and you may unsubscribe at any time.

5. COOKIES, SERVER LOGS & ANALYTICS

We use cookies, server logs, web beacons, and similar technologies to deliver a fast, secure, and intuitive shopping experience.

• Essential Cookies: Necessary for fundamental website navigation, secure session management, and retaining items in your cart.
• Analytics & Performance Cookies: We utilize analytical tools (such as Google Analytics) to analyze aggregate visitor traffic, popular styles, and site interaction trends.
• Cart Activity & Pixels: We may use event tracking technologies (such as WooCommerce pixels) to log shopping bag interactions (e.g., adding items or initiating checkout) to send cart reminders or relevant product updates.

You can configure your web browser to reject or delete cookies. However, disabling essential cookies may impact certain interactive features or prevent completing a transaction.

6. DATA SHARING & THIRD-PARTY SERVICE PROVIDERS

We never sell, trade, or rent your personal data to third parties for their independent marketing purposes. We share necessary operational data strictly with trusted service partners bound by contractual confidentiality and data security agreements:

• E-Commerce Infrastructure: WooCommerce and secure cloud hosting providers supporting site operations.
• Logistics & Courier Networks: (e.g., Shiprocket and courier partners) to deliver parcels and manage reverse pickups.
• Payment Gateways: (e.g., Razorpay, Stripe) to process encrypted payment transactions.
• Communication Partners: SMS and WhatsApp gateway providers delivering OTPs and tracking notifications.
• Legal Authorities: Statutory agencies or law enforcement where mandated by Indian law, court orders, or to protect against fraud.

7. DATA PROTECTION & RETENTION

We enforce physical, electronic, and procedural safeguards, including SSL encryption, secure firewalls, and strict access controls, to protect your data from unauthorized access, loss, or alteration.

We retain your personal data only for as long as necessary to fulfill the operational purposes set out in this policy, or to comply with statutory tax, legal, and accounting retention requirements in India. When data is no longer needed, it is securely deleted or anonymized.

8. YOUR PRIVACY RIGHTS

As a Data Principal, you hold full control over your personal information:

• Right to Access: Request a summary of personal data maintained by Paaro and processing details.
• Right to Correction & Rectification: Request correction of inaccurate, incomplete, or outdated personal information via your My Account dashboard or customer support.
• Right to Erasure: Request deletion of your personal data when processing is no longer required, subject to legal and tax retention mandates.
• Right to Withdraw Consent: Withdraw processing consent at any time by emailing support@paaronline.com. Note: Withdrawing consent for transactional data prevents processing active orders, as valid shipping and invoicing details are required by law.
• Right to Nominate: Nominate another individual to exercise your privacy rights in the event of death or incapacity.
• Right to Grievance Redressal: Access an accessible mechanism to register privacy concerns.

To submit an access, correction, completion, updating or erasure request, or raise a privacy grievance, email support@paaronline.com. Please provide your name, the email address or mobile number used when interacting with Paaro, and a description of your request. If your request concerns a particular order, include its order reference where available. We may request further information reasonably necessary to verify your identity or authority and identify the relevant records. You do not need to create an account solely to submit a request.

9. MINORS’ PRIVACY

The Site is intended strictly for individuals aged 18 and older. We do not knowingly collect personal information from minors. Minors may use the Site only under the supervision of a parent or legal guardian. If we become aware that we have collected such personal data without the consent required by applicable law, we will take steps to cease the relevant processing and erase the data, except to the extent retention is required by applicable law. A parent or legal guardian may use their own account to purchase products on behalf of a minor. Where this involves processing the minor’s personal data, we will comply with the applicable requirements for processing children’s personal data.

10. PROCESSING OF PERSONAL DATA OF PERSONS WITH DISABILITIES

Where consent is required on behalf of a person with disability who is unable to provide legally valid consent, the Site may obtain verifiable consent from a lawful guardian. In such cases, the guardian must demonstrate legal authority, which may include verification through:

• appointment orders issued by a court of law,
• orders of a designated authority, or
• details verified through a local level committee or other lawful mechanism prescribed under applicable laws.

Persons with disabilities may withdraw consent at any time. Upon withdrawal, access to platform features may be limited or disabled in accordance with operational and legal requirements.

11. STATUTORY DISCLOSURES & GRIEVANCE REDRESSAL DESK

For privacy requests, data updates, or consumer inquiries you may contact the Grievance Officer at the details given below. If a data breach affecting your personal data occurs, we will notify you promptly with relevant details and recommended steps. Where required, we will also notify the competent authority and take corrective action to mitigate the impact and prevent recurrence. For concerns, complaints, or requests regarding your personal data, you may contact our Grievance Officer at the details provided below. All complaints will be acknowledged and addressed within legally prescribed timelines. In addition, you may contact the Grievance Officer for any questions or clarifications regarding the collection, use, storage, or processing of your personal data.

Grievance Officer:

Designation

Grievance Officer, Legal & Consumer Desk

Email

support@paaronline.com (Subject line: “ATTN: Grievance Officer”)

Postal Address

Paaro Lifestyle LLP, WeWork Vista Earth Center, (EPIPF-26) SY NO 489/2, EPIP Industrial Area, Whitefield, Bangalore 560066, Karnataka, India

Acknowledgment SLA

Within 48 hours of receipt.

Resolution SLA

Within 1 month from receipt.

12. UPDATES TO THE PRIVACY POLICY

We may amend or update this Privacy Policy at any time. Any revisions will be reflected in the “Version Date” displayed above. We encourage you to review this Policy periodically to remain informed of any changes. We will notify you of any material changes required by law, but we advise periodically checking the App for updates. Your continued use of the Platform after a revised Privacy Policy has been posted will constitute your acknowledgement and acceptance of the updated terms.

13. GOVERNING LAW

This Policy is governed by Indian law. Any disputes arising from or connected to this Policy shall be adjudicated by a court having competent jurisdiction in India.