Privacy Policy

1. Preamble

This Privacy Policy (hereinafter, the “Policy”) is articulated to delineate the modalities pursuant to which theANSARI (hereinafter, the “Controller”, “We”, or “Us”), a lawful entity engaged in the commerce of olfactory goods, processes Personal Data of natural persons (hereinafter, “Data Subjects”, “You”, or “User”) in accordance with applicable data protection enactments, including but not limited to the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Information Technology Act, 2000 (as amended), and attendant rules framed thereunder.

2. Definition of Personal Data and Categories of Processing

For the purposes of this Policy, “Personal Data” shall denote any information relating to an identified or identifiable natural person.

We may collect, inter alia, the following categories of data:

• Identifying Information: Full name, telephone number(s), postal and electronic mail address(es).

• Transactional and Commercial Information: Order history, payment status, transaction identifiers.

• Technical Identifiers and Usage Data: IP address, browser specifications, time-zone settings, device metadata, URL navigation paths, cookies and analogous tracking technologies.

• Voluntary Disclosures: User-submitted testimonials, social media identifiers, and preferences.

3. Legal Bases for Processing

We assert the following lawful bases as per Article 6(1) of the GDPR and Section 43A of the IT Act for the legitimate processing of Personal Data:

• Consent obtained unambiguously by affirmative action.

• Performance of contractual obligations pertaining to order fulfilment.

• Compliance with statutory mandates including, but not limited to, taxation and fraud prevention.

• Legitimate interests pursued by the Controller that are not overridden by the rights and freedoms of the Data Subject.

4. Purpose Specification

Data may be processed inter alia for:

• Fulfilment of contractual obligations emanating from purchase agreements.

• Provision of customer support, delivery logistics, and order tracking.

• Dissemination of promotional content and targeted communications via digital and telecommunication means.

• Aggregated analytical review for enhancement of user interface and operational optimization.

5. Automated Decision Making and Profiling

No Personal Data is subjected to fully automated decision-making processes that produce legal or similarly significant effects. Profiling may be employed solely for marketing segmentation, subject to user opt-out rights.

6. Use of Cookies and Similar Technologies

We deploy cookies, web beacons, pixels, and analogous digital identifiers for session maintenance, user analytics, and behavioral advertising. By continued navigation of our platform, you provide de facto consent for such deployment.

For granular control or withdrawal of consent, please access our [Cookie Settings Panel].

7. Disclosure to Third Parties

Subject to adherence with Article 28 of the GDPR and Rule 6 of the IT Rules, we may disclose Personal Data to:

• Payment processors (e.g., Razorpay), logistics entities (e.g., Delhivery, BlueDart).

• IT infrastructure service providers under strict data protection agreements.

• Legal, regulatory, or governmental authorities pursuant to lawful requisitions.

Such third parties shall process data strictly under contractual safeguards and only for specified, legitimate purposes.

8. International Data Transfers

Where transnational data transfers are effectuated (including to jurisdictions lacking an adequacy decision under GDPR Article 45), we ensure lawful safeguards via Standard Contractual Clauses (SCCs) or other derogations under Article 49(1).

9. Data Retention and Minimization

Personal Data shall be retained no longer than necessary for the fulfilment of the purposes for which it was collected, subject to statutory retention obligations. Generally:

• Transactional data: 6 years

• Browsing and behavioral metadata: 3 years

• Inactive user accounts: 18 months

Data is pseudonymized or anonymized post-retention thresholds.

10. Data Subject Rights

In accordance with Chapter III of the GDPR and applicable domestic data protection statutes, you may exercise the following rights by addressing a formal request to privacy@theansari.shop:

• Right to Access (Art. 15 GDPR)

• Right to Rectification (Art. 16)

• Right to Erasure / Right to be Forgotten (Art. 17)

• Right to Restriction of Processing (Art. 18)

• Right to Data Portability (Art. 20)

• Right to Object (Art. 21)

• Right to Lodge a Complaint with a Supervisory Authority (Art. 77)

11. Children’s Privacy

We do not knowingly collect or process data of individuals under the age of 13. In case such data is inadvertently processed, it shall be expunged upon discovery.

12. Amendment Clause

This Policy may be revised, modified, or supplemented at our sole discretion, in consonance with evolving regulatory directives or operational exigencies. Continued usage of our services post-modification shall constitute deemed acceptance.

13. Contact and Grievance Redressal

For privacy-related grievances or compliance matters, please contact our appointed Data Protection Officer:

📧 Email: privacy@theansari.shop
📞 Grievance Helpline: +91-9236877600