Your privacy.
Our responsibility.

Cartlogic Fashion is operated by CARTLOGIC PRIVATE LIMITED (referred to as “we”, “us”, “our” or the “Company”). This Policy applies to personal information processed through our e-commerce website, online store, customer accounts, checkout, product enquiries, order tracking and associated customer communications.

For the purposes of applicable Indian data-protection law, the Company determines the purposes and means of processing customer information in connection with these activities. Other parties, such as a payment provider or delivery company, may have independent privacy responsibilities for their own processing.

Depending on how you interact with the website, the following information may be collected or generated:

• Identity and contact: customer name, email address, phone number and communication preferences.
• Account information: registration details, account identifiers, saved addresses, authentication-related records and account activity.
• Order information: items purchased, sizes or variations, quantities, order numbers, billing and shipping details, transaction and invoice records.
• Delivery and after-sales: delivery instructions, shipment status, returned-product information, refund requests, complaints and support correspondence.
• Technical information: IP address, browser or device information, website requests, security logs and cookies or similar identifiers, where used.
• Voluntary information: information you choose to share through email, telephone, customer support or reviews, if reviews are enabled.

We ask users not to send payment PINs, CVVs, bank passwords, OTPs or other unnecessary confidential information in messages or support enquiries.

Information is processed for specified purposes connected with operating our online store and providing requested services, including:

• Creating and managing customer accounts and enabling secure login.
• Processing purchases, confirming orders and maintaining purchase histories.
• Facilitating payments, verifying transaction outcomes and preventing payment misuse.
• Arranging packaging, dispatch, shipment tracking and delivery.
• Managing cancellations, exchanges where offered, returns, refunds and grievances.
• Responding to product questions and customer support requests.
• Operating, diagnosing, securing and improving website functionality.
• Maintaining legally required financial, tax, accounting and dispute records.
• Sending optional marketing communications where permitted and, when required, based on appropriate consent.

We do not treat a purchase or account creation as blanket permission to use personal data for unrelated purposes.

Where consent is required by applicable law, we seek it for clear and specific purposes and provide appropriate ways to withdraw it. Certain processing may also be permitted or required under other applicable legal grounds, including for requested transactions, legitimate uses recognised by law, compliance with legal obligations, or protection against fraud.

You may contact us to withdraw consent for optional activities, such as promotional communications. Withdrawal does not automatically invalidate processing already lawfully carried out or require deletion of records that must be kept under law. The availability and scope of statutory consent-related rights follow the relevant provisions as they come into force.

When a customer purchases a product, checkout information may be shared with an authorised payment gateway, bank, UPI network or payment service provider as needed to initiate, verify or reconcile the transaction. Such providers may process payment identifiers, payer information and security or fraud-prevention information under their own terms and policies.

Our order records may include the payment method, amount, order ID, transaction reference and payment status. Customers must not provide UPI PINs, card PINs or OTPs to our staff. Whether complete card credentials are handled by our website or directly by a provider depends on the actual payment integration.

To complete orders, relevant recipient names, phone numbers, delivery addresses and shipment details may be provided to logistics or courier partners. Order-status information may also be made available to fulfilment partners and within the customer account or tracking system.

When you request a return, cancellation or refund, we may review the order, the reason for the request, supporting information and relevant payment records to determine and execute the outcome under the applicable store policy. See the Shipping Policy, Return Policy and Refund and Cancellation Policy for operational terms.

Cookies and similar browser technologies may be used to support shopping-cart functionality, account sessions, security controls, checkout continuity, preferences and website performance. If analytics or advertising tools are enabled, they may use additional cookies or identifiers to understand website activity and campaign effectiveness.

• Essential: cart contents, login sessions, security and checkout processes.
• Functional: saved preferences or convenience settings, when enabled.
• Analytics: aggregate website usage and performance insights, if enabled.
• Advertising: campaign measurement or relevant promotions, if enabled and lawfully configured.

You can adjust or remove cookies through your browser settings, although disabling essential cookies may affect checkout, account access or shopping-cart operation. Any legally required cookie-choice or consent controls must be implemented separately from this written Policy.

Information may be disclosed only where relevant to a disclosed purpose, a permitted legal basis or an applicable legal requirement, such as to:

• Payment and banking providers for checkout, payment status, settlements and refunds.
• Courier and fulfilment partners to dispatch, track and deliver purchased items.
• Hosting, website, security and IT providers for technical operation, storage, maintenance and fraud protection.
• Customer-communication providers for transactional messages or permitted promotions.
• Professional advisers, auditors and regulators when required for legal, tax, accounting, safety or dispute-related reasons.

We aim to limit shared information to what is reasonably necessary and to apply suitable contractual or operational safeguards where appropriate. This Policy does not authorise unrelated disclosure of customer data for independent third-party marketing.

We seek to maintain reasonable technical and organisational safeguards appropriate to the sensitivity and risk of the information, which may include protected accounts, controlled access, security updates, hosting and backup measures, monitoring and protections around payment services.

No online transmission or storage system can be guaranteed completely secure. If a data-security incident occurs, we assess and respond to it and make notices to affected persons or authorities where required by the law in force at the relevant time.

We retain information only for as long as reasonably required for the purposes for which it was processed and for applicable operational, tax, accounting, legal, fraud-prevention, warranty or dispute requirements. Retention differs for account details, invoices, order histories, support communications and technical logs.

Where erasure is appropriate and legally required, we delete or de-identify information after the applicable purpose and retention obligations end. Account closure does not always permit immediate deletion of invoices, completed-order documents or statutory records.

You may contact us to request information about your account, report inaccurate customer details, update communication preferences, seek account closure, object to an optional use or ask about retention and deletion. We assess requests in light of available systems, identity-verification requirements and applicable law.

As the relevant provisions of the Digital Personal Data Protection Act, 2023 become effective, statutory rights may include access to prescribed information, correction, completion, updating, erasure, grievance redressal and nomination, subject to the Act and any applicable exceptions.

We may request sufficient information to verify the requester before disclosing or modifying account data. Requests can be emailed to info@cartlogicfashion.in or raised via the Contact Us page.

Our fashion shopping services are intended for persons who are legally able to enter into purchases or act through a parent or lawful guardian. We do not intentionally seek unnecessary personal information from children. Where a customer is below 18 years of age, a parent or lawful guardian should supervise the activity and provide any consent required by applicable law.

We will apply relevant child-data protections, including verifiable parental consent where legally required, in accordance with provisions as they become effective. Please contact us if you believe personal information relating to a child was provided inappropriately.

Website hosting, cloud infrastructure, payment services, communications or software support may involve storage or processing in India or other countries, depending on the providers used. Any applicable cross-border transfer restrictions and safeguards will be followed to the extent required by laws and notified government directions in force at the relevant time.

We do not represent that all customer information is stored exclusively in India unless the underlying vendors and systems have been verified to support that statement.

Our website may connect to third-party payment interfaces, courier tracking websites, external services or other websites. Their data practices, security processes and legal notices may differ from ours. We recommend reviewing the privacy information of any external provider before supplying sensitive or financial details.

Depending on the processing activity and the relevant effective dates, this Policy has been structured with reference to the following Indian legal framework:

• The Information Technology Act, 2000 and applicable rules relating to data handling, security and privacy.
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable and in force.
• The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025, as their provisions are brought into force.
• The Consumer Protection Act, 2019 and applicable Consumer Protection (E-Commerce) Rules, 2020, including amendments as they take effect.
• Other applicable accounting, tax, payment, cybersecurity and consumer protection requirements.

Official references: MeitY DPDP Rules and Timeline and Department of Consumer Affairs.

We may revise this Policy when our website, services, data practices or applicable laws change. Material updates will be reflected on this page with a revised date and, where required, additional notice or consent. Continued use of a website is not a substitute for consent where applicable law requires specific informed consent.

For privacy questions, requests for access or correction, account or data concerns, or grievances, please contact the Company using the details below. Include sufficient information about your concern but do not disclose passwords, UPI PINs or OTPs. We will examine and respond to the request within the timeframe required by applicable law.