1. Introduction & Scope
Welcome to Trex Apparel. We are committed to protecting the digital personal data of our users in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000. This policy applies to all personal data collected through our website [www.trexapparel.com] and our mobile application.
2. Notice & Consent (The Right to Know)
- Affirmative Action: We process your data only after obtaining your free, specific, informed, and unambiguous consent through a clear affirmative action (e.g., ticking an un-pre-ticked box).
- Multilingual Support: You have the right to access this notice and your consent options in English or any of the 22 languages specified in the Eighth Schedule to the Constitution of India.
- Withdrawal: You may withdraw your consent at any time as easily as you gave it. Withdrawing consent may limit our ability to provide certain services (like personalized styling or order tracking).
3. Information We Collect
We limit data collection to what is strictly necessary for the specified purpose:
- Personal Identifiers: Name, phone number, and delivery address (required for contract fulfillment).
- Sensitive Data: Payment details processed through PCI-DSS compliant partners (we do not store your full card numbers).
- Account Information: Email address for sending mandatory transactional updates and optional marketing.
- Children’s Data: We do not knowingly collect data from individuals under 18 years of age without verifiable parental consent. Our platform is intended for adults.
4. Purpose of Processing
Your data is used solely for:
- Order Fulfillment: Processing payments and shipping your apparel.
- Legal Obligations: Complying with tax laws (GST) or responding to lawful government requests.
- Legitimate Uses: Responding to your specific requests for customer support.
5. Sharing & International Transfers
- Third-Party Processors: We share data with “Data Processors” (logistics and payment partners) under strict contracts that ensure they provide the same level of protection as we do.
- Cross-Border Transfer: Your data is generally stored on servers within India. If transferred abroad, we ensure the destination country is not on the “restricted list” issued by the Government of India.
6. Your Rights as a “Data Principal”
Under the DPDPA, you have the following rights:
- Right to Access: Summary of your personal data being processed.
- Right to Correction/Erasure: Update inaccurate data or request deletion of data no longer needed for its original purpose.
- Right to Nominate: You may nominate an individual to exercise your rights in the event of death or incapacity.
7. Data Security & Breach Notification
We implement reasonable security safeguards (encryption, access controls) to prevent data breaches. In the event of a personal data breach, we are legally mandated to notify the Data Protection Board of India and affected individuals without delay.
8. Grievance Redressal
If you have questions or complaints regarding your data, you may contact our Grievance Officer:
- Name: Rohith
- Designation: Grievance Officer – TrexApparel
- Address: Email: grievance@[terexapparel.com]
- Response Timeline: We will acknowledge your grievance within 48 hours and resolve it within one month as per the Consumer Protection Rules.