Privacy Policy

Last updated 11 October 2026

Sundari (“we”) runs this site. This policy explains what personal data we handle and the rights you have over it under India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it.

What we collect

• To fulfil an order: your name, delivery address, pincode, email address and phone number.
• Payment: you pay us by UPI from your own app. We receive the payment and its transaction reference, which we keep with your order. We never see your UPI PIN or bank details.
• If you contact us: whatever you put in the message, plus the email address or phone number you used.
• If you subscribe: your email address only.
• Automatically: basic technical data your browser sends — IP address, device and browser type, pages viewed. Used to keep the site working and to understand which pieces people look at.

Why we use it

• To take payment, pack your order and get it to you.
• To send order confirmations, dispatch notices and tracking numbers.
• To answer your questions and handle returns.
• To send you new-arrival emails, if and only if you asked for them.
• To meet our tax and accounting obligations.

We do not sell your personal data. We do not share it for anyone else’s marketing.

Who else sees it

Only the people who need it to complete your order:

• our shipping partner, which needs your name, address and phone number to deliver the parcel.
• Our email and hosting providers, which process data on our instructions.
• Our accountant and the tax authorities, where the law requires it.

Cookies

We use the minimum needed. Your shopping bag is kept in your own browser’s local storage — it never reaches our servers and no one else can read it. If we later add analytics or advertising cookies, we will ask your consent first and this page will say so.

Counting, not tracking

We keep a tally of how many times each saree is opened, added to a bag and bought. It is a count and nothing else: no identifier, no cookie, no IP address, no device, no record of anything you did before or after. There is no visitor for us to recognise, so we could not follow you even if we wanted to, and nobody outside Sundari ever sees any of it.

It exists so we know which sarees to stock more of. We keep the daily totals for a little over a year, so one festive season can be compared with the last, and they delete themselves after that.

Telling you a saree is back

If a colour has sold and you ask us to tell you when it returns, we keep your email address, which colour you asked about, and the date. Nothing else — there is no name, no phone number and no record of anything else you looked at.

We use it for exactly one message, about that one colour. It is never added to any list, never used for anything else, and never shared. It deletes itself after six months, whether or not the saree came back.

How long we keep it

• Order and invoice records: eight years, as tax law requires.
• Enquiries and support messages: two years.
• Newsletter subscriptions: until you unsubscribe.
• “Tell me when it is back” requests: six months, then deleted automatically.

Your rights

Under the DPDP Act you may ask us to:

• Tell you what personal data of yours we hold and who we shared it with.
• Correct anything inaccurate or incomplete.
• Erase it, where we are not required to keep it for tax or legal reasons.
• Withdraw a consent you previously gave, such as for marketing email.
• Nominate someone to exercise these rights if you die or are incapacitated.

Write to hello@sundarisarees.com and we will respond within 30 days. If you are not satisfied, you can take it to the Data Protection Board of India.

Security

The site is served over HTTPS. Payments are made in your own UPI app, not on this site. We limit who can see order data to the people who need it. No system is perfectly secure, and we will not pretend otherwise — if a breach ever affects your data, we will tell you and the Data Protection Board as the law requires.

Children

This site is not intended for anyone under 18, and we do not knowingly collect data about children. If you believe a child has given us data, tell us and we will delete it.

Changes

If we change this policy we will update the date at the top. Material changes will be announced on the site.

Contact

hello@sundarisarees.com — or see the contact page.