Last updated: [DD Month YYYY]

1. Who we are

• Taab Boutique (“Taab”, “we”, “us”, “our”) operates the website [your domain] and related services.
• Contact: taabboutique@gmail.com
• Registered address: [address, city, state, PIN]
• Data Protection Contact: [name/role, if any]

2. What this policy covers

• How we collect, use, disclose, and safeguard personal information when visiting, purchasing, or interacting with our website, social pages, and customer support.

3. Information we collect

• Information provided by the user:
  • Contact details: name, email, phone, billing/shipping addresses.
  • Account info: username, password (stored in encrypted form).
  • Order data: items purchased, payment method, transaction identifiers (we do not store full card details).
  • Measurements/customization details when requested.
  • Communications: emails, chat messages, reviews, testimonials.
  • Gift messages and notes at checkout.
• Information collected automatically:
  • Device and log data: IP address, browser type/version, OS, referring URLs, pages viewed, time/date, session duration.
  • Cookies and similar technologies: used for functionality, analytics, personalization, and advertising. See “Cookies” section.
• Information from third parties:
  • Payment gateways (payment status/ID).
  • Delivery partners (tracking and delivery confirmations).
  • Marketing/analytics tools (campaign performance, aggregated insights).
  • Social media (when interacting with our pages or using social login, per platform permissions).

4. Lawful bases for processing (GDPR/UK GDPR where applicable)

• Contract: to process and deliver orders, provide support.
• Legitimate interests: site security, fraud prevention, service improvement, marketing to existing customers.
• Consent: email/SMS marketing, cookies beyond strictly necessary, collecting optional measurements.
• Legal obligation: tax, accounting, compliance with law.

5. How we use personal information

• Order fulfilment: process payments, manage orders, shipping, returns/exchanges, and customer updates.
• Customer support: respond to queries, resolve issues.
• Personalization: remember preferences, suggest sizes/collections.
• Marketing: send newsletters, offers, and product updates (opt‑in/opt‑out controls provided).
• Analytics and improvement: measure site performance, fix errors, improve UX.
• Security and fraud prevention: monitor suspicious activity, protect our services.
• Legal and compliance: maintain records required by law.

6. Sharing of information
   We do not sell personal data. We share limited data with:

• Service providers: payment gateways, hosting, cloud storage, email/SMS providers, analytics tools, customer support tools, shipping/courier partners.
• Business transfers: in case of merger, acquisition, or asset sale, per applicable law.
• Legal requirements: to comply with lawful requests, enforce our terms, or protect rights, safety, or property.

7. International transfers

• Some providers may process data outside India. We use reputable vendors that implement appropriate safeguards (contractual clauses, security certifications). By using our services, users understand such transfers may occur.

8. Data retention

• Orders and invoices: retained for [6–8] years (tax/compliance).
• Accounts: retained while active; deleted/anonymized after months of inactivity, subject to legal holds.
• Marketing data: retained until opt‑out or after months of no engagement.
• Support tickets: retained for up to months for quality and training.

9. Your rights
   Subject to applicable law, users may:

• Access: request a copy of personal data we hold.
• Rectify: correct inaccurate or incomplete data.
• Erase: request deletion of certain data (subject to legal obligations).
• Restrict/Object: restrict or object to certain processing (e.g., direct marketing).
• Portability: request machine‑readable copies of provided data processed by automated means.
• Withdraw consent: at any time, without affecting prior lawful processing.
  Requests: email taabboutique@gmail.com. We may verify identity and respond within statutory timeframes.

10. Cookies and tracking technologies

• Types:
  • Strictly necessary: essential for login, cart, checkout.
  • Performance/analytics: help us understand usage (e.g., page views, load times).
  • Functionality: remember preferences (size, currency, region).
  • Advertising: measure campaigns, show relevant content on and off our site.
• Controls:
  • Cookie banner/settings to manage optional cookies.
  • Browser controls: block or delete cookies (site may not function fully without necessary cookies).
• Pixel tags/SDKs may be used with consent where required.

11. Marketing communications

• Email/SMS/WhatsApp marketing is sent with consent or as permitted for existing customers.
• Opt‑out any time via “unsubscribe” links or reply STOP for SMS/WhatsApp. Transactional messages (order updates, shipping, returns) will still be sent.

12. Payments

• We use secure, PCI‑DSS compliant processors.
• Full card details are handled by the processor and not stored on our servers.
• For UPI/wallets, we receive payment confirmation/ID only.

13. Children’s privacy

• Our site is not intended for individuals under 18. We do not knowingly collect data from children. If collected in error, contact us to remove it.

14. Social media, UGC, and testimonials

• Content shared with our hashtags or tagged handles may be featured on our channels with attribution.
• For testimonial quotes and images, we obtain consent where required.
• Users can request removal by contacting us.

15. Security

• We implement administrative, technical, and physical safeguards: HTTPS/SSL, access controls, encryption in transit, limited access on a need‑to‑know basis, regular updates and monitoring.
• No method is 100% secure; we encourage strong passwords and caution on public networks.

16. Third‑party links

• Our site may include links to third‑party sites. Their privacy practices are not covered by this policy; review their policies before sharing data.

17. Grievance redressal (India)

• Grievance Officer: [Name/Role]
• Email: taabboutique@gmail.com
• Address: [address]
• We aim to acknowledge within 48 hours and resolve within 30 days.

18. Changes to this policy

• We may update this policy periodically. Material changes will be notified via email or a notice on our website. Continued use signifies acceptance of the updated policy.

19. Contact us

• For privacy questions, requests, or complaints:
  Email: taabboutique@gmail.com
  Address: [Taraori, Haryana 132116]
  Hours: Mon–Sat, 10:00–18:00 IST