Privacy Policy

1 Introduction

Welcome to Urban Naari ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website urbannaari.shop and make purchases from us.

This Privacy Policy is drafted in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and other applicable Indian laws and regulations.

By using our website and services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

Entity Information

Urban Naari is operated by:

Business Name: Novytra Commerce Pvt. Ltd
Registered Address: 7th Floor, Sy.No.88, South Wing Krishi Sapphire, HitechCity, Madhapur, Shaikpet, Hyderabad, Telangana 500081
Email: info@urbannaari.shop
GSTIN: 36AAKCN9389A1Z2

2 Information We Collect

We collect different types of information to provide and improve our services to you:

2.1 Personal Information You Provide

Category	Data Collected	Purpose
Contact Information	Name, email address, phone number	Order processing, communication, support
Shipping Information	Delivery address, city, state, pincode	Order delivery, shipping calculations
Payment Information	Payment method selection (COD/Online)	Order processing
Order Information	Products purchased, quantities, order history	Order fulfillment, customer service
Communication Data	Messages sent via contact forms	Customer support, grievance redressal

2.2 Automatically Collected Information

Device Information: Browser type, device type, operating system
Usage Data: Pages visited, time spent, click patterns
Location Data: IP address, approximate geographic location
Cookies: Session cookies for cart functionality, analytics cookies

2.3 Information We Do NOT Collect

Credit/debit card numbers (processed by secure payment gateways only)
Bank account details
Government ID numbers (unless legally required)
Biometric data

3 How We Use Your Information

We use the collected information for the following lawful purposes:

3.1 Order Processing & Fulfillment

Processing and shipping your orders
Sending order confirmations and shipping updates
Managing returns, exchanges, and refunds
Generating invoices and maintaining transaction records

3.2 Communication

Responding to your inquiries and support requests
Sending important service-related notifications
Marketing communications (only with your consent)

3.3 Website Improvement

Analyzing website usage patterns
Improving user experience and website functionality
Personalizing content and product recommendations

3.4 Legal & Security

Preventing fraud and unauthorized activities
Complying with legal obligations
Enforcing our terms and conditions

4 Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data with:

4.1 Service Providers

Shipping Partners: Courier companies for order delivery
Payment Processors: Secure payment gateway providers
Hosting Providers: Web hosting and infrastructure services
Analytics Services: Website analytics providers (Google Analytics)

4.2 Legal Requirements

We may disclose your information when required by law, such as:

Compliance with court orders or legal processes
Response to government authorities' requests
Protection of our rights, property, or safety

All service providers are contractually bound to protect your data and use it only for the specified purposes.

5 Data Storage & Security

5.1 Storage Location

Your data is stored on secure servers located in India, in compliance with data localization requirements under Indian law.

5.2 Retention Period

Order Data: Retained for 8 years (as per GST/tax regulations)
Account Data: Until account deletion or 3 years of inactivity
Support Communications: 2 years from resolution
Analytics Data: 26 months (Google Analytics default)

5.3 Security Measures

SSL/TLS encryption for data transmission
Secure database storage with access controls
Regular security audits and updates
Limited employee access on need-to-know basis

We do NOT store payment card data. All payment transactions are processed through secure, PCI-DSS compliant payment gateways in accordance with RBI tokenization guidelines.

6 Your Rights Under DPDP Act

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

6.1 Right to Access

You can request a summary of your personal data we hold and how it is being processed.

6.2 Right to Correction

You can request correction of inaccurate or incomplete personal data.

6.3 Right to Erasure

You can request deletion of your personal data, subject to legal retention requirements.

6.4 Right to Grievance Redressal

You can lodge a complaint with our Grievance Officer or approach the Data Protection Board of India.

6.5 Right to Withdraw Consent

You can withdraw consent for marketing communications at any time by unsubscribing or contacting us.

Exercise Your Rights

To exercise any of these rights, contact our Data Protection Officer:

Email: privacy@urbannaari.shop

Response Time: Within 7 days of receipt

7 Cookies & Tracking Technologies

7.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Cart functionality, session management	Session / 7 days
Analytics Cookies	Website usage analysis (Google Analytics)	26 months
Preference Cookies	Remember your choices (currency, region)	1 year

7.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality, including the shopping cart.

8 Third-Party Links

Our website may contain links to third-party websites (payment gateways, shipping trackers, social media). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

9 Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

Posting the updated policy on this page
Updating the "Last Updated" date at the top
Sending an email notification for significant changes (if you have an account)

We encourage you to review this policy periodically.

11 Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection / Privacy Inquiries