Digital Personal Data We Collect

We only collect Digital Personal Data that is necessary for the specified purposes outlined below (Principle of Data Minimisation). The data collected includes:

Consent and Notice (DPDP Act Compliant)

We will process your Digital Personal Data only with your free, specific, informed, unconditional, and unambiguous consent, signified by a clear affirmative action (e.g., ticking a box or clicking an "I agree" button) on or before the point of data collection.

• Notice: At the time of collecting your consent, we will provide you with an itemised notice explaining the specific personal data being processed and the purpose of its processing (e.g., "We collect your shipping address to deliver your order").
• Withdrawal of Consent: You have the right to withdraw your consent for the processing of your personal data at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. However, it may affect our ability to provide certain services to you (e.g., we cannot process an order without a shipping address).

How We Use Your Digital Personal Data

Your data is used solely for the specified purposes for which it was collected. These include:

• Processing and fulfilling orders and completing transactions.
• Communicating with you about your account, orders, and customer service requests.
• Improving our Site, products, and services.
• Sending marketing communications and promotional materials via email/SMS if you have explicitly consented.
• Detecting, preventing, and addressing fraud or other illegal activity.
• Complying with our legal and regulatory obligations under Indian law (including the DPDP Act).

Sharing and Disclosure of Digital Personal Data

We are committed to maintaining the confidentiality of your data. We do not sell your personal data to third parties. We may only disclose or share your data with trusted third parties for the following limited purposes:

• Service Providers: With third-party vendors, consultants, and other service providers (e.g., payment gateways, shipping/logistics partners, and IT/hosting providers) who require access to the data to perform services on our behalf and are legally bound to protect it.
• Legal Compliance: When required by law, court order, or governmental authority to comply with legal processes or governmental requests.
• Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Data Security and Retention

• Security: We implement reasonable security safeguards, including technical and organisational measures, to protect your Digital Personal Data from unauthorised access, use, disclosure, alteration, or destruction.
• Retention: We retain your Digital Personal Data only for as long as is necessary to fulfill the purposes for which it was collected or as required by applicable laws (e.g., for tax or legal compliance). Once the purpose is no longer served, or upon the withdrawal of consent (where applicable and subject to legal exceptions), we will securely delete or anonymize your data.

Your Rights as a Data Principal (Data Principal Rights)

In compliance with the DPDP Act, you, the Data Principal, have the following rights concerning your Digital Personal Data processed by us (the Data Fiduciary):

• Right to Access: You have the right to request information about your personal data being processed and a summary of such processing activities.
• Right to Correction and Completion: You have the right to request the correction of inaccurate or misleading personal data and the completion of incomplete data.
• Right to Erasure (Deletion): You have the right to request the erasure of your personal data where the purpose for which it was collected is no longer being served.
• Right to Grievance Redressal: You have the right to a readily available grievance redressal mechanism.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Site and hold certain information. You have the right to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the Site.

Grievance Redressal and Contact Information

If you have any questions about this Privacy Policy, wish to exercise any of your rights as a Data Principal, or have a grievance regarding the processing of your Digital Personal Data, please contact our designated Grievance Officer:

Grievance Officer:

• Name: Sultan Attars & Perfumes
• Email: support@sultanattar.com
• Phone: +91 76268-28990

We will strive to address your concern in a timely and effective manner.