Privacy Policy

1. Information We Collect

When you visit the Trenzware portal, create an account, purchase bespoke apparel, jewellery, or Aari blouses, or contact our customer care team, we collect:

• Identity Data: Full legal name, salutation, and customer account credentials.
• Contact Data: Verified doorstep delivery address, billing address, email address, and mobile phone number for logistics and AWB dispatch notifications.
• Transaction & Invoicing Data: Purchase history, GST identification number (GSTIN) for tax compliance, and encrypted payment reference tokens (we do not store raw credit/debit card numbers or CVVs).
• Technical Telemetry: IP addresses, device browser signatures, and security logs to protect against fraudulent transactions and cyber incidents.

2. Purpose and Lawful Basis of Processing

We process your personal data exclusively for lawful purposes:

• Fulfilling orders, custom sizing, and executing secure doorstep insured courier delivery via tier-1 carriers.
• Issuing mandatory GST Rule 46 compliant Tax Invoices and generating statutory filings as mandated by Indian tax law.
• Preventing financial fraud, detecting chargeback abuse, and maintaining immutable transaction audit trails.
• Delivering dedicated customer care, processing returns, and transmitting live SMS/email shipment tracking telemetry.

3. Disclosure to Third-Party Service Providers

Trenzware will never sell, rent, or trade your personal data to external marketing agencies. We share minimal necessary data strictly with:

• Licensed Payment Gateways: RBI-authorized payment aggregators (e.g., Razorpay, Cashfree, Bank Gateways) via end-to-end TLS 1.3 encrypted webhooks.
• Logistics & Carrier Partners: Insured express logistics providers (e.g., Shiprocket, Delhivery, Blue Dart) solely for dispatching parcels and transmitting live tracking updates.
• Statutory Authorities: Regulatory bodies, law enforcement agencies, or tax tribunals when strictly mandated by applicable laws or court orders.

4. Data Security & Storage Controls

Our infrastructure employs multi-tiered ISO/IEC 27001 standard security controls, including AES-256 database encryption at rest, HTTPS/TLS 1.3 encryption in transit, isolated tenant databases, automated role-based access control (RBAC), and strict session token rotation.

5. Grievance Officer & Official Contact Details

In accordance with Rule 5(9) of the Information Technology (SPDI) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020, the designated Grievance Officer is: