PRIVACY POLICY

Welcome to Aveez Fashion ("Aveez Fashion", "we", "us", or "our"). We operate the e-commerce website at https://aveezfashion.com (the "Website"), offering modern, minimalist apparel and lifestyle essentials.

This Privacy Policy explains how we collect, handle, store, and protect the personal data of individuals who browse our website, create a customer account, subscribe to our newsletter, or purchase clothing and accessories from us.

By accessing our Website or submitting personal information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please refrain from using our services.

We only collect information that is strictly necessary to provide our services, process your orders, manage your account, and enhance your shopping experience. We collect data in the following categories:

A. Information You Provide Directly

• Contact & Customer Details: Your full name, email address, and mobile phone number provided when registering an account, placing an order, or submitting an inquiry.
• Shipping & Delivery Information: Recipient name, contact phone number, street address, landmark, city, state, and postal pincode needed to deliver your package.
• Account Credentials: If you register an account, we store your first name, last name, email address, optional phone number, and a securely salted cryptographic password hash (via bcrypt). We never store or have access to raw, plain-text passwords.
• Newsletter Subscriptions: Your email address when you voluntarily subscribe to the Aveez Fashion newsletter via our website footer or sign-up forms.
• Customer Support Inquiries: Any communication or feedback you send to our customer support team via email or contact forms.

B. Information Generated During Your Use

• Order & Transaction Records: Order identification numbers, purchased items, selected garment sizes, color variants, item prices, applicable discounts, shipping charges, order timestamps, payment method selection (Online Gateway or Cash on Delivery), and fulfillment statuses.
• Shopping Preferences & Cart Activity: Selected items stored in your local browser storage to keep your active shopping bag and saved wishlist synchronized across pages.

C. Automatically Collected Technical Data

• Device & Connection Data: Standard server logs containing your Internet Protocol (IP) address, browser type and version, operating system, and timestamps. This data is processed transiently for server security, rate limiting, and fraud detection.

We use the information we collect for specific, legitimate, and transparent business purposes:

• Order Processing & Fulfillment: To verify product availability, calculate correct order totals, prepare items for dispatch, and coordinate delivery with our logistics and courier partners.
• Customer Account Management: To create and authenticate your account, enable order history review, and securely persist your default shipping address.
• Transactional Communications: To send critical notifications, including order confirmations, payment receipts, dispatch updates, and tracking links.
• Customer Care & Support: To respond to your questions, process cancellations, handle returns or exchanges, and resolve delivery concerns.
• Promotional Communications (With Consent): To send brand updates, lookbooks, and seasonal product releases only if you have voluntarily subscribed to our newsletter. You can unsubscribe at any time using the link in our emails.
• Fraud Prevention & Security: To verify HMAC payment signatures, protect our website against malicious activities, and prevent unauthorized transactions.
• Legal & Tax Compliance: To maintain verifiable records for Goods and Services Tax (GST) reporting, accounting audits, and statutory requirements in India.

To provide a safe and seamless checkout experience, Aveez Fashion supports online payments as well as Cash on Delivery (COD):

A. Online Payment Gateways

When you choose an online payment method at checkout, you interact directly with an authorized, PCI-DSS compliant third-party payment gateway partner. Supported payment methods include:

• Unified Payments Interface (UPI): Google Pay, PhonePe, Paytm, BHIM, and bank UPI applications.
• Debit & Credit Cards: Visa, MasterCard, RuPay, and American Express.
• Net Banking & Digital Wallets: Major supported Indian financial institutions and authorized wallets.

Our server creates an authoritative transaction intent and verifies the payment cryptographically using industry-standard HMAC-SHA256 signature verification upon return from the gateway. Our servers never receive or store your payment card numbers or banking credentials.

B. Cash on Delivery (COD)

If you select Cash on Delivery, your payment is collected by the authorized delivery courier at your shipping address upon package handover. No electronic payment information is collected or stored for COD orders.

Cookies and browser local storage are small text files or data keys stored on your device by your browser. Aveez Fashion utilizes only minimal, functional, and essential technologies:

Advertising & Analytics Trackers

At this time, our website does not load third-party cross-site advertising trackers, behavioral tracking pixels, or invasive surveillance scripts.

We do not sell, rent, trade, or monetize your personal information to third parties or data brokers. We only share information with trusted third-party service providers who assist us in operating our business and fulfilling our obligations to you:

• Logistics & Courier Partners: We share your recipient name, delivery address, and contact phone number with our courier partners solely to deliver your parcel and send tracking SMS notifications.
• Payment Processing Providers: We share transaction identifiers and order amounts with our authorized payment gateway to process and confirm payments.
• Hosting & Database Infrastructure: Our web application and secure MongoDB database operate on managed cloud infrastructure with strict access controls and encrypted connections.
• Legal Requirements & Law Enforcement: We may disclose personal information if required to do so by applicable law, court order, or official governmental mandate, or when reasonably necessary to prevent fraud or protect the safety and rights of Aveez Fashion and our customers.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained for the lifetime of your active account, or until you request account closure and deletion.
• Order & Invoicing Records: Retained for statutory periods mandated by Indian tax, GST, and commercial laws (typically up to 7 to 8 years) for financial record-keeping and audit compliance.
• Newsletter Subscriptions: Retained until you opt out or unsubscribe via our email links or by contacting customer support.

Security Measures

We implement reasonable and appropriate technical and organizational safeguards to protect your personal data:

• Encryption in Transit: All website traffic is encrypted using Transport Layer Security (HTTPS/TLS).
• Password Protection: Passwords are cryptographically hashed using bcrypt before storage, making them irreversible.
• Session Security: Authentication tokens are stored inside HTTP-Only cookies, mitigating cross-site scripting (XSS) token interception.
• Zero-Trust Server Validation: All product pricing, order line items, and payment totals are validated authoritatively on our backend server to prevent manipulation.

While we make every effort to safeguard your data, please be aware that no method of transmission over the internet or electronic storage is 100% impenetrable. We encourage you to choose a strong password and keep your credentials confidential.

Aveez Fashion respects your rights regarding your personal information under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and applicable consumer protection regulations:

• Right to Access: You have the right to request a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction: You have the right to request the correction or updating of inaccurate, incomplete, or out-of-date personal data.
• Right to Erasure / Deletion: You may request the deletion of your personal data, subject to our statutory obligations to retain transaction and tax records.
• Right to Withdraw Consent: Where data processing is based on your consent (such as our email newsletter), you have the right to withdraw your consent at any time without affecting prior lawful processing.
• Right to Grievance Redressal: You have the right to register a complaint or grievance regarding data processing directly with our customer support and designated grievance representative.

To exercise any of these rights, please email us at support@aveezfashion.com with the subject line "Data Rights Request". We will review and respond to your request within a reasonable timeframe in accordance with applicable legal guidelines.

Aveez Fashion is based in India. However, because we utilize globally distributed cloud infrastructure (such as hosting and database providers), your data may be processed on servers located outside your state or country of residence.

When cross-border processing occurs, we ensure that our infrastructure providers maintain strict data confidentiality, encryption standards, and compliance with applicable data protection regulations.

Our Website and apparel catalog are intended for general audience customers who are at least 18 years of age or who access the site under the supervision of a parent or legal guardian.

We do not knowingly collect or solicit personal information directly from children under 18 years of age. If you believe that a minor has provided us with personal information without appropriate consent, please contact us at support@aveezfashion.com and we will promptly delete such information from our records.

Our Website may contain links to external third-party platforms, including our official social media pages (such as Instagram).

We do not own, control, or operate these third-party platforms, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any external sites you visit to understand their specific data collection practices.

We may periodically update this Privacy Policy to reflect changes in our operational practices, service integrations, or applicable legal and regulatory requirements.

When updates are made, the revised version will be published directly on this page with an updated "Last Updated" date. We recommend checking this page periodically to stay informed of how we protect your information. Your continued use of the Website following the posting of changes constitutes acceptance of those updates.

If you have questions, feedback, or requests regarding this Privacy Policy, or if you wish to exercise your privacy rights, our support team is here to assist you: