Teeswalker: Privacy Policy
Important: This document is tailored for an Indian D2C apparel brand selling oversized tees, hoodies, women’s baby tees, including acid-wash styles, with premium design and print quality. It aligns with the Consumer Protection Act, 2019 and the Consumer Protection (E‑Commerce) Rules, 2020, and India’s IT Act, 2000 with the SPDI Rules, 2011. Customize registered entity details, addresses, and contacts before publishing. Ensure compliance updates as laws evolve.
Key takeaway: Clearly disclose returns, refunds, replacement, delivery timelines, grievance redressal, data handling, and consent. Appoint a Grievance Officer, publish this policy on the website/app, and follow SPDI/IT Act security and consumer protection rules on returns/refunds/disclosures to avoid unfair trade practices and regulatory risk [1][2][3][4][5][6][7][8].
PRIVACY POLICY
- Who we are
- Entity: Teeswalker (“Company”, “we”, “us”, “our”) – insert legal name, CIN/GSTIN, and registered office.
- Scope: This Privacy Policy explains how we collect, use, store, share, and secure personal information of users/customers on our website, mobile app, social pages, and customer support channels in India [5][8][6].
- Applicability: Applies to all visitors, registered users, and customers located in India who interact with Teeswalker.
- What we collect
- Personal Information: Name, mobile number, email, shipping/billing address, order details, device identifiers, IP address, communications and feedback, and preferences.
- Sensitive Personal Data or Information (SPDI): Limited to financial information when making online payments (e.g., masked card data via payment gateways), if applicable. Teeswalker does not store full card details; payments are processed by PCI-DSS compliant payment gateway partners [5][6].
- Transaction and Usage Data: Order history, cart and browsing activity, cookies/SDKs, device and log data, referral sources, marketing attribution, and analytics.
- Purpose and legal basis
- Contractual performance: To process orders, deliver products, provide customer support, handle returns/refunds/replacements [1][2][3][4].
- Consent: To send marketing communications, personalized offers, and to place cookies beyond strictly necessary; to process SPDI where applicable [5][8][6].
- Legitimate interests: Fraud prevention, security, analytics, service improvements, and ensuring product authenticity and quality.
- Legal obligations: GST/accounting, responding to lawful requests from authorities, and compliance with e-commerce and IT rules [1][2][5][6].
- Cookies and tracking technologies
- Types: Essential cookies (checkout, session), performance/analytics (site usage), advertising/retargeting (with consent).
- Controls: Users can manage cookie settings at browser/app level. Marketing and retargeting cookies will only load with user consent where required [8].
- How we share information
- Service providers: Payment gateways, logistics/shipping partners, warehousing/3PL, customer support tools, analytics and marketing platforms, IT/security vendors—bound by confidentiality and data protection obligations.
- Government and law enforcement: Only upon written request and for lawful purposes; any SPDI disclosed shall not be published or further shared, as per SPDI Rules [5][6].
- Corporate transactions: In case of merger, acquisition, or restructuring, subject to continuity of protection.
- International transfers
- If vendors or cloud providers process data outside India, appropriate contractual safeguards and reasonable security practices will be applied consistent with SPDI Rules [5][6].
- Security practices
- Reasonable security practices and procedures, including technical, organizational, and physical measures; PCI-DSS compliant payment processing; access controls; encryption in transit where applicable; internal policies and training [5][6][9][10].
- Breach response: Defined incident response procedures and notification per applicable law.
- Data retention
- Kept no longer than necessary for the purpose collected: orders, invoices, and tax records per statutory requirements; marketing data per consent lifecycle; account data until account closure; SPDI retained only as needed for lawful purpose [5][6].
- Your rights
- Review, correct, and update personal information; withdraw consent for SPDI processing; opt-out of marketing; request deletion subject to legal retention requirements; restrict certain processing where feasible [5][6][8].
- Withdrawing consent may limit access to certain services, including online purchases that require payment processing [5].
- Children
- Services are intended for persons 18+. Orders by minors must be placed/authorized by a legal guardian.
- Grievance Officer and contact
- Grievance Officer: Name, designation
- Contact: Email, phone, and postal address in India
- Response timelines: Acknowledge within 48 hours; resolve within 30 days unless extended with reasons, in line with good practice and e-commerce rules on grievance redressal [1][2][3][4].
- Updates
- This policy may be updated to reflect changes in law or business practices. The “Last Updated” date will be revised. Continued use signifies acceptance of changes.
Last Updated: 13/04/2026
