Privacy policy

CONVEYOR APPAREL — PRIVACY POLICY

Last updated: 8 October 2026

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use conveyorapparel.com (the "Platform"). It is an electronic record under the Information Technology Act, 2000 and is published in accordance with applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), as applicable and as amended.

1. Who we are (Data Fiduciary)

The Platform is owned and operated by Conveyor Apparel LLP (a Limited Liability Partnership; LLPIN: ACV-5579; GSTIN: 29AAWFC2575Q1ZB), having its registered office at 007, E Block, Silver County, Near KSRP Quarters, Kudlu, Bangalore South, Bengaluru, Karnataka – 560100, India ("Conveyor Apparel", "we", "us", "our"). For the purposes of the DPDP Act, we are the Data Fiduciary that determines the purpose and means of processing your personal data.

Grievance / data-protection contact: Meenal Paul, Grievance Officer · Email: talktomeenal@gmail.com · Phone: +91 88613 65188 · Address: 007, E Block, Silver County, Near KSRP Quarters, Kudlu, Bangalore South, Bengaluru, Karnataka – 560100, India

2. Consent and acceptance

2.1. By accessing the Platform, creating an account, placing an Order, or otherwise providing your personal data to us, you consent to the collection, use, sharing, and processing of your personal data as described in this Policy. Where required, we obtain your consent through a clear affirmative action (for example, a tick-box or by your voluntarily providing data to complete a purchase).

2.2. You may withdraw your consent at any time (see §11). Withdrawing consent may mean we can no longer provide certain Services (for example, we cannot fulfil an Order without your name, address, and contact details).

3. Key definitions

"Personal Data" — any data about an individual who is identifiable by or in relation to such data.
"Data Principal" — the individual (you) to whom the personal data relates. For a child, this includes the parent/lawful guardian.
"Processing" — any operation on personal data (collection, storage, use, sharing, disclosure, erasure, etc.).
"Data Fiduciary" / "Data Processor" — as defined under the DPDP Act.

4. What personal data we collect

We collect the following categories, depending on how you use the Platform:

Identity & contact data: name, email address, mobile number, delivery and billing address, and (where you create one) account credentials.
Order & transaction data: items ordered, order value, order history, communications with support, and returns/claims (including any unboxing videos or photos you submit for a claim).
Payment data: we do not collect or store your full card/bank/UPI credentials (the only exception is the bank or UPI details you choose to share with us so we can pay you a refund on a Cash on Delivery order, see §6). Payment is processed directly by our payment partner; we may receive limited payment-status information (e.g., success/failure, a masked reference, and, if you provide it for a business purchase, a GSTIN).
Technical & usage data: IP address, device and browser type, operating system, device identifiers, pages viewed, referring URLs, and interactions with the Platform.
Cookies & similar technologies: as described in §7.
Communications & marketing preferences: your opt-ins/opt-outs and messages you send us.

We do not intend to collect special-category or sensitive data beyond what is necessary; please do not submit sensitive information that is not required.

5. How we collect your data

Directly from you — when you register, order, contact support, submit a return/claim, subscribe, or otherwise provide information.
Automatically — through cookies and similar technologies when you use the Platform (§7).
From third parties/partners — e.g., our e-commerce platform provider, payment partner, and logistics partners, in connection with your Order.

6. Why we use your data (purposes) and our legal basis

We process personal data for the following purposes, on the basis of your consent and/or the legitimate uses permitted under the DPDP Act (such as fulfilling a purpose for which you voluntarily provided data):

to create and manage your account and authenticate you;
to process, fulfil, and deliver your Orders, including manufacturing/printing, packing, shipping, and handling returns, refunds, exchanges, and cancellations;
to process payments (via our payment partner) and prevent, detect, and investigate fraud, abuse, and bad-faith conduct, including chargeback defense;
to confirm Cash on Delivery orders with you before they go into production, using the phone number and email you gave at checkout (we may contact you more than once), and, if a refund is due on a Cash on Delivery order, to pay it to the bank or UPI details you choose to share with us, which we use only for that refund;
to provide customer support and respond to grievances;
to send transactional/service communications (order, payment, shipping, delivery, support) by email, SMS, WhatsApp, and phone;
to send promotional communications where you have opted in (you can opt out anytime);
to operate, secure, personalise, and improve the Platform and our products;
to comply with legal, tax, accounting, and regulatory obligations; and
to establish, exercise, or defend legal claims.

7. Cookies and tracking technologies

7.1. We use cookies and similar technologies to keep you logged in, remember your cart and preferences, secure the Platform, measure performance, and (where enabled) support analytics and advertising.

7.2. We use: strictly necessary cookies (required for the Platform to work), functional cookies, analytics cookies, and advertising (where used) cookies. You can control non-essential cookies through our cookie banner and your browser settings. Blocking some cookies may affect functionality.

7.3. Meta Pixel and Conversions API. We use the Meta Pixel and the Meta Conversions API (provided by Meta Platforms, Inc. and its affiliates, which run Facebook and Instagram) to measure our ads and show them to people likely to be interested. When you visit the Platform or place an Order, we send Meta event details (such as pages and products viewed, items added to cart, checkouts started and purchases with their value) together with cookie and device identifiers and, where available, your email address and mobile number in hashed (one-way encrypted) form. Meta uses this to match these events to Meta accounts and to measure, deliver and improve our ads. You can opt out by declining advertising cookies in our cookie banner, by changing your ad preferences in Facebook or Instagram (Accounts Centre → Ad preferences), or by writing to our Grievance Officer to ask us to stop sharing your data for advertising.

8. How we share and disclose your data

We do not sell your personal data. We share it only as needed, with:

Payment partner — Razorpay (and your bank/UPI/card networks) to process payments and refunds and for fraud checks;
Logistics & delivery partners — couriers who deliver your Order (they receive your name, address, and contact number, and may use delivery OTP/proof);
Print & fulfilment partners — who manufacture and dispatch your made-to-order Products;
Technology providers — our e-commerce platform host (Shopify), hosting, analytics, communications (email/SMS/WhatsApp), and reviews providers, acting as our Data Processors under appropriate safeguards;
Advertising partners — Meta (Facebook and Instagram), which receives the event data and hashed contact details described in §7.3 to measure and deliver our ads;
Professional advisers & authorities — where required to comply with law, respond to lawful requests, enforce our Terms, or protect our rights, property, or the safety of our users and the public; and
In a business transfer — to a successor entity in connection with a merger, acquisition, restructuring, or sale of assets, subject to this Policy.

Where partners act as Data Processors, they are permitted to process your data only on our instructions and for the purposes above.

9. Data retention

We retain personal data only for as long as necessary for the purposes in §6, including to fulfil Orders, provide support, defend claims, and meet legal/tax/accounting obligations (which may require retaining transaction records for a statutory period). Where personal data is no longer required and no legal basis to retain it exists, we will erase or anonymise it. For example: we keep order and tax records for 8 financial years (as required under the Companies Act, 2013 and GST law); account data until you delete your account; marketing/consent data until you opt out plus 30 days; and website usage and cookie data for up to 24 months.

10. Data security

We implement reasonable security practices and procedures appropriate to the nature of the data, including access controls, encryption in transit where appropriate, and reliance on reputable processors (payment, hosting). However, no method of transmission or storage is completely secure; you are responsible for keeping your account credentials and OTPs confidential (see our Terms of Service).

11. Your rights as a Data Principal

Subject to applicable law, you have the right to:

access a summary of your personal data and how it is processed;
correct, complete, or update inaccurate or incomplete data;
erase your personal data where it is no longer required and no legal basis to retain it exists;
withdraw consent at any time (this does not affect processing already carried out);
nominate another individual to exercise your rights in the event of death or incapacity; and
grievance redressal — raise any concern with our Grievance/data contact (below), and escalate to the Data Protection Board of India where available.

To exercise any right, contact us at talktomeenal@gmail.com with enough detail to identify you and your request. We will respond within the timelines required by applicable law. We may need to verify your identity before acting.

12. Children's data

The Platform is intended for users 18 years and older. We do not knowingly process the personal data of children without verifiable parental/guardian consent, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a child's data has been provided to us without appropriate consent, contact our Grievance contact and we will take appropriate action.

13. Cross-border transfer

Some of our processors may store or process data on servers located outside India. Where we transfer personal data outside India, we do so in accordance with applicable Indian law and subject to appropriate safeguards. ****

14. Third-party links

The Platform may link to third-party sites/services (e.g., payment, social, delivery tracking). This Policy does not cover their practices; please review their privacy policies. We are not responsible for third-party sites.

15. Data breach

In the event of a personal-data breach, we will take steps to contain and remedy it and will notify the relevant authority and affected Data Principals to the extent and in the manner required by applicable law.

16. Changes to this Policy

We may update this Policy from time to time by posting the revised version on the Platform with a new "Last updated" date. Material changes take effect prospectively; please review this page periodically. Continued use after changes constitutes acceptance where permitted by law.

17. Contact us

For any question, request, or complaint about this Policy or your personal data:

Grievance / data-protection contact: Meenal Paul, Grievance Officer
Email: talktomeenal@gmail.com · Phone: +91 88613 65188
Conveyor Apparel LLP (LLPIN: ACV-5579 · GSTIN: 29AAWFC2575Q1ZB), 007, E Block, Silver County, Near KSRP Quarters, Kudlu, Bangalore South, Bengaluru, Karnataka – 560100, India
We acknowledge complaints within 48 hours and endeavour to resolve them within one month.