At RareTails (“we,” “us,” or “our”), we value your trust and are committed to protecting your personal data and the privacy of your pet-loving household. This Privacy Policy explains how we collect, use, process, store, disclose, and protect your digital personal data when you visit our website, purchase our pet clothing and wellness products (such as our CalmWrap vest), or interact with our customer support.
This document is published in compliance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000. By accessing or using our website, you consent to the data practices described in this policy.
1. Personal Data We Collect
We collect only the minimal personal data necessary to process your orders, deliver products, and improve your experience with RareTails:
- Identity & Contact Information: Your name, email address, phone number, shipping address, and billing address.
- Order & Transaction Details: Details about products purchased (sizes, product choices), payment status, and order history. (Note: We do not directly collect or store complete credit card or net banking credentials; payments are processed securely via RBI-regulated payment gateways.)
- Pet Details (Optional): Pet name, breed, size, weight, and pet comfort preferences provided voluntarily for sizing support or customised product recommendations.
- Technical & Usage Data: IP address, device type, browser type, cookies, and website navigation patterns collected automatically during your visit.
- Communication Data: Information you share when contacting our support team, filling out feedback forms, or subscribing to our newsletter.
2. Legal Basis and Purpose of Data Processing
Under Section 6 and Section 7 of the DPDP Act, 2023, we process your personal data under the grounds of explicit consent or for specified legitimate uses:
- Order Fulfilment: To process transactions, pack orders, dispatch shipments via courier partners, and issue order updates via SMS/Email/WhatsApp.
- Customer Support: To resolve queries, handle returns/exchanges, and address sizing/comfort concerns.
- Marketing Communications: To send promotional offers, new product launches, and pet care insights (only with your explicit opt-in consent).
- Website Optimisation: To analyse site traffic, prevent fraudulent activity, and enhance user experience.
- Legal Compliance: To meet obligations under applicable tax laws, accounting standards, and statutory requirements in India.
3. Disclosure and Sharing of Personal Data
We do not sell, rent, or trade your personal data to third parties. We share your personal data only with trusted Data Processors who support our operations under strict confidentiality and security agreements:
- Logistics & Courier Partners: To ensure physical delivery of your orders (e.g., Delivery/Courier services).
- Payment Gateways: To execute payment transactions securely.
- IT & Hosting Providers: Service providers hosting our e-commerce platform and databases securely within India.
- Legal Authorities: When mandated by law, court order, or governmental agencies under Indian jurisdiction.
4. Data Security and Technical Safeguards
We implement reasonable, state-of-the-art administrative, technical, and organisational security safeguards to protect your personal data from unauthorised access, loss, misuse, or alteration:
- End-to-end SSL/TLS encryption for data in transit across our website.
- Secure storage protocols and restricted access controls for user databases.
- Periodic security audits and compliance reviews.
5. Data Retention and Deletion
- We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by Indian tax and commercial laws.
- Once the specified purpose is complete, or upon valid request for consent withdrawal/erasure, we will securely delete or anonymise your data, unless retention is legally mandated.
6. Your Rights under the DPDP Act, 2023
As a "Data Principal" under Indian law, you hold the following rights regarding your personal data:
- Right to Access: Request a summary of the personal data we hold about you and the processing activities undertaken.
- Right to Correction & Erasure: Request correction of inaccurate/outdated data or the complete deletion of your data.
- Right to Withdraw Consent: Withdraw your consent for data processing (including marketing opt-outs) at any time easily.
- Right of Grievance Redressal: Seek resolution for any privacy concerns or grievances regarding your data processing.
- Right to Nominate: Nominate another individual to exercise your data rights in the event of death or incapacity.
To exercise any of these rights, please get in touch with our Grievance Officer using the details provided below.
7. Processing Data of Children
RareTails does not knowingly collect or process personal data from individuals under 18 years of age without verifiable parental or legal guardian consent.
8. Cookies and Tracking Technologies
Our website uses standard cookies and tags to enhance your browsing experience, remember cart contents, and analyse site metrics. You can disable non-essential cookies through your browser settings at any time.
9. Grievance Redressal Officer
In accordance with the DPDP Act, 2023, and IT Rules, 2011, if you have any questions, feedback, or complaints regarding this Privacy Policy or your personal data, you may reach out to our designated Grievance Officer:
- Brand Name: RareTails
- Grievance Officer: Grievance Redressal Desk / DPO
- Email: support@raretails.com
- Response Timeline: We will acknowledge your grievance within 24–48 hours and aim to resolve all legitimate requests within 15 business days.
If you are unsatisfied with our resolution, you retain the right to escalate the matter to the Data Protection Board of India as per statutory provisions.
10. Updates to This Policy
We reserve the right to modify or update this Privacy Policy from time to time to reflect regulatory changes or legal developments. Any material changes will be notified on this page with an updated "Last Updated" date.