2-day delivery across Dwarka · First exchange free
Back to shop
Policies

Privacy policy

Last updated 24 August 2026 · TODO — legal name exactly as on your GST certificate (trading as The Dwarka Store)

TODO — legal name exactly as on your GST certificate, trading as The Dwarka Store, is the data fiduciary for the personal data described here. This policy explains what we collect, why we collect it, how long we hold it, and what you can make us do with it — under the Digital Personal Data Protection Act, 2023 and the rules made under it.

What we collect

From you, the parent or guardian:

  • Your name, mobile number and delivery address, so an order can reach you.
  • Your order history and the payment method chosen.
  • Any message, call or complaint you send us.

About your child, entered by you:

  • The child's first name or nickname — used only as a label so you can tell two children's lists apart.
  • School, class and section, so we can show the correct uniform list for that school.
  • Shirt, trouser or skirt size and waist fit, so we send clothing that fits.

Technical data: we keep basic server logs and error reports. We do not run advertising trackers, we do not build behavioural profiles, and we do not use analytics that follow you to other websites.

Children's data — how we handle it

Section 9 of the Digital Personal Data Protection Act, 2023 treats data about anyone under 18 as requiring extra care, and we take that seriously. Three commitments follow from it:

  • Only a parent or guardian creates a child profile. The account holder confirms they are the parent or lawful guardian before a child can be added, and that confirmation is recorded. A child does not hold an account here.
  • We never track or profile a child. No behavioural monitoring, no advertising targeted at a child, no sale or sharing of a child’s data with anyone for marketing. This is prohibited by law and it is also simply not something a uniform shop needs.
  • We collect the minimum. A first name is enough — please do not enter a full legal name, date of birth, admission number or photograph. Sizes and school are what we actually need to send the right uniform.

You can delete a child’s profile yourself at any time from the child’s edit screen, which removes it immediately and completely.

Why we hold it, and on what basis

Everything above is processed on the basis of your consent, given when you place an order or save a child, and for the specified purposes only: fulfilling your order, arranging delivery and exchanges, answering your questions, and keeping the tax records the law requires us to keep.

You can withdraw consent at any time by writing to TODO — e.g. support@thedwarkastore.com. Withdrawing it is as easy as giving it. We will stop processing and delete what we are not legally required to retain — though we may not be able to complete an order already in progress.

Who else sees it

We do not sell personal data. We share it only where the order cannot happen otherwise:

Razorpay Software Private Limited
Processes card and UPI payments. Your card details go directly to Razorpay and are never stored on our servers — we only ever see a payment reference and whether it succeeded.
Our own delivery staff
See your name, address and phone number, for the delivery itself and nothing else.
Our hosting and email providers
Store the data on our behalf under contract, on servers located in India.
Government authorities
Only where a specific law or a valid legal order requires it.

How long we keep it

  • Order and invoice records: 8 years, as required under GST and income-tax law.
  • Child profiles and saved addresses: until you delete them, or after three years of no orders — whichever comes first. We will write to you before deleting on account of inactivity.
  • Complaint correspondence: 3 years from resolution.
  • Server logs: 180 days.

How we protect it

The site is served over HTTPS. Access to order data is limited to the shop staff who need it. We do not store card numbers, CVVs or UPI PINs at all — Razorpay handles those under PCI DSS. If a breach affecting your data occurs, we will notify you and the Data Protection Board of India as the DPDP Rules require.

Your rights

Under the DPDP Act you may ask us to:

  • Tell you what personal data of yours we hold and who we have shared it with.
  • Correct or complete anything inaccurate.
  • Erase data we no longer need for the purpose you gave it for.
  • Nominate someone to exercise these rights on your behalf if you die or become incapacitated.

Write to TODO — e.g. support@thedwarkastore.com and we will respond within 30 days. If you are not satisfied with our answer, escalate to our grievance officer below, and after that you may complain to the Data Protection Board of India.

Grievance officer

Name
TODO — a real person, usually the proprietor
Designation
Grievance Officer
Email
TODO — e.g. grievance@thedwarkastore.com
Phone
+91 99995 05174
Address
Street Number 36, Block RZ B, Raja Puri, Matiala, New Delhi, Delhi 110059, India

Changes to this policy

If we change how we handle your data we will update this page and change the date at the top. Where the change is significant we will tell you directly before it takes effect.

Questions about this policy? Write to TODO — e.g. support@thedwarkastore.com or call +91 99995 05174.