Privacy Policy

1. Who We Are

suuperstitch is a fashion discovery platform based in India. We curate fashion products from third-party brands and help you discover them in one place. When you find something you like, we redirect you to the brand's official website where you can make your purchase directly.

We are not a retailer. We do not manufacture, stock, ship, or sell products. We do not process payments. All transactions happen between you and the respective brand or merchant.

suuperstitch is currently operated from Maharashtra, India. The company is in the process of formal incorporation.

2. Information We Collect

We follow a data minimisation approach and only collect information that is necessary to provide and improve our services.

2.1 Information You Provide

When you create an account or interact with suuperstitch, you may provide:

• Name (optional, for personalising your account)
• Email address (required for account creation)
• Password (securely hashed; we never store or see your plain-text password)
• Authentication data from third-party sign-in providers (such as Google), including your name, email, and profile picture as shared by the provider
• Wishlist and saved products associated with your account
• Brand submissions if you use our Submit a Brand feature (brand name, your name, contact email, brand website, optional social links, and any additional details you provide)

2.2 Information Collected Automatically

When you visit suuperstitch, we may automatically collect:

• Device information: browser type, operating system, screen resolution, device type
• Usage data: pages visited, time spent, click patterns, scroll behaviour, search queries
• Network information: IP address (which may indicate your approximate location), referring URL
• Cookies and similar technologies: as described in our Cookie Policy

2.3 Information We Do Not Collect

We want to be equally clear about what we do not collect:

• Payment or financial information (credit cards, bank accounts, UPI IDs)
• Phone numbers (not required for account creation)
• Government-issued identification
• Precise geolocation data
• Biometric data

3. How We Use Your Information

We use your information for the following purposes:

• Providing our services: creating and managing your account, saving your wishlist, personalising your experience
• Improving the platform: understanding how users interact with suuperstitch to improve navigation, search, discovery, and overall user experience
• Product discovery: powering search, recommendations, and personalised suggestions
• Communication: responding to your enquiries, sending service-related notifications (such as account security alerts)
• Security and integrity: detecting and preventing fraud, abuse, and security incidents
• Legal compliance: fulfilling legal obligations and responding to lawful requests

We do not sell your personal information to third parties. We do not use your data for purposes unrelated to the services described in this policy.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to operate the platform, understand usage patterns, and improve the experience. For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

5. Third-Party Services

We use the following third-party services to operate and improve suuperstitch. Each service may process certain data as described below:

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies for details on how they handle data.

6. Data Sharing

We may share your information only in the following circumstances:

• Service providers: with the third-party services listed above, solely to operate and improve suuperstitch
• Legal requirements: when required by applicable law, court order, or government request
• Safety and security: to protect the rights, safety, or property of suuperstitch, our users, or the public
• Business transfers: in connection with a merger, acquisition, or sale of assets (you will be notified of any change in ownership or use of your personal information)

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

7. Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfil the purposes described in this policy. Specifically:

• Account data: retained while your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.
• Usage and analytics data: retained in anonymised or aggregated form and may be kept indefinitely for analytics and improvement purposes.
• Legal obligations: certain records may be retained longer if required to comply with legal, accounting, or regulatory obligations.

8. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

8.1 Under Indian Law (DPDP Act 2023)

As a data principal under India's Digital Personal Data Protection Act, you have the right to:

• Access a summary of your personal data and processing activities
• Correct inaccurate or incomplete personal data
• Erase your personal data (subject to legal obligations)
• Nominate another individual to exercise your rights in case of death or incapacity
• Lodge a grievance with our Grievance Officer
• File a complaint with the Data Protection Board of India

8.2 Under GDPR (for users in the European Economic Area)

If you are located in the EEA, you may also have the right to:

• Request access to your personal data
• Request rectification or erasure of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with your local supervisory authority

We do not currently appoint a Data Protection Officer or EU Representative. As an early-stage India-based startup, these roles are not currently required. We will appoint them if our legal obligations change.

8.3 Exercising Your Rights

To exercise any of these rights, please contact us at hello@suuperstitch.com. We will respond to your request within 30 days (or sooner where required by law).

9. Children's Privacy

suuperstitch is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18 years of age without the consent of a parent or legal guardian, as required by applicable law, including India's DPDP Act.

If we become aware that we have collected personal information from a child in violation of applicable laws, we will take prompt steps to delete such information. If you believe a child has provided us with personal information, please contact us at hello@suuperstitch.com.

10. International Users

suuperstitch is based in India and our services are primarily designed for users in India. If you access suuperstitch from outside India, please be aware that your information may be transferred to, stored, and processed in India, where data protection laws may differ from those in your jurisdiction.

By using suuperstitch, you consent to the transfer and processing of your information in India. We take appropriate measures to protect your data regardless of where it is processed.

11. Security

We take the security of your information seriously and implement appropriate technical and organisational measures to protect it, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing (passwords are never stored in plain text)
• Access controls limiting who can access personal data
• Regular security monitoring through Cloudflare and Sentry
• Infrastructure hosted on reputable, security-certified platforms

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you discover a security vulnerability, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on suuperstitch where appropriate
• Notify registered users by email for significant changes, where practical

We encourage you to review this policy periodically. Your continued use of suuperstitch after changes are posted constitutes your acceptance of the updated policy.

13. Contact & Grievance Officer

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

• Email: hello@suuperstitch.com

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, our designated Grievance Officer is:

• Name: Prashant Indurkar
• Designation: Founder & Grievance Officer
• Email: hello@suuperstitch.com

The Grievance Officer will acknowledge your complaint within 24 hours and work to resolve it within 15 days of receipt, as required by applicable law.