Privacy Policy

Jain Wool Corner ("Company", "we", "us", "our"), a sole proprietorship business *(confirm)* having its principal place of business at Shop No. 48, Sector 19-C, Near Palika Bazaar, Chandigarh, 160019, operates the website www.jainwoolcorner.com (the "Website") and is committed to protecting the privacy of everyone who visits or transacts on it.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and the rights you have over it. It is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Consumer Protection (E-Commerce) Rules, 2020.

This Policy should be read together with our Terms & Conditions . In case of any conflict between the two on matters of data privacy, this Policy shall prevail.

This Policy applies to all personal data collected through the Website, whether you are browsing, registering an Account, placing an Order (domestic or international), contacting customer support, or subscribing to receive updates from us.

By using the Website, creating an Account, or placing an Order, you consent to the collection, use, storage, and disclosure of your personal data as described in this Policy. Where processing is based on your consent, you may withdraw it at any time as described in Section 16, without affecting the lawfulness of processing carried out before such withdrawal.

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.

• "Data Principal" means the individual to whom the personal data relates — i.e., you.

• "Data Fiduciary" means the entity that determines the purpose and means of processing personal data — i.e., Jain Wool Corner.

• "Processing" means any operation performed on personal data, including collection, storage, use, sharing, and deletion.

• "Sensitive Personal Data" includes information such as financial information, in the limited sense in which it may be processed by our payment gateway on our behalf (see Section 10).

• Identity & account information — name, email address, phone number, and password, when you register an Account, sign in via Google, or place an Order as a guest.

• Order & transaction information — billing and shipping address, items purchased, order value, order history, and (for international orders) any customs-related information required for shipment.

• Payment information — processed directly by our third-party, PCI-DSS compliant payment gateway. We do not receive or store your full card number, CVV, or UPI PIN on our own servers (see Section 12).

• Wallet & referral information — if you use our wallet or referral rewards feature, we record your wallet balance, referral code, and which Account referred which other Account, in order to apply rewards correctly.

• Usage & device data — pages visited, products viewed, approximate location (derived from IP address), browser/device type, and similar technical data collected automatically, including via cookies (see Section 9).

• Communications — messages you send us through the contact form, the Track Order tool, WhatsApp, email, or phone, including their content and, where relevant, call/chat metadata.

• Marketing preferences — whether you have opted in or out of receiving promotional emails or messages from us.

• Directly from you — when you register, place an Order, fill in a form, or contact us.

• Automatically — through cookies and similar technologies as you browse the Website (see Section 9).

• From third parties — limited confirmation data from our payment gateway (e.g., payment success/failure status) and, where you sign in with Google, the name and email address shared by Google under your Google Account settings.

We process your personal data on one or more of the following legal bases:

• Performance of a contract — to create your Account, process and deliver your Order, handle returns/refunds, and provide customer support.

• Your consent — for optional activities such as receiving promotional/marketing communications, or using cookies beyond those strictly necessary for the Website to function.

• Legal obligation — to comply with tax, accounting, consumer protection, and other applicable laws (e.g., retaining invoices for the period required under GST law).

• Legitimate business use — for matters such as fraud prevention, Website security, and improving our products and user experience, balanced against your rights and expectations.

• Process, confirm, and fulfil your Orders, including international shipments and customs paperwork where applicable

• Send transactional communications — Order confirmations, shipping/delivery updates, return/refund status, and responses to your queries

• Manage your Account, wallet balance, and referral rewards

• Send promotional or marketing communications (offers, new arrivals, seasonal updates) only where you have not opted out, with an unsubscribe option in every such communication (see Section 8)

• Detect and prevent fraud, abuse, or violations of our Terms & Conditions

• Improve our Website, product range, and customer experience, including through aggregate/anonymised analysis of usage data

• Comply with applicable legal, tax, and regulatory obligations

From time to time, we may send you promotional emails or messages about new products, offers, or updates, including through bulk email communications. You may opt out of marketing communications at any time by:

• Contacting us using the details in Section 19 and requesting removal from marketing communications.

Opting out of marketing communications does not affect transactional communications (such as Order confirmations or shipping updates), which we will continue to send as necessary to fulfil your Order.

We currently use session cookies that are strictly necessary to keep you logged in and to maintain your shopping cart while you browse. These essential cookies do not require consent under applicable law, as the Website cannot function correctly without them.

If we introduce analytics cookies (e.g., Google Analytics), advertising/remarketing cookies (e.g., Meta Pixel), or any similar non-essential tracking technology in future, we will update this Policy and display a cookie consent banner allowing you to accept or decline non-essential cookies before they are set.

You can also control cookies through your browser settings; disabling essential cookies may affect your ability to log in or use the cart.

We do not sell your personal data. We share personal data only with:

• Payment processors/gateways — to complete and verify transactions

• Courier and logistics partners — to deliver your Order, including, for international Orders, customs authorities and international logistics partners in the destination country as required to clear and deliver the shipment

• Professional advisors — such as accountants or legal counsel, where necessary and under confidentiality obligations

• Legal and regulatory authorities — where required by law, court order, or to protect our legal rights

• A successor business — in the event of a merger, acquisition, or sale of business assets, subject to that successor being bound by materially equivalent privacy commitments

Because we ship internationally, limited Order and shipping data (name, address, contact details, and Order contents) is necessarily shared with international courier partners and customs authorities in the destination country in order to complete delivery. Such transfers are made only to the extent necessary to fulfil your Order.

The DPDP Act permits the transfer of personal data outside India except to countries specifically restricted by the Central Government. We will comply with any such restrictions as they are notified.

Online payments are processed securely through our third-party payment gateway. We do not store your card, UPI, or net-banking credentials on our own servers. All payment data in transit is encrypted, and our payment gateway partner is PCI-DSS compliant.

• Order and transaction records, including invoices, are retained for the period required under applicable GST and accounting laws (currently up to 8 years from the end of the relevant financial year, subject to change in law).

• Account information is retained for as long as your Account remains active, and for a reasonable period thereafter to handle any residual returns, disputes, or legal claims, after which it is deleted or anonymised upon request or periodic review.

• Marketing consent/opt-out records are retained to ensure we continue to honour your preferences.

• Communications (contact form, support chats) are retained for as long as reasonably necessary to resolve your query and for a limited period afterward for quality and dispute-resolution purposes.

We implement reasonable technical and organisational safeguards to protect your personal data, including encrypted data transmission (HTTPS), restricted access to personal data on a need-to-know basis, secure hosting infrastructure, and reliance on PCI-DSS compliant payment processing. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Website is not directed at children under 18. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or legal guardian. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete it.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete personal data

• Erase your personal data, subject to our legal obligation to retain certain records (e.g., transaction records for tax purposes)

• Withdraw consent for any processing based on consent (e.g., marketing communications), without affecting processing carried out before withdrawal

• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, as provided under the DPDP Act

• Grievance redressal — raise a complaint with our Grievance Officer (Section 19), and if unresolved, escalate to the Data Protection Board of India once it is operational

Many of these actions — updating your name, email, phone, or address — can be done directly from your Account dashboard. For anything else, contact us using the details in Section 19.

To exercise any right in Section 16, write to us at the contact details in Section 19, clearly describing your request. We may ask you to verify your identity before acting on the request, to protect your data from unauthorised access. We will acknowledge your request within 48 hours and aim to resolve it within 30 days, in line with our grievance redressal commitment in Section 19.

The Website may contain links to third-party websites or services (e.g., our payment gateway, WhatsApp, Google sign-in, social media pages). This Policy does not apply to those third parties, and we encourage you to review their own privacy policies before sharing personal data with them.

In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology (Intermediary Guidelines) Rules, 2021, the following Grievance Officer has been appointed for privacy and data-related complaints:

Grievance Officer: Rajnish Jain

Address: Shop No. 48, Sector 19-C, Near Palika Bazaar, Chandigarh, 160019

Email: rajnishjain1980@gmail.com

Phone: 99888 58877, available 11:00 AM–8:00 PM IST.

We will acknowledge any complaint within 48 hours of receipt and endeavour to resolve it within 30 days.

For general order-related queries (not formal privacy complaints), you may also reach our customer support team via WhatsApp: Rajnish Jain, +91 99888 58877, available 11:00 AM–8:00 PM IST.

In the unlikely event of a personal data breach that is likely to affect you, we will take reasonable steps to notify you and, where required, the Data Protection Board of India, in accordance with the DPDP Act and applicable rules, and will describe the nature of the breach and the steps being taken to address it.

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The “Last updated” date at the top will be revised accordingly. Your continued use of the Website after such changes constitutes acceptance of the revised Policy.

This Policy is governed by the laws of India, and courts at Chandigarh shall have exclusive jurisdiction over any dispute arising out of it, without prejudice to your right to approach the Data Protection Board of India or a Consumer Forum.

Jain Wool Corner

Shop No. 48, Sector 19-C, Near Palika Bazaar, Chandigarh, 160019

GSTIN: [To be added]

Privacy queries/grievances (WhatsApp only, 11:00 AM–8:00 PM IST):

Rajnish Jain — rajnishjain1980@gmail.com | +91 99888 58877

General order support (WhatsApp only, 11:00 AM–8:00 PM IST):

Rajnish Jain — rajnishjain1980@gmail.com | +91 99888 58877