Privacy Policy

Moods & Colours Boutique

Last Updated: September 1, 2025

Introduction

At Moods & Colours Boutique, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our online boutique through our website, mobile application, and digital services. By using our website or services, you consent to the collection and use of your information as described in this policy.

Personal Information We Collect

We collect various types of personal information to provide you with the best possible shopping experience. This includes your account and contact information such as your full name, email address, phone number, shipping and billing addresses, account login credentials, and communication preferences. We also gather order and transaction information including your purchase history and order details, payment information which is processed securely through third-party payment providers, shipping preferences and delivery instructions, product reviews and ratings, and return and exchange requests.

Additionally, we collect personal style and preferences data such as your size and fit preferences, style preferences and favorite colors, product wishlist and saved items, custom design requests and specifications, and fashion preferences for different occasions. We also automatically collect technical and usage information including your IP address and device information, browser type and version, operating system information, website usage data and browsing behavior, cookies and tracking technologies data, and search queries and product interactions.

We may also collect marketing and communication data including your newsletter subscription preferences, social media interactions and profile information, survey responses and feedback, marketing campaign engagement data, and referral information. In some cases, we may collect visual content such as profile photos if provided, product photos and styling images, user-generated content and reviews, and photos of custom work or alterations.

How We Collect Information

We collect information in several ways to ensure we can serve you effectively. Information you provide directly includes data collected when you create an account on our website, during the checkout and payment process for online orders, through our website contact forms and inquiry submissions, via live chat, email, or phone communications with our customer support team, when you participate in customer feedback surveys or leave product reviews, and when you subscribe to our email newsletter or promotional updates.

We also automatically collect certain information through your use of our website. This includes website analytics data gathered through cookies, web beacons, and similar tracking technologies, usage data showing how you navigate and interact with our website, technical specifications of your device and browser, and general geographic location based on your IP address, though we do not collect precise location data.

Some information comes to us from third-party sources, such as when you connect your social media accounts or interact with our social media pages, transaction data from secure payment service providers, data from advertising networks and marketing platforms, and information received when friends refer you to our services through referral programs.

How We Use Your Information

We use your information primarily for order processing and service delivery. This means processing your orders, arranging shipping, and handling deliveries, securely processing payments and handling billing, responding to inquiries, resolving issues, and providing customer assistance, maintaining your customer account and preferences, and providing personalized styling advice and custom design services.

Your information also helps us improve website functionality and user experience by ensuring our website functions properly and securely, customizing your browsing experience and showing relevant products, improving website speed, functionality, and user interface, and protecting against fraud, unauthorized access, and cyber threats.

We use your data for marketing and communications purposes, including sending newsletters, promotional offers, and new product announcements via email, suggesting products based on your browsing and purchase history, engaging with you on social media platforms, showing you relevant ads on other websites and platforms through retargeting, and providing exclusive discounts and early access to sales.

For business analytics and improvement, we analyze website usage data to understand how customers use our website and services, develop new products and improve existing offerings based on customer feedback, understand fashion trends and customer preferences through market research, and measure the effectiveness of our marketing campaigns through performance metrics.

We also use your information to meet legal and compliance requirements, including complying with applicable laws, regulations, and legal processes, maintaining records for financial reporting and tax compliance purposes, ensuring compliance with consumer protection and e-commerce regulations, and meeting privacy law requirements to protect customer rights.

Data Retention Policy

We maintain different retention periods for different types of information based on business needs and legal requirements. For active customer accounts, we retain account information for the duration of account activity plus two years after your last login, maintain purchase history for seven years for warranty, tax, and customer service purposes, and keep personal preferences updated regularly while your account remains active.

Transaction and order data follows specific retention schedules where order records are kept for seven years for accounting and customer service purposes, payment information is handled securely by payment processors and we do not store credit card details ourselves, and shipping information is retained for three years for delivery tracking and customer support needs.

Marketing and communication data is managed with email marketing lists maintained until you unsubscribe or after two years of inactivity, website analytics where aggregated data is retained indefinitely but personal identifiers are removed after 26 months, and customer reviews which are retained indefinitely unless you request removal.

Technical and security data includes website logs retained for 12 months for security and troubleshooting purposes, cookie data that expires based on cookie type with session cookies deleted when your browser closes and persistent cookies expiring after two years, and security incident records maintained for three years after incident resolution.

For inactive accounts and data, we delete dormant account data after five years of inactivity, remove unsubscribed marketing data within 30 days of unsubscribe requests, and delete personal data from closed accounts within 90 days, except where legal retention requirements apply.

Data Sharing and Disclosure

We share information with trusted third-party service providers who help us operate our business effectively. These service providers include payment processors for secure payment handling and fraud prevention, shipping partners for order fulfillment and delivery services, website hosting providers for cloud hosting and content delivery services, email marketing services for newsletters and promotional communications, analytics providers for website analytics and performance monitoring, and customer support services for live chat and helpdesk functionality.

We work with marketing and advertising partners including advertising networks for targeted advertising and retargeting campaigns, social media platforms for marketing and customer engagement, affiliate partners for referral programs and partnership marketing, and influencer collaborations for fashion and styling content partnerships.

We may disclose your information when required by law or to protect our rights, including in response to court orders, subpoenas, or legal processes for legal compliance, to cooperate with law enforcement investigations, to prevent and investigate fraudulent activities, and to protect the rights, property, and safety of our business and customers.

In the event of a merger, acquisition, or sale of assets, customer information may be transferred as part of the business transaction, subject to the same privacy protections outlined in this policy.

Data Security

We implement comprehensive technical security measures to protect your information including encryption of all sensitive data in transit and at rest using industry-standard encryption protocols, secure hosting of our website on regularly updated servers, SSL certificates ensuring Secure Socket Layer encryption for all data transmission, access controls with multi-factor authentication and role-based access for staff, and regular security patches and software updates applied promptly.

Payment security is particularly important to us, which is why we use PCI DSS compliant payment processors, do not store credit card information on our servers, process all payments through encrypted secure channels, and maintain advanced fraud detection and prevention systems.

Our data protection practices include regular secure encrypted backups of customer data, established procedures for handling security incidents, regular security and privacy training for all employees, and security audits of service providers and partners to ensure they meet our standards.

Your Rights and Choices

You have significant control over your account and personal data. For account access and control, you can view your personal information through your account dashboard, update your profile, preferences, and contact details, download a copy of your personal data in a portable format, and close your account and request data deletion.

Regarding marketing communications, you can unsubscribe from marketing emails using the link provided in every email, opt out of SMS marketing by replying STOP to text messages, choose which types of communications you want to receive, and adjust how often you receive promotional communications.

You also have privacy controls available including managing cookie preferences through our cookie consent banner, opting out of behavioral advertising through industry opt-out pages, requesting your data in a machine-readable format for data portability, and requesting correction of inaccurate personal information.

Where applicable under local laws, you may have additional legal rights including the right to erasure to request deletion of your personal data, right to restriction to limit how we process your personal data, right to object to certain types of data processing, and right to rectification to correct inaccurate or incomplete data.

Cookies and Online Tracking

We use various types of cookies to enhance your browsing experience. Essential cookies are necessary for website functionality and security, performance cookies help us understand how visitors use our website, functional cookies remember your preferences and settings, and marketing cookies are used to deliver relevant advertisements and track campaign effectiveness.

You can manage cookies through your browser settings, adjust preferences through our cookie consent tool, use industry opt-out pages for behavioral advertising, and modify advertising preferences in your mobile device settings. We use third-party tracking tools including Google Analytics for website performance analysis, Facebook Pixel for social media advertising, email marketing platforms for campaign tracking, and advertising networks for retargeting campaigns.

International Data Transfers

When we transfer your data outside of India, we ensure appropriate safeguards are in place through adequacy decisions using countries with adequate data protection laws, standard contractual clauses implementing approved data transfer agreements, certification programs working with certified service providers, and binding corporate rules with internal policies for data protection across borders.

Children's Privacy

We do not knowingly collect personal information from children under 13 years of age. If we discover we have collected such information without proper parental consent, we will take immediate steps to delete it. Parents who believe their child has provided personal information to us can contact us for immediate removal.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes through email notification to registered customers at least 30 days before changes take effect, prominent website banners on our homepage, notifications in your customer account dashboard, and updates posted on our official social media accounts. Your continued use of our services after policy changes indicates acceptance of the updated terms.

Contact Information

For privacy-related inquiries, please contact our Data Protection Officer at Moods & Colours Boutique. You can reach us via email or through our website contact form, by phone during our customer support hours, or by mail at our business address. Our customer support hours are Monday through Saturday from 10:00 AM to 7:00 PM IST, and Sunday from 11:00 AM to 5:00 PM IST. For specific privacy requests such as data deletion, correction, or portability, drop us email.

Acknowledgment

By using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. This policy is effective as of September 1, 2025, and is Policy Version 2.0 designed specifically for online boutique operations in compliance with applicable Indian privacy laws and international best practices for e-commerce businesses