Legal & Privacy
Privacy matters. Clarity matters too.
This Privacy Policy explains how DORIX SHOP and DORIX TECHNOLOGIES PRIVATE LIMITED may collect, use, store, process and share personal data when you browse our website, create an account, place an order, make a payment, contact us or otherwise interact with our services.
This Privacy Policy applies to personal information processed in connection with DORIX SHOP, including our website, online store, customer account features, checkout, order processing, customer assistance and related digital services. By using our services, you acknowledge that you have read this Policy.
Scope and Identity of the Business
DORIX SHOP is operated by DORIX TECHNOLOGIES PRIVATE LIMITED. References in this Policy to "we", "us", "our", "Company" or "DORIX SHOP" refer to the entity responsible for operating the website and processing relevant personal information in connection with the services described here.
This Policy applies to visitors, customers, registered account holders, persons contacting customer support and other individuals whose personal data is processed in connection with our online store.
Applicable Indian Legal Framework
We intend to handle personal information in accordance with applicable Indian laws and regulations, as amended or brought into force from time to time.
- Digital Personal Data Protection Act, 2023 and rules made under it, to the extent applicable and in force.
- Digital Personal Data Protection Rules, 2025, taking account of their phased commencement.
- Information Technology Act, 2000 and applicable rules made under it.
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable.
- Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020, where applicable to our e-commerce operations.
- Other applicable statutory, taxation, accounting, consumer protection, cybersecurity and lawful governmental requirements.
Personal Data We May Collect
The information we collect depends on how you use our website and services.
Name and other information you choose or are required to provide for an order or account.
Email address, mobile number, billing address, shipping address and related contact details.
Order number, products purchased, order value, discounts, delivery information and order history.
Account identifiers, login-related information, saved preferences and account activity.
IP address, device type, browser information, timestamps, website activity and technical logs.
Messages, emails, order queries, grievance requests and other communications sent to us.
How We Collect Personal Data
Personal information may be collected directly from you or generated during your interaction with the website and our service providers.
- When you browse or search the website.
- When you create or use a customer account.
- When you add products to your cart.
- When you place or complete an order.
- When you provide billing or delivery information.
- When you use a payment service.
- When you track an order.
- When you contact customer support.
- Through cookies and similar technologies where deployed.
- From payment, logistics, fraud-prevention, technology or other service providers where lawful.
How We Use Personal Data
We may process information for purposes reasonably connected with operating our e-commerce business, including:
- Creating and maintaining customer accounts.
- Processing and confirming orders.
- Arranging packing, shipping and delivery.
- Providing order tracking information.
- Managing returns, refunds or cancellations.
- Processing and reconciling payments.
- Sending transactional order communications.
- Responding to questions and grievances.
- Preventing fraud, misuse and security incidents.
- Maintaining and improving website performance.
- Maintaining accounting, taxation and business records.
- Complying with lawful government or court requirements.
- Sending promotional communications where permitted by law and applicable preferences or consent.
Consent and Lawful Processing
Where consent is required under applicable law, we will seek consent in a manner appropriate to the relevant processing activity. You may have the ability to withdraw consent in accordance with applicable law.
Withdrawal of consent does not necessarily affect processing already lawfully carried out before such withdrawal. Certain information may also need to be retained or processed where permitted or required by law, including for legal claims, taxation, accounting, fraud prevention or regulatory compliance.
We seek to limit collection of personal information to information reasonably necessary for specified business or lawful purposes.
Cookies and Similar Technologies
Our website may use cookies, local storage and similar technologies to operate and improve website functions.
Cookies may be used for:
- Maintaining shopping cart functionality.
- Customer account sessions and authentication.
- Remembering website preferences.
- Security and fraud prevention.
- Website performance and analytics, if enabled.
- Advertising or marketing functions, if enabled and lawful.
Browser settings may allow you to block or delete cookies. Blocking strictly necessary cookies may affect website functionality, including cart, login or checkout features.
Payments and Financial Information
Payments may be processed through banks, payment aggregators, payment gateways, UPI infrastructure or other authorised payment service providers.
Depending on the payment method, such providers may independently collect information necessary to process a transaction. Their handling of information may also be governed by their own privacy policies, contractual terms and regulatory obligations.
We may receive transaction references, payment status, amount, payment method or similar confirmation information required to reconcile an order.
When Personal Data May Be Shared
We do not treat personal information as a product for unrestricted sale. We may share information where reasonably necessary for legitimate business operations or where legally permitted.
- Courier and logistics providers.
- Payment processors and banking partners.
- Website hosting and technology providers.
- Email, SMS or transactional communication providers.
- Fraud prevention and security providers.
- Customer support service providers.
- Analytics providers where such services are used.
- Accountants, auditors, legal advisers and consultants.
- Government departments, regulators, courts or law enforcement where disclosure is lawfully required.
- Parties involved in a lawful merger, acquisition, restructuring or transfer of business, subject to appropriate legal safeguards.
Third-Party Service Providers
We may depend on third-party technology and commercial service providers to operate portions of our website, order fulfilment, communications, security and payments.
Where such providers process personal information on our behalf, we seek to use providers appropriate to the nature of the services being performed and, where required, apply appropriate contractual or operational safeguards.
Some providers may separately determine how information is processed for their own lawful functions. In such cases, their own privacy terms may also apply.
Cross-Border Processing and Storage
Certain technology, cloud, communications, payment or service providers may process or store information using infrastructure located in different jurisdictions.
Where personal data is transferred outside India, such processing will be subject to applicable Indian law, including any restrictions, notifications or requirements issued by the Government of India from time to time.
Data Retention
We retain personal information for no longer than reasonably necessary for the purpose for which it was collected, subject to legal, accounting, taxation, fraud-prevention, dispute-resolution and other legitimate retention requirements.
Different categories of records may therefore be retained for different periods. When information is no longer required, it may be deleted, anonymised, archived or otherwise handled in accordance with applicable law and our operational requirements.
Information Security
We seek to implement reasonable administrative, technical and organisational safeguards appropriate to the nature of information processed and the associated risks.
Such safeguards may include access controls, secured systems, account controls, software updates, logging, backups, security monitoring and restrictions on personnel access where appropriate.
No electronic transmission, internet service or storage system can be guaranteed to be completely secure. Customers should also protect account passwords, devices and authentication information.
Your Privacy Rights
Subject to applicable law and the date on which relevant statutory provisions come into force, individuals may have rights regarding their personal data.
These may include, where applicable:
- Requesting information about personal data processed about you.
- Requesting correction of inaccurate or incomplete data.
- Requesting erasure where legally available.
- Withdrawing consent where processing is based on consent and withdrawal is legally available.
- Raising a grievance regarding processing of personal data.
- Exercising a right to nominate another individual where such a right applies under law.
Requests may be subject to reasonable identity verification and limitations imposed by applicable law.
Children's Personal Data
Our store is intended primarily for customers legally capable of entering into transactions. We do not knowingly seek unnecessary personal information from children.
Where processing of a child's personal data is subject to specific requirements under applicable law, including requirements concerning parental or lawful guardian consent, we will apply those requirements where and when they are legally applicable.
A parent or lawful guardian who believes that a child has provided personal information inappropriately may contact us using the grievance details in this Policy.
Promotional Communications
Where permitted, we may use contact information to send information concerning products, offers or store updates. Marketing communications will be handled subject to applicable legal requirements and available communication preferences.
Transactional communications concerning an existing order, account, payment, security issue, return or customer-service request may continue where necessary even if promotional communications are declined.
External Websites and Third-Party Links
Our website may contain links or integrations that lead to services operated by third parties. We do not control every external website and this Privacy Policy does not automatically apply to third-party services.
Customers should review the privacy policies and terms of relevant third parties before submitting personal information directly to them.
Personal Data Breach and Security Incidents
If we become aware of a personal data breach or cybersecurity incident affecting information under our control, we may investigate, mitigate and respond according to the nature of the incident.
Where notification to affected individuals, governmental authorities, the Data Protection Board of India, CERT-In or another competent authority is required under applicable law, we will seek to comply with the relevant legal requirements in force at that time.
Changes to This Privacy Policy
We may revise this Policy to reflect changes in our website, business processes, technology, service providers or applicable law.
A revised version may be published on this page with an updated effective or revision date. Where a change requires additional notice or consent under applicable law, appropriate steps may be taken.
Grievance Redressal and Contact Information
Questions, privacy requests or grievances relating to this Privacy Policy or the handling of personal information may be sent to the contact details below.