Privacy Policy

This policy explains how aaoms INDIA handles personal data on aaoms.co.in. It is written to sit alongside the plain-language DPDP Act 2023 guide in our FAQ, and it applies to customers, account holders and anyone who contacts us.

Who is responsible for your data

The data fiduciary is aaoms INDIA, Bangalore, Karnataka, India. GSTIN 29HCRPS4980M1Z7. Privacy questions and requests go to our Data Protection Officer at privacy@aaoms.co.in.

What we collect

• Order details: name, email address, mobile number with country code, delivery address, postal code, country, and the items you ordered.
• Embroidery details: the name, designation, logo file and placement instructions you send for a custom order.
• Account details: email, hashed password or one-time code, saved addresses, order history and downloads.
• Payment details: the method used and the payment reference. Card numbers, UPI PINs and bank credentials are entered on the payment provider's page and are never stored by us.
• Messages: WhatsApp, email and contact-form correspondence, kept so we can resolve the query.
• Technical data: IP address, browser and device type, pages viewed, and the currency, country and language preferences stored in your browser.

Why we use it

• To accept, produce, pack and deliver your order, including embroidery production and courier booking.
• To confirm international courier rates with you on WhatsApp and email after checkout.
• To provide support, handle returns and process refunds.
• To meet tax, accounting and consumer-protection obligations, including GST invoices.
• To prevent fraud and misuse of offers, accounts and payment methods.
• To send order updates. Marketing messages are sent only when you ask for them, and every message carries an opt-out.

We do not collect health information about you or your patients. Embroidery artwork is treated as your content and is used only to produce the order.

Consent and withdrawal

We process order data because it is necessary to perform the contract you enter when you buy, and other data on the basis of your consent. You can withdraw consent at any time by writing to privacy@aaoms.co.in. Withdrawal does not affect processing already carried out, and it does not remove records we must keep by law.

Who we share it with

• Courier partners, who receive the name, address and phone number needed for delivery.
• Payment providers: Razorpay for Indian payments and PayPal for international and digital payments.
• Embroidery and production vendors, who receive only the specifications needed to make the item.
• Hosting, email and analytics providers that run the site and our mail.
• Tax authorities, courts and regulators where the law requires it.

We never sell personal data, and we do not share it for third-party advertising. Some providers process data outside India, for example PayPal and international couriers; those transfers are limited to what the service needs.

How long we keep it

• Order, invoice and tax records: for the period required by Indian tax and accounting law.
• Account data: while your account is open, then deleted or anonymised on request unless a legal retention duty applies.
• Support conversations: up to 24 months after the query is closed.
• Marketing preferences: until you opt out.
• Server and security logs: typically 90 days.

How we protect it

Data is transmitted over HTTPS and stored on access-controlled systems. Passwords are hashed, admin access is limited and logged, and payment credentials never reach our servers. If a breach affects you, we notify you and the Data Protection Board of India as required.

Your rights

• Ask what data we hold about you and receive a copy.
• Correct data that is wrong or incomplete.
• Ask us to erase data we no longer need.
• Receive your data in a portable format.
• Withdraw consent where processing depends on it.
• Nominate someone to exercise your rights if you cannot.
• Complain to our Data Protection Officer, and to the Data Protection Board of India if we do not resolve it.

Write to privacy@aaoms.co.in with 'DPDP Request' in the subject. We acknowledge and respond within 72 hours, and complete verified requests within the timelines set by the Act. Account holders can also correct most details from the account dashboard.

Cookies

Essential cookies keep you signed in, hold your cart, remember your currency, country and language, and record your cookie choice. Analytics cookies load only after you accept them. There are no advertising cookies. The detail is in our Cookie Policy.

Children

The store is intended for adults placing orders on their own behalf or for an institution. We do not knowingly collect data from children under 18. If you believe a child has given us data, write to us and we will delete it.

Changes to this policy

When the policy changes we update the date at the top of this page. Material changes that affect how we use existing data are notified by email to account holders before they take effect.