Privacy Policy

Last updated: 8 June 2026

DAC ("we", "us", "our") respects your privacy. This Privacy Policy describes how we collect, use, store, and protect personal data when you use dacfashion.com, in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, and applicable rules.

Effective date: 1 June 2026  |  Last updated: 8 June 2026  |  Data Fiduciary: DAC Pvt. Ltd.

We process personal data lawfully, for specified purposes, and only retain it as long as necessary. You have rights to access, correct, erase, and withdraw consent as described below.

1. Information We Collect

1.1 Information You Provide

  • Account data: name, email, phone number, password (encrypted)
  • Order data: shipping/billing address, payment method (processed by PCI-DSS compliant partners — we do not store full card numbers)
  • Communications: support queries, reviews, feedback, survey responses
  • Preferences: wishlist, size preferences, marketing opt-ins

1.2 Information Collected Automatically

  • Device type, browser, IP address, operating system
  • Pages visited, products viewed, referral source, session duration
  • Cookies and similar technologies (see Section 6)

2. Purpose of Processing

We use personal data for the following lawful purposes:

  • Processing and fulfilling orders, payments, and deliveries
  • Account creation, authentication, and customer support
  • Order updates, shipping notifications, and service communications
  • Fraud prevention, security, and legal compliance
  • Website analytics and service improvement
  • Marketing and promotional offers — only with your consent (you may opt out anytime)

3. Legal Basis & Consent

Under the DPDP Act, we process data based on your consent, contractual necessity (to fulfil orders), legal obligations, and legitimate business interests that do not override your rights. You may withdraw consent for optional processing (e.g. marketing) without affecting lawfully processed order data.

4. Data Sharing

We do not sell your personal data. We may share data with:

  • Logistics partners — for delivery (name, address, phone)
  • Payment gateways — for transaction processing (RBI-regulated entities)
  • IT service providers — hosting, analytics, email (under confidentiality agreements)
  • Government authorities — when required by law, court order, or regulatory request

5. Data Retention

  • Order and invoice records: 8 years (statutory tax/accounting requirements)
  • Account data: until account deletion request + 90 days backup retention
  • Marketing data: until consent withdrawal

6. Cookies & Tracking

We use essential cookies for cart, login, and security. Analytics and marketing cookies are used only with consent. You can manage cookie preferences through your browser settings.

7. Your Rights (Data Principal)

Under the DPDP Act and applicable law, you have the right to:

  • Access and obtain a summary of personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request erasure of data no longer necessary (subject to legal retention)
  • Withdraw consent for optional processing
  • Nominate another person to exercise rights in case of death/incapacity
  • Grievance redressal via our Grievance Officer (see Contact section)

Submit requests to privacy@dacfashion.com. We respond within 30 days.

8. Data Security

We implement SSL/TLS encryption, access controls, secure data centres, and regular security reviews. While we take reasonable measures, no internet transmission is 100% secure.

9. Children's Privacy

Our services are not directed at individuals under 18 years. We do not knowingly collect data from minors. Contact us if you believe a minor has provided data.

10. Cross-Border Transfers

Data may be processed on servers located in India or jurisdictions approved under applicable law, with appropriate safeguards.

11. Changes to This Policy

We may update this policy periodically. Material changes will be notified via email or website notice. Continued use after updates constitutes acceptance.

Government & Regulatory Compliance (India)

DAC operates in accordance with applicable Indian laws governing e-commerce, consumer protection, taxation, and digital data. Key frameworks include:

  • Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020 — fair trade practices, transparent pricing, and accessible grievance redressal.
  • Information Technology Act, 2000 and IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 — lawful use of platform, grievance officer, and content compliance.
  • Digital Personal Data Protection Act, 2023 (DPDP Act) — lawful collection, purpose limitation, and rights of data principals.
  • Legal Metrology (Packaged Commodities) Rules, 2011 — accurate display of MRP, net quantity, and manufacturer/importer details on product labels.
  • Goods and Services Tax (GST) — applicable taxes are included in displayed prices unless stated otherwise; tax invoices are provided with orders.
  • Payment and Settlement Systems Act, 2007 and RBI guidelines — secure electronic payment processing through licensed payment aggregators.

Consumers may also approach the National Consumer Helpline (1915) or file complaints via edaakhil.nic.in for unresolved disputes, in addition to our internal grievance process.

Contact & Grievance Redressal

DAC Pvt. Ltd.
42 MG Road, Indiranagar, Bengaluru, Karnataka 560001, India

Business hours: Monday–Saturday, 10:00 AM – 7:00 PM IST (excluding public holidays).