Privacy Policy

Last updated: 21 August 2026

This policy explains what personal data Bambiha Wear collects, why, and what you can make us do about it. It is written to meet the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, and it is meant to be read rather than skipped.

Who is responsible for your data

Harjot Singh Bhatia, trading as Bambiha Wear®, trading as Bambiha Wear®, of 208 Vijay Nagar Colony, Near Technical High School, Kanpur Road, Lucknow, UP 226023, is the Data Fiduciary for the personal data described here. Contact for all data matters: Harjot Singh Bhatia, hi@bambiha.com.

What we collect and why

Data	Purpose	Basis
Name, delivery address, phone, email	Fulfilling and delivering your order	Consent, given at checkout
Order history	Support, returns, warranty and statutory accounting records	Legal obligation
Payment status and transaction reference	Confirming payment and processing refunds	Consent / contract
Email address, where you opt in	Telling you about new drops	Consent, withdrawable at any time
Website usage data — pages viewed, device, approximate location	Understanding what works and improving the store	Consent, via the cookie banner
Any photographs you send us	Assessing a return or damage claim	Consent

We never see or store your card number, UPI PIN, CVV or bank password. Those go directly to our payment gateways and never touch our servers.

Who we share it with

Only where it is needed to get your order to you or to run the shop. Each of these is a Data Processor acting on our instructions:

Qikink — printing and fulfilment. Receives your name, address and phone.
Courier partners (Delhivery, Blue Dart, Xpressbees, India Post and similar) — receives name, address, phone.
PhonePe and PayU — payment processing.
Hostinger — hosting. Servers are located in India.
Google (Analytics, Search Console, Merchant Center) and Meta (Pixel, Conversions API) — anonymised and pseudonymised traffic measurement and advertising, only where you have accepted analytics or marketing cookies.

We do not sell your personal data. Not to anyone, not ever. We do not share it with data brokers or list resellers.

We will disclose data where a court or a lawful authority requires it, and we will tell you when we are permitted to.

How long we keep it

Order and invoice records — 8 years, because the GST and Income Tax Acts require it.
Marketing consent and email address — until you withdraw consent, then deleted within 30 days.
Account data, if you never place an order and never log in again — deleted after 3 years of inactivity, after we email you first.
Support correspondence — 2 years.
Analytics data — 14 months, Google’s shortest available retention.

Your rights under the DPDP Act

You can require us to do all of the following, free of charge, by writing to hi@bambiha.com:

Access — a summary of the personal data we hold about you and who we have shared it with.
Correction — fix anything inaccurate; complete anything incomplete.
Erasure — delete your data, except where we are legally required to keep it (see retention above).
Withdraw consent — as easily as you gave it. Every marketing email has a one-click unsubscribe link. Withdrawing consent does not undo what was lawful before you withdrew it.
Nominate — name another person to exercise these rights on your behalf if you die or become incapacitated.
Grievance redressal — complain to us first; we must respond within the period the Rules prescribe.

We respond to any of these within 30 days. We may ask you to verify your identity first — that protects you, not us.

If you are unhappy with our answer, you may complain to the Data Protection Board of India.

Children

Bambiha Wear is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal data, write to hi@bambiha.com and we will delete it.

Cookies

We use three kinds:

Strictly necessary — cart contents, login session, security. These cannot be switched off; the shop does not function without them.
Analytics — Google Analytics 4. Off until you accept.
Marketing — Meta Pixel, Google Ads. Off until you accept.

You can change your choice at any time through the cookie preferences link in the site footer, or by clearing cookies in your browser.

Security

The site runs over HTTPS with a valid TLS certificate. Access to the store’s admin area is restricted and password-protected. Payment data never reaches our servers. We keep daily backups.

No system is perfectly secure and we will not pretend otherwise. If a breach affects your personal data we will notify you and the Data Protection Board as the Rules require.

Changes

If we change this policy materially we will post the new version here with a new date, and email anyone on our list. Continuing to use the site after that means you accept the change.

Contact

Harjot Singh Bhatia · hi@bambiha.com · +91 9807074061 · 208 Vijay Nagar Colony, Near Technical High School, Kanpur Road, Lucknow, UP 226023