Privacy Policy

Last Updated: October 7, 2025

Ivak Fashions (“we,” “us,” “our,” or “Ivak Boutique”) operates the website ivak.boutique. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website and purchase our products.

We are committed to protecting your privacy and ensuring the security of your personal information. This policy is designed to help you understand what information we collect, why we collect it, and how you can manage your information.

By using our website, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use our website.

1. Information We Collect

We collect various types of information to provide and improve our services to you.

1.1 Personal Information You Provide

When you interact with our website, we may collect personal information that you voluntarily provide, including:

Account Registration:

• Full name
• Email address
• Phone number
• Password (encrypted)

Order and Shipping Information:

• Billing address
• Shipping address
• Phone number
• Order history
• Product preferences

Payment Information:

• Payment information is collected and processed by our payment gateway provider (Razorpay)
• We do not store complete credit/debit card numbers or CVV codes on our servers
• We may store transaction IDs and payment status for order management

Customer Service Communications:

• Information provided in emails, phone calls, or chat conversations
• Product reviews and ratings
• Feedback and survey responses

Optional Information:

• Date of birth (for birthday offers)
• Gender (for personalized recommendations)
• Style preferences
• Size preferences

1.2 Information Automatically Collected

When you visit our website, we automatically collect certain information:

Device and Browser Information:

• IP address
• Browser type and version
• Operating system
• Device type (mobile, tablet, desktop)
• Screen resolution

Usage Information:

• Pages visited
• Time spent on pages
• Click patterns and navigation paths
• Products viewed
• Search queries
• Referring website
• Date and time of visits

Location Information:

• Approximate geographic location based on IP address
• Precise location if you grant permission through your device

Cookies and Similar Technologies:

• We use cookies, web beacons, and similar tracking technologies
• See Section 5 for detailed information about cookies

1.3 Information from Third Parties

We may receive information about you from third-party sources:

Social Media:

• If you connect through social media accounts, we may receive profile information you’ve made publicly available

Analytics Providers:

• Google Analytics and other analytics services provide us with aggregated data about website usage

Payment Processors:

• Razorpay provides transaction status and payment confirmation information

Shipping Partners:

• Courier services provide delivery status and location information

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Order Processing and Fulfillment

• Process and fulfill your orders
• Arrange shipping and delivery
• Send order confirmations and shipping notifications
• Handle returns, exchanges, and refunds
• Manage customer accounts

2.2 Communication

• Respond to your inquiries and customer service requests
• Send transactional emails (order confirmations, shipping updates)
• Provide customer support
• Notify you about changes to our policies or services

2.3 Marketing and Promotions

• Send promotional emails about new products, sales, and special offers (with your consent)
• Personalize marketing communications based on your preferences
• Conduct surveys and request feedback
• Send birthday or anniversary offers (if you’ve provided this information)

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails or contacting us.

2.4 Website Improvement

• Analyze website usage and user behavior
• Improve website design, functionality, and user experience
• Develop new features and services
• Conduct research and analytics
• Test website performance

2.5 Personalization

• Remember your preferences and settings
• Provide personalized product recommendations
• Customize content based on your interests
• Display relevant advertisements

2.6 Security and Fraud Prevention

• Detect and prevent fraudulent transactions
• Protect against unauthorized access
• Ensure account security
• Investigate suspicious activities
• Comply with legal obligations

2.7 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Enforce our Terms and Conditions
• Protect our rights and property
• Resolve disputes

3. Legal Basis for Processing (for EU/EEA Users)

If you are located in the European Union or European Economic Area, we process your personal information based on the following legal grounds:

• Consent: When you have given explicit consent for specific processing activities
• Contract Performance: To fulfill our contractual obligations when you place an order
• Legal Obligation: To comply with legal requirements
• Legitimate Interests: For our business operations, provided your rights don’t override these interests

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business:

Payment Processing:

• Razorpay (payment gateway) – for processing transactions securely
• Information shared: transaction details, amount, payment method type (not full card details)

Shipping and Delivery:

• Courier and logistics partners – for order fulfillment
• Information shared: name, address, phone number, order details

Technology Services:

• Web hosting providers
• Cloud storage services
• Email service providers
• Analytics providers (Google Analytics)

Marketing Services:

• Email marketing platforms
• Social media advertising platforms (for targeted ads)
• SMS service providers

Customer Support:

• Customer service platforms
• Help desk software providers

All service providers are contractually bound to:

• Use your information only for specified purposes
• Maintain confidentiality and security
• Comply with applicable privacy laws
• Not use your information for their own purposes

4.2 Business Transfers

If Ivak Fashions is involved in a merger, acquisition, sale of assets, or bankruptcy:

• Your information may be transferred as part of the business transaction
• You will be notified of any such change via email or website notice
• The new entity will be bound by this Privacy Policy unless you consent to a new policy

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Enforce our Terms and Conditions
• Protect our rights, property, or safety
• Protect the rights and safety of our users or the public
• Respond to government requests
• Prevent fraud or illegal activities

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

4.5 Aggregated Information

We may share aggregated, anonymized information that does not identify you personally:

• Industry research and reports
• Website analytics
• Marketing performance metrics

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize you, remember your preferences, and improve your experience.

5.2 Types of Cookies We Use

Strictly Necessary Cookies:

• Essential for website functionality
• Enable shopping cart, checkout, and account access
• Cannot be disabled

Performance Cookies:

• Collect anonymous usage statistics
• Help us understand how visitors use our website
• Google Analytics for traffic analysis

Functionality Cookies:

• Remember your preferences (language, region)
• Enhance user experience
• Store login information

Marketing Cookies:

• Track your browsing across websites
• Deliver personalized advertisements
• Measure advertising effectiveness
• Facebook Pixel, Google Ads

5.3 Third-Party Cookies

We use third-party services that set cookies:

• Google Analytics: Website traffic analysis
• Facebook Pixel: Social media advertising and retargeting
• Google Ads: Search and display advertising

5.4 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to refuse or delete cookies
• Opt-Out Tools: Use browser extensions or privacy tools
• Cookie Preferences: Manage preferences through our cookie banner (if implemented)

Note: Disabling cookies may affect website functionality and your user experience.

5.5 Do Not Track Signals

Currently, we do not respond to “Do Not Track” browser signals. We will update this policy if our practices change.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

6.1 Security Measures

Technical Safeguards:

• SSL/TLS encryption for data transmission
• Secure payment processing through PCI-DSS compliant payment gateways
• Encrypted password storage
• Regular security updates and patches
• Firewall protection
• Secure server infrastructure

Organizational Safeguards:

• Access controls – limited access to personal information
• Employee training on data protection
• Confidentiality agreements with staff
• Regular security audits
• Incident response procedures

6.2 Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal, accounting, or reporting requirements
• Resolve disputes and enforce agreements

Retention Periods:

• Account Information: Retained while your account is active, plus 3 years after account closure
• Order Information: Retained for 7 years for accounting and tax purposes
• Marketing Information: Retained until you opt out or request deletion
• Analytics Data: Aggregated data retained indefinitely

6.3 Data Breach

In the event of a data breach:

• We will investigate immediately
• Affected users will be notified within 72 hours (as required by law)
• We will take steps to mitigate harm
• We will report to relevant authorities as required

6.4 Limitations

While we strive to protect your information:

• No method of transmission over the internet is 100% secure
• No electronic storage system is completely secure
• You are responsible for maintaining the confidentiality of your password
• Notify us immediately if you suspect unauthorized access to your account

7. Your Rights and Choices

You have certain rights regarding your personal information:

7.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you
• Data Portability: Receive your data in a structured, commonly used format

7.2 Correction and Update

• Right to Rectification: Correct inaccurate or incomplete personal information
• You can update your account information anytime through your account settings

7.3 Deletion

• Right to Erasure: Request deletion of your personal information
• Note: We may retain certain information as required by law or for legitimate business purposes

7.4 Opt-Out Rights

Marketing Communications:

• Unsubscribe from promotional emails by clicking the unsubscribe link
• Contact us to opt out of SMS marketing
• Note: You will still receive transactional emails (order confirmations, shipping updates)

Cookies:

• Manage cookie preferences through browser settings
• Use opt-out tools for third-party advertising cookies

Personalized Advertising:

• Opt out of interest-based advertising through industry opt-out tools
• Adjust social media ad preferences in your account settings

7.5 Withdrawal of Consent

• Withdraw consent for processing activities based on consent
• Will not affect the lawfulness of processing before withdrawal

7.6 Object to Processing

• Object to processing based on legitimate interests
• Object to direct marketing at any time

7.7 Restriction of Processing

• Request restriction of processing under certain circumstances

7.8 Lodge a Complaint

• File a complaint with a data protection authority if you believe your rights have been violated

7.9 How to Exercise Your Rights

To exercise any of these rights:

• Email: ivakfashion1@gmail.com
• Phone: +91 6369731071
• Written request to our address

We will respond to your request within 30 days. We may require verification of your identity before processing requests.

8. International Data Transfers

Domestic Operations:

• Ivak Fashions operates primarily within India
• Your data is stored on servers located in India or with service providers who may store data internationally

Data Protection:

• When data is transferred internationally, we ensure appropriate safeguards are in place
• Service providers comply with applicable data protection laws

9. Children’s Privacy

Age Restriction:

• Our website is not intended for children under the age of 18
• We do not knowingly collect personal information from children under 18
• If you are under 18, please do not provide any information on our website

Parental Notice:

• If we become aware that we have collected personal information from a child under 18 without parental consent, we will delete that information promptly
• If you believe we have collected information from a child, please contact us immediately

10. Third-Party Links

Our website may contain links to third-party websites:

• We are not responsible for the privacy practices of these websites
• This Privacy Policy applies only to ivak.boutique
• We recommend reviewing the privacy policies of any third-party websites you visit
• Clicking on third-party links is at your own risk

11. Changes to This Privacy Policy

Policy Updates:

• We may update this Privacy Policy from time to time
• Changes will be effective immediately upon posting on our website
• The “Last Updated” date at the top will be revised
• Significant changes will be notified via email or website notice

Your Continued Use:

• Continued use of our website after changes constitutes acceptance of the updated policy
• We encourage you to review this policy periodically

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at ivakfashion1@gmail.com

13. Data Protection Officer

Contact for Privacy Matters:

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Ivak Fashions
Privacy Officer
102/20, Annai Sathiya Nagar, 2nd Street
Nesapakkam, Small Pillar Kovil
Chennai, Tamil Nadu, India – 600078

Email: ivakfashion1@gmail.com
Phone: +91 6369731071
Website: ivak.boutique

Response Time:

• We will respond to privacy inquiries within 30 days
• Complex requests may require additional time, and we will keep you informed

14. Consent

By using our website, you consent to:

• The collection and use of your information as described in this Privacy Policy
• The use of cookies and tracking technologies
• Processing of your personal information for the purposes stated

You can withdraw your consent at any time by contacting us, though this may affect your ability to use certain features of our website.

15. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu, India.

Last Updated: October 7, 2025
© 2025 Ivak Fashions. All rights reserved.

Important Note: This Privacy Policy should be reviewed by a qualified attorney to ensure compliance with all applicable laws, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (India).