Privacy Policy

Introduction and scope

This Privacy Policy applies to personal information we handle through yeafashions.com, including browsing, account creation, checkout, customer support and email communication. It does not apply to third-party sites we link to.

We operate from India and sell to customers in India, so Indian law applies to our handling of personal information. The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 are being brought into force in phases, with most operational duties scheduled to start around May 2027. Until then, existing Indian law, including the Information Technology Act, 2000 and its rules, continues to apply. Nothing in this policy is a claim of certification or of compliance with any particular law.

India is our home market and the Indian rules below apply to all customers. We also plan to sell internationally, and may open individual markets one at a time. These may include the United States, United Arab Emirates, Canada, Malaysia, Saudi Arabia, the United Kingdom, South Africa, Kuwait, Australia, Oman, Sri Lanka, Bangladesh and Nepal. Mentioning a country here does not mean we are currently accepting orders, payments or deliveries there; availability is confirmed at checkout and may change by country.

Who we are

The business responsible for your personal information (the data controller, or “Data Fiduciary” under Indian law) is:

“YEA^® Fashion”, “we”, “us” and “our” refer to YEA^® FASHION, the business that operates this store.

Information we collect

Depending on how you use the store, we may collect:

• Identity and contact details: name, email address, phone number, billing and delivery addresses.
• Order details: items purchased, sizes, prices, currency, discounts used, returns or exchange requests.
• Account details: login credentials (passwords are stored in hashed form by WordPress), saved addresses and preferences.
• Communications: messages, emails and form submissions you send us.
• Technical data: IP address, device and browser type, pages viewed, and cookie identifiers.

We do not intend to collect payment card numbers on our own servers (see Payment processing).

Information from browsing

When you visit the store, our web server and WordPress/WooCommerce software may record your IP address, browser and device type, referring page, pages and products viewed, and the time of access. This helps us deliver pages, keep the site stable, detect abuse and understand which products and pages are used.

Accounts and guest checkout

You may be able to buy as a guest or create an account, depending on how the store is configured. For a guest checkout we collect only what is needed to take and deliver your order. For an account we also store your login details, saved addresses and order history so you can reorder or track purchases more easily.

Example: If you check out as a guest and later create an account with the same email address, your earlier orders may be linked to that account so they appear in your history.

Orders, billing and delivery

To fulfil an order we process your name, billing and delivery addresses, phone number, email address, order contents and order status. We keep order records so we can provide receipts, handle returns or exchanges, respond to complaints and meet tax, accounting and consumer-law record-keeping needs.

Example: If you request a return, we use your order number, item details and contact information to review the request and, where it is accepted, arrange the return and any refund. This policy does not itself promise any return, refund or shipping terms; those are set out in our separate store policies.

Wishlist and support messages

If a wishlist, saved items or size preferences feature is enabled, we store the items and details you choose to save. When you contact us by email, a form or any messaging channel we offer, we keep your message, your contact details and our replies so we can resolve your query and maintain a record of it.

Payment processing

Payments are handled by third-party payment providers that we enable at checkout. [PAYMENT PROVIDER(S) — CONFIRM BEFORE PUBLISHING]. When you pay, you may be directed to or shown the provider’s payment form, and your card, wallet or bank details are generally entered with the provider rather than stored on our servers.

We typically receive limited information back, such as payment status, transaction reference, payment method type and, in some cases, the last four digits of a card. The provider’s own privacy policy governs how it uses your data. Payment methods and currencies may differ between India and each international market, and a method offered in one country may not be offered in another.

Shipping and tracking

To deliver your order we share your name, delivery address, phone number, email address (where required) and parcel details with courier or logistics partners. [COURIER PARTNER(S) — CONFIRM BEFORE PUBLISHING]. Couriers may send you tracking updates by email, SMS or app, and may contact you to arrange delivery. For deliveries within India, this normally involves domestic couriers. International delivery is offered only to countries we have activated, and may require customs authorities or overseas delivery partners to receive recipient details, with the destination country’s rules applying.

Country detection and pricing

If the store uses country detection, we may infer your approximate country from your IP address in order to show the right currency, localized prices and available shipping options. This does not identify your precise location. You may be able to change the country or currency manually; if you cannot, contact us.

Example: A customer in India may be shown prices in Indian rupees (INR), while a visitor from another country where we have activated selling may be shown that country’s currency, if enabled. Taxes, duties and delivery charges are shown at checkout.

We sell to customers in India. Selling to other countries is being introduced country by country, so a price or country shown on the store does not by itself mean we currently accept orders, payments or deliveries there. Availability is confirmed at checkout.

Cookies and sessions

Cookies are small files stored on your device. WordPress and WooCommerce commonly use essential cookies and similar technologies to keep items in your cart, remember your session, keep you logged in, support checkout and protect the site against misuse. The store will not work properly if these are blocked.

Other cookies, such as for analytics or marketing, are described below only if we use them. You can control cookies in your browser settings. Where required, we will ask for consent before setting non-essential cookies.

Analytics and marketing tools

We may use analytics, diagnostic, advertising or social-media tools to understand store performance and measure campaigns. [ANALYTICS / ADVERTISING TOOLS ACTUALLY INSTALLED — LIST OR DELETE THIS SECTION BEFORE PUBLISHING]. If no such tools are active, this section will say so. Where such tools are used, they may collect data such as pages viewed, device information and approximate location, and the tool provider may receive it.

How we use information

• Create and manage accounts, process orders and payments, and arrange delivery.
• Handle returns, exchanges, complaints and customer support.
• Show localized pricing and relevant shipping options.
• Keep the store secure, prevent fraud and fix technical problems.
• Send service messages such as order confirmations and shipping updates.
• Send marketing messages where you have agreed or the law allows.
• Meet legal, tax, accounting and regulatory obligations and defend legal claims.

Legal grounds

Under Indian law, we rely on your consent or on other lawful uses that the law permits, for example where processing is needed to meet a legal obligation. Where laws such as the UK or EU GDPR apply to us, we rely on grounds such as performance of a contract (to fulfil your order), legal obligation, legitimate interests (such as securing the store) and consent (such as for marketing and non-essential cookies). The exact grounds depend on the activity and on the law that applies. [Have a qualified lawyer confirm this section before publishing.]

Marketing messages

If you subscribe to our newsletter or agree to promotional messages, we may email you about new collections, offers and events. You can unsubscribe at any time using the link in each email or by contacting us at info@yeafashion.com. Opting out of marketing does not stop service messages about your orders. We do not send promotional SMS or WhatsApp messages unless you have agreed to receive them.

Sharing information

We do not sell your personal information for money. We share it only as needed with:

• Payment providers, couriers and logistics partners, to take payment and deliver orders.
• Hosting, email, security and website-maintenance providers acting for us.
• Analytics or marketing providers, only if we use them.
• Professional advisers such as accountants and lawyers.
• Authorities, courts or regulators where required by law, or to protect rights and safety.
• A buyer or successor if the business is sold or restructured, subject to this policy.

Platform and service providers

The store runs on WordPress and WooCommerce, with plugins and themes that may process data on our behalf. Our hosting provider stores site and order data. [HOSTING PROVIDER — CONFIRM]. We use payment processors, couriers, email-delivery services and similar providers who are permitted to use your information only to provide services to us or as their own policies describe. We name specific providers here only once confirmed.

International transfers

If you are in India, your information is primarily handled by us in India, but our hosting, email, payment, courier and other providers may process it in other countries. If you order from outside India, your information is sent to and processed in India and possibly other countries where our providers operate, and overseas orders may require sharing data with couriers and customs authorities abroad. We aim to share only what is necessary and to use providers with appropriate safeguards. Indian cross-border transfer rules will apply as they come into force. [HOSTING AND PROVIDER LOCATIONS — CONFIRM].

Retention

We keep personal information only as long as needed for the purposes above, including meeting legal, tax, accounting and dispute-resolution requirements. Order and invoice records are generally kept for the period such laws require. Account data is kept while the account is active or until you ask us to delete it, subject to those obligations. Marketing details are kept until you unsubscribe or withdraw consent. [SPECIFIC RETENTION PERIODS — SET BY OWNER IF DESIRED].

Security

We take reasonable steps to protect personal information, which may include access controls, software updates and the security features of our hosting, WordPress and payment providers. No website or transmission over the internet is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it confidential. If a breach affects you, we will notify you and authorities as the law requires.

Your rights and requests

Depending on where you live and the law that applies, you may be able to ask us to confirm whether we hold your information, give you a summary or copy, correct or update it, delete it, restrict or object to certain uses, or nominate someone to exercise rights for you. To make a request, email info@yeafashion.com with your name, the email address used for your order or account, and what you need. We may verify your identity first, and we will respond within the time the applicable law requires.

Correction, deletion, withdrawal

You can usually correct account details by logging in, or by contacting us. You may ask us to delete your account or withdraw consent, for example to marketing emails or non-essential cookies. Withdrawal does not affect processing done before it. We may need to keep some information, such as invoices and order records, where the law requires it. Deleting data may mean we can no longer process pending orders or returns.

Children’s privacy

Our store is intended for adults and is not directed at children. We do not knowingly collect personal information from children under 18. Under Indian law, processing a child’s data requires verifiable parental consent once the relevant rules apply. If you believe a child has given us information, contact us and we will take steps to delete it.

Third-party websites

Our store may link to social media, payment pages, courier tracking pages or other external sites. We do not control these sites and are not responsible for their content or privacy practices. Please read their privacy policies before sharing information.

Changes to this policy

We may update this policy as our store, services or the law change, including as Indian data-protection rules come into force. The “Last updated” date at the top shows the latest version. Where changes are significant or the law requires, we will give additional notice, such as by email or a notice on the website.

Contact and complaints

For questions about this policy, to make a privacy request or to raise a complaint, contact us using any of the details below. Please give us a chance to resolve your concern first. You may also complain to the relevant authority, such as the Data Protection Board of India once its complaint process applies to us, or the data-protection regulator in your country.

Regional privacy rights

India: as an India-based business selling to customers in India, we handle your information under Indian law, including the Information Technology Act, 2000 and, as it comes into force, the Digital Personal Data Protection Act, 2023 and Rules, 2025. Rights available to you under Indian law will apply to Indian customers in the manner and from the dates the law provides.

Other countries: additional rights may apply only if a particular law covers our activities in your country. For example, the UK or EU GDPR, or privacy laws in some US states, Canada, Australia, the UAE, Saudi Arabia and other planned markets, may give extra rights if we actively sell to or target people there. We do not assume that every foreign law applies to us or that every country is currently active. If you believe a specific law gives you rights, tell us which one and we will review your request. [Add or remove regions once active markets are confirmed with legal advice.]