Privacy Policy

1. Introduction

Almaasq ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you visit our website and make purchases.

We are bound by the Information Technology Act, 2000, and other applicable laws and regulations. This policy is in compliance with international data protection standards.

2. Information We Collect

We may collect information about you in various ways:

• Personal Information: Name, email address, phone number, postal address, and payment information when you make a purchase or create an account.
• Transaction Information: Details about your purchases, including order history, transaction amounts, and payment methods used.
• Device Information: Browser type, IP address, device type, operating system, and device identifiers.
• Website Usage Data: Pages visited, time spent on site, navigation patterns, and interaction history through cookies and similar technologies.
• Communication Information: Any correspondence, feedback, inquiries, complaints, or requests you send to us.
• Location Data: Approximate geographic location based on IP address for delivery and service optimization.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders and payments through secure payment gateways
• Sending order confirmations, shipping updates, delivery notifications, and customer service communications
• Providing responsive customer support and responding to inquiries and complaints
• Improving our website, user experience, and services based on user feedback and behavior analysis
• Detecting and preventing fraudulent transactions, security breaches, and malicious activities
• Sending marketing communications and promotional offers (only with your explicit consent)
• Complying with legal obligations, regulatory requirements, and law enforcement requests
• Analyzing website traffic, user behavior, and trends for business intelligence and analytics purposes
• Personalizing your shopping experience and product recommendations
• Conducting surveys and gathering feedback for quality improvement

4. Payment Processing & Security

All payment processing is handled securely through trusted payment gateways with industry-standard security protocols. We do not store, process, or retain complete credit card, debit card, or sensitive financial details on our servers.

Your payment information is encrypted using 256-bit SSL/TLS encryption and transmitted securely to payment processors' servers. Our payment partners maintain strict compliance with:

• Payment Card Industry Data Security Standard (PCI-DSS)
• International Organization for Standardization (ISO) standards
• Reserve Bank of India (RBI) regulations
• Data Protection Act compliance

Your payment information is handled with the highest level of security and confidentiality throughout the transaction process.

5. Data Security Measures

We implement comprehensive, industry-standard security measures to protect your personal information:

• SSL/TLS Encryption: All data transmission uses 256-bit SSL/TLS encryption protocols
• Secure Server Infrastructure: Firewalls, intrusion detection systems, and secure configurations
• Regular Security Audits: Periodic penetration testing and vulnerability assessments
• Access Control: Limited access to personal information restricted to authorized personnel only
• Data Encryption: Sensitive data encrypted both in transit and at rest
• Security Updates: Regular software updates and security patches
• Backup Systems: Regular data backups with disaster recovery protocols
• Employee Training: Staff trained on data protection and confidentiality

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information using best practices, we cannot guarantee absolute security. You acknowledge that you assume all risks associated with data transmission.

6. Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. However, we may share your information in the following circumstances:

• Service Providers: Trusted third-party service providers who assist in operating our website, processing orders, sending communications, and delivering services (including payment processors, courier partners, and email service providers).
• Legal Obligations: When required by law, court order, government request, or regulatory authority
• Law Enforcement: To comply with legal processes and protect our rights and safety
• Business Transfers: In case of merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction
• Consent: When you explicitly consent to sharing with specific third parties

All third parties are required to maintain the same level of data protection and confidentiality as we do.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytics:

• Session Cookies: Temporary cookies that help us remember your preferences and maintain your session during your visit
• Persistent Cookies: Long-term cookies that remain on your device to remember your preferences for future visits
• Analytics Cookies: Used to understand how visitors interact with our website and identify trends
• Functional Cookies: Enable website features and personalization
• Marketing Cookies: Track your interaction with our content and ads (with consent)

Most web browsers allow you to control cookies through their settings. You can choose to:

• Disable cookies entirely
• Accept cookies only from specific sites
• Delete cookies after each session
• Be notified when cookies are set

Please note that disabling cookies may affect your browsing experience and the functionality of certain features on our website.

8. Your Rights & Choices

You have the following rights regarding your personal information:

• Right to Access: Request and obtain a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate, incomplete, or outdated information
• Right to Deletion: Request deletion of your information (subject to legal obligations and retention requirements)
• Right to Opt-Out: Opt-out of marketing communications at any time without charge
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
• Right to Lodge Complaint: File complaints with relevant data protection authorities

To exercise any of these rights, please contact us with your request and necessary details at:

support@almaasq.com

We will respond to your request within 7 business days.

9. Children's Privacy

Our website and services are not intended for children under the age of 18. We do not knowingly collect personal information from individuals under 18 years of age.

If we become aware that a child has provided us with personal information, we will promptly delete such information and close any associated accounts.

Parents or guardians who believe a child has provided information to us should contact us immediately at support@almaasq.com.

10. Email Communications

If you opt-in to receive marketing emails and communications, we will send you promotional offers, product updates, new collection announcements, and other relevant information.

You can unsubscribe from these communications at any time by:

• Clicking the "Unsubscribe" or "Opt-Out" link in our emails
• Contacting us directly at support@almaasq.com with your request
• Updating your preferences in your account settings
• Replying to our email with "UNSUBSCRIBE"

Transactional emails related to your orders, account, and customer support will continue to be sent even if you unsubscribe from marketing communications.

11. Links to Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, payment gateways, and partner sites. We are not responsible for the privacy practices, security measures, or content of these external sites.

We encourage you to carefully review the privacy policies and terms of service of any third-party websites before providing your personal information or conducting any transactions.

Your use of third-party websites is governed by their respective privacy policies, not ours.

12. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law:

• Account Information: Retained for the duration of your account and as required for record-keeping purposes
• Transaction Data: Retained for a minimum of 7 years for accounting, tax, and legal compliance purposes
• Marketing Information: Retained until you unsubscribe from communications
• Customer Support Records: Retained for 2 years after last interaction
• Website Analytics: Typically retained for 12-24 months

Once the retention period expires, your personal information will be securely deleted or anonymized.

13. International Data Transfers

Your personal information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your country.

When we transfer information internationally, we implement appropriate safeguards to protect your information, including:

• Standard contractual clauses approved by relevant authorities
• Binding corporate rules
• Adequacy decisions
• Your explicit consent

14. Compliance with Laws

We comply with all applicable laws, regulations, and standards, including:

• Information Technology Act, 2000 (ITA)
• Information Technology Rules, 2000
• Personal Data Protection Bill (PDPB) - when applicable
• RBI Guidelines for Payment Systems
• General Data Protection Regulation (GDPR) - for EU customers
• California Consumer Privacy Act (CCPA) - for US customers

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please don't hesitate to contact us:

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (if material changes affect your rights)
• Obtaining your explicit consent (if required by law)

Your continued use of our website after any modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

17. Data Protection Compliance

This privacy policy has been designed to ensure comprehensive data protection and transparency in accordance with international standards. We are committed to:

• ✓ Processing all payments through secure, industry-compliant payment gateways
• ✓ Protecting customer payment data and financial information
• ✓ Maintaining transparency in our data collection and usage practices
• ✓ Complying with all applicable regulations and guidelines
• ✓ Ensuring secure communication with clear privacy disclosures
• ✓ Providing accessible and responsive customer support
• ✓ Implementing robust security and fraud prevention measures
• ✓ Maintaining the highest standards of data protection and privacy

All transactions conducted through our website are encrypted and secured through industry-leading security infrastructure. We maintain full compliance with all applicable payment processing regulations and standards.