HASTOFASHION
WishlistAccount
Bag

Privacy Policy

1. Introduction

At HASTO Fashion, we hold your privacy in the highest regard. This Privacy Policy details how we collect, utilize, share, and protect your personal information when you visit our website, register an account, purchase garments from our catalog, or interact with our customer support teams.

2. Information We Collect

We collect information that identifies or relates to you ("Personal Data") directly from your interactions and automatically through browser activities:

  • Account Credentials: Full name, email address, password hash, and date of creation when you sign up.
  • Contact & Shipping Data: Physical delivery addresses, billing coordinates, phone numbers, and optional profile notes.
  • Transactional Logs: Detailed purchase histories, payment statuses, cart items, selected sizes, and return requests.
  • Device & Network Data: IP addresses, browser specifications, operating system versions, referral paths, and on-site user behavior collected via local session storage.

3. How Your Data is Used

HASTO Fashion processes personal details strictly for lawful operational and marketing mandates, including:

  • Fulfilling orders, coordinating checkout processes, secure transaction execution, and organizing logistics.
  • Providing customer support, resolving delivery issues, tracking shipments, and executing returns/refunds.
  • Sending transactional notifications, billing updates, password resets, and verification OTP codes.
  • Delivering newsletters, seasonal catalog showcases, and exclusive discounts (only when marketing consent is granted).
  • Analyzing platform performance, fixing application bugs, and securing checkout systems against fraudulent activity.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to external advertisers. To run our boutique services, we share specific data subsets with trusted service partners:

  • Database Hosting: Secure cloud database operations managed through Supabase backend servers.
  • Logistics Providers: Shipping services (e.g., Delhivery, BlueDart, or international carriers) to fulfill product deliveries.
  • Communication Gateways: Email and transactional notification servers (e.g., Brevo API) to dispatch OTP verifications and orders.
  • Legal Authorities: When required under applicable laws, court orders, or to safeguard intellectual property rights.

5. Information Security

We implement advanced organizational and technical security measures to protect your credentials. All data transmissions are encrypted using standard TLS/SSL (Transport Layer Security) protocols. Access to customer records is restricted to authenticated support representatives, and database schemas are regularly audited for vulnerabilities.

6. Data Retention

We retain your personal information only as long as necessary to complete purchases, fulfill legal tax obligations, maintain financial auditing logs, and resolve user disputes. When no longer required, data is either permanently deleted or fully anonymized.

7. Your Rights & Choices

Depending on your regional legal frameworks (including the Digital Personal Data Protection Act of India, GDPR, or CCPA), you hold the following rights:

  • The right to request access to and receive copies of the personal data we hold about you.
  • The right to request immediate correction or modification of inaccurate details.
  • The right to request erasure of your account and personal history, subject to statutory retention exceptions.
  • The right to opt-out of marketing communications by clicking the 'Unsubscribe' link or editing account preferences.

To exercise any of these choices, please email us directly at hastoecommerce@gmail.com. We will respond to verified inquiries within 30 days.