Privacy policy
How AmarSons collects, uses, shares and protects your personal data when you
use amarsonsonline.com, and the rights you hold over it.
Effective 16 July 2026 · Last updated 16 July 2026
Operated by AmarSons Trading Pvt Ltd, Chandigarh, India
AT A GLANCE
- We are an online store. We collect what we need to create your account,
process and deliver your orders, take payment, support you, and — with your
consent — market to you.
- Card and payment details are handled by PCI-DSS-compliant payment gateways;
we do not store your full card number.
- We do not sell or rent your personal data.
- You can access, correct, or delete your data, withdraw consent, and raise a
grievance contact details are at the end.
1. WHO WE ARE
This website, amarsonsonline.com (the "Site"), is operated by AmarSons Trading
Pvt Ltd ("AmarSons", "we", "us", "our"), a company incorporated in India with
its registered office at S.C.O 825-26, Sector 22A, Chandigarh, India (GSTIN
04AAGCA5532Q1ZG). For the purposes of India's Digital Personal Data Protection
Act, 2023 (the "DPDP Act") we are the Data Fiduciary; under the EU/UK General
Data Protection Regulation ("GDPR") we are the data controller for personal
data collected through the Site.
This Policy explains what personal data we collect, why, on what legal basis,
who we share it with, how long we keep it, how we protect it, and the rights
you can exercise. It applies to the Site and to related sales, support and
marketing; it does not cover third-party websites we link to, or any separate
in-store interaction.
2. KEY TERMS
Personal data is any information relating to an identified or identifiable
individual. Processing is any operation performed on it — collection, storage,
use, disclosure or deletion. You / Data Principal / data subject is the
individual the data relates to. A processor is a third party that processes
personal data on our instructions. Cookies and similar technologies are small
files or identifiers stored on or read from your device.
3. THE INFORMATION WE COLLECT
3.1 Information you give us
- Account & identity — your name, email address, mobile number, password, and
any profile details when you register or sign in.
- Orders & delivery — billing and shipping address, recipient name and phone,
the items you order, order notes and gift messages.
- Payment — payment method and the details needed to complete a transaction.
Card numbers, CVV and bank credentials are entered into and processed by our
payment-gateway partners; we do not receive or store your full card number.
We may receive a payment-confirmation token, the last four digits, card type,
and transaction status.
- Communications — messages, enquiries, reviews, ratings, and correspondence
when you contact our customer team by email, phone, chat or WhatsApp.
- Marketing preferences — the email address / mobile number you give for our
newsletter or offers, and your consent and opt-out choices.
- Wishlist / saved items — products you save or add to your cart.
3.2 Information we collect automatically
- Device & connection — IP address, device type, browser and operating system,
screen and language settings, and a hashed/approximate location (country,
region, city) derived from your network address.
- Usage & behaviour — pages and products you view, searches, items added to
cart, orders placed, time spent, the site that referred you, and any campaign
parameters (UTM) in the link you followed.
- Cookies & identifiers — session, cart, preference, analytics and (where
enabled) marketing cookies and similar identifiers set by our store platform
and our providers (see section 4).
3.3 Information from third parties
We may receive information from our payment gateways (payment/fraud-verification
results), our logistics partners (delivery status), and our analytics/
advertising and social-media providers, and — if you choose social or express
checkout / login — from that provider to the extent you authorise.
4. COOKIES & TRACKING TECHNOLOGIES
Our Site (hosted on Shopify) uses cookies and similar technologies that are
strictly necessary (to run the cart, checkout, login and security), functional
(to remember your preferences), analytics (to understand how the Site is used),
and, where enabled and where you consent, marketing/advertising (to measure and
personalise campaigns). You can manage or block cookies through your browser
settings and, where we present a consent tool, through your choices there —
though strictly-necessary cookies are required for the Site to function. Where
required by applicable law we will honour recognised browser-based opt-out
signals (such as Global Privacy Control).
5. WHY WE USE YOUR DATA, AND OUR LEGAL BASES
We process personal data for the purposes below. Where the DPDP Act applies we
rely on your consent or on a legitimate use permitted by that Act; where the
GDPR applies we rely on the corresponding Article 6 basis.
- To create and manage your account and provide the Site — performance of a
contract.
- To process, fulfil, deliver and invoice your orders, take payment, handle
returns/refunds, and provide customer support — performance of a contract;
legal obligation (tax/GST invoicing).
- To prevent fraud, secure the Site, and verify transactions — legitimate
interests; legal obligation.
- To send you service messages (order confirmations, shipping updates, account
notices) — performance of a contract.
- To send you marketing about new collections, offers and events by email, SMS
or WhatsApp — consent (you may withdraw it at any time).
- To understand and improve our products, Site and service through analytics —
legitimate interests; consent where required.
- To comply with law and to establish, exercise or defend legal claims — legal
obligation; legitimate interests.
6. PAYMENTS
Payments are processed by third-party payment gateways / processors that are
certified to the PCI-DSS standard. When you pay, your card or banking details
are collected and processed directly by that provider under its own terms and
privacy policy; we do not store your full card number, CVV or bank credentials
on our systems. We retain order and transaction records (including the payment
status and, where provided, a masked card reference) as needed to fulfil your
order and to meet our legal and accounting obligations.
7. HOW WE SHARE YOUR INFORMATION
We do not sell or rent your personal data. We share it only as follows, and
only to the extent needed:
- Store platform & hosting — Shopify, which hosts and powers the Site and
processes order and customer data on our behalf.
- Payment processors / gateways — to take and verify payment and prevent fraud.
- Logistics & delivery partners — couriers and fulfilment providers, to deliver
your orders and share tracking.
- Communication & marketing providers — email, SMS and messaging tools that
send our service and (with consent) marketing messages.
- Analytics & advertising providers — to measure and, where enabled,
personalise the Site and our campaigns.
- Professional advisers & authorities — our accountants, auditors and legal
advisers, and courts, regulators or law-enforcement where we are required to
disclose by law or to protect our rights or the safety of others.
- Business transfers — a successor or acquirer in a merger, acquisition,
reorganisation or sale of assets, in which case your data may be transferred
as part of that transaction.
- With your consent, or at your direction, for any other disclosure.
8. INTERNATIONAL TRANSFERS
We are based in India and the Site is hosted primarily for an Indian audience.
Some of our providers (for example our store platform, payment, analytics or
communication providers) operate globally and may process your personal data
in, or transfer it to, countries other than your own, whose data-protection
laws may differ. Where such transfers are subject to the GDPR or the DPDP Act,
we rely on lawful transfer mechanisms and take steps intended to keep your data
protected in line with this Policy.
9. HOW LONG WE KEEP IT
We keep personal data only as long as needed for the purposes it was collected
for, or as required by law. In particular: order, invoice, payment and tax
records are retained for the periods required under Indian tax, GST and company
law; account data is kept while your account is active and for a reasonable
period afterwards; marketing data is kept until you unsubscribe or withdraw
consent; and analytics data is kept for a limited period and then deleted or
aggregated. When we no longer need personal data, we delete or irreversibly
anonymise it.
10. HOW WE PROTECT YOUR DATA
We take reasonable technical and organisational measures — including encryption
of the Site in transit (HTTPS/TLS), access controls, and use of PCI-DSS-
compliant payment processors — designed to protect personal data against
unauthorised access, loss, misuse or alteration, consistent with reasonable
security practices under Indian law. No method of transmission or storage is
completely secure, however, and we cannot guarantee absolute security. In the
event of a personal-data breach that is likely to result in risk to you, we
will notify the affected individuals and the competent authority where the law
requires.
11. YOUR RIGHTS & CHOICES
Subject to, and to the extent granted by, the law that applies to you, you have
the following rights, which we honour where they apply, without discriminating
against you for exercising them:
- Access — a summary of the personal data we hold about you and how it is
processed.
- Correction & completion — to fix inaccurate or incomplete data (you can also
edit much of it in your account).
- Erasure — to have your data deleted where it is no longer needed or where you
withdraw consent (subject to records we must keep by law).
- Withdraw consent — at any time, as easily as it was given, including
unsubscribing from marketing.
- Object & restrict — to object to processing based on legitimate interests, or
ask us to restrict it.
- Portability — to receive certain data in a portable format (GDPR).
- Grievance redressal & nomination — under the DPDP Act, to have your grievance
addressed by us, and to nominate another person to exercise your rights in the
event of death or incapacity.
- California rights (CCPA/CPRA) — to know, delete, correct, and to opt out of
the "sale" or "sharing" of personal information (we do neither), without
discrimination.
To exercise any right, contact us using the details in section 15. We may need
to verify your identity, and we will respond within the period the applicable
law requires. You may also complain to your data-protection authority — in
India, the Data Protection Board of India.
12. MARKETING COMMUNICATIONS
We send marketing only where you have opted in, and you can opt out at any time
— use the "unsubscribe" link in any email, reply STOP to an SMS/WhatsApp where
indicated, adjust your account preferences, or contact us. Even if you opt out
of marketing, we will still send you essential service messages about your
account and orders.
13. CHILDREN
The Site is intended for adults and is not directed at children. We do not
knowingly collect personal data from anyone under 18, and where the DPDP Act
requires verifiable parental consent to process a child's data we do not do so
without it. If you believe a child has provided us personal data, contact us
and we will delete it.
14. THIRD-PARTY LINKS
The Site may link to third-party websites and services (for example social
media, payment or delivery-tracking pages). We do not control them and this
Policy does not apply to them; please review their own privacy policies.
15. GRIEVANCE OFFICER & CONTACT
For any question, request or complaint about this Policy or your personal data
— including to reach our Grievance Officer under the DPDP Act and the Consumer
Protection (E-Commerce) Rules, 2020 — contact:
Grievance Officer · AmarSons Trading Pvt Ltd
S.C.O 825-26, Sector 22A, Chandigarh, India
GSTIN 04AAGCA5532Q1ZG
Telephone: 0172-4313133
Customer care: +91 98760 60506
Email: amarsons22@gmail.com
If you are in India and are not satisfied with our response, you may escalate
to the Data Protection Board of India as provided under the DPDP Act.
16. CHANGES TO THIS POLICY
We may update this Policy from time to time to reflect changes in our
practices, technology or the law. When we do, we will revise the "Last updated"
date above and, where the change is significant, take additional steps the law
requires. Your continued use of the Site after an update takes effect
constitutes acceptance of the revised Policy to the extent permitted by law.
By using this Site you acknowledge that you have read and understood this
Privacy Policy. Where your consent is required for any processing described
here, we will obtain it as the applicable law requires.