Privacy policy

Last updated: 30 September 2026

Introduction

The Incvite
GSTIN: 08OIZPK1824H1ZH
Address: 204-A Suryanagar, Gopalpura Bypass, Jaipur

Returns should be sent as per the process listed on our Refund policy.

Main purpose: marketing and sale of clothing and accessories.

Data protection

In accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we inform you that your personal data will be processed by The Incvite as the Data Fiduciary, for the purposes, retention periods, and legal bases listed below.

Purpose	Storage period	Legal basis	Type of data	Disclosures	Cross-border transfer
Enable website functionality (account creation, cart, browsing)	Until consent is withdrawn	Consent	Identifying data (name, email, browsing data)	Not shared	Not applicable
Respond to your queries or support requests	For the duration necessary to resolve the query	Consent	Identifying data (name, email, phone, order details)	Not shared	Not applicable
Comply with applicable legal, tax, and regulatory obligations	As mandated by applicable law	Legal obligation	Identifying data	Disclosed to government and tax authorities where legally required	Not applicable
Send newsletters and marketing communications	Until you unsubscribe or withdraw consent	Consent	Name, email	Shared with email and marketing service providers (for example, Klaviyo, Mailchimp)	May involve transfer if the provider is based outside India. See Cross-border data transfers below.
Process and fulfil your order (payment, shipping, returns)	Duration of the order lifecycle, including returns and complaints	Performance of a contract	Name, address, phone, payment confirmation, order details	Shared with the payment gateway (for example, Razorpay, Shopify Payments) and courier or logistics partners	Possible, if the payment gateway or Shopify infrastructure processes data outside India
Accounting, invoicing, and statutory recordkeeping	As required under the Income Tax Act, 1961, GST law, and the Companies Act, 2013 (where applicable)	Legal obligation	Billing and identifying data	Disclosed to tax authorities and auditors as legally required	Not applicable

Your rights as a Data Principal

Under the DPDP Act, 2023, you (as the Data Principal) have the following rights regarding your personal data:

Right to access: Obtain a summary of the personal data we hold about you and the processing activities carried out.
Right to correction and erasure: Request correction of inaccurate or incomplete data, or erasure of data that is no longer necessary for the purpose it was collected, subject to legal retention requirements.
Right to grievance redressal: Raise a grievance regarding the processing of your data, which we are obligated to address within a reasonable timeframe.
Right to nominate: Nominate another individual to exercise your rights on your behalf in the event of death or incapacity.
Right to withdraw consent: Withdraw consent at any time for processing based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise these rights, contact our Grievance Officer at:

Email: yatharthms10@gmail.com
Address: 204-A Suryanagar, Gopalpura Bypass, Jaipur

Your request should include your full name, contact details, and a clear description of the right you wish to exercise. We may request proof of identity to prevent fraudulent requests.

If you believe your data has been processed unlawfully, you have the right to file a complaint with the Data Protection Board of India, once fully constituted and operational under the DPDP Act.

Payment processing

To offer secure payment options at checkout, we may share your personal data (order details, billing information) with third-party payment processors such as Razorpay and Shopify Payments. These providers process your data in accordance with their own privacy policies, and we recommend reviewing them:

Razorpay: https://razorpay.com/privacy/
Shopify Payments: https://www.shopify.com/legal/privacy

We do not store your full payment card details on our servers.

Cookies and tracking

Our website uses cookies and similar tracking technologies to:

Maintain your cart and session
Understand website traffic and usage patterns
Deliver personalized advertising (via Meta Pixel, Google Ads, and similar tools)

You can manage or disable cookies through your browser settings. Disabling cookies may affect certain website features.

Social media

The Incvite maintains profiles on Instagram and YouTube primarily to advertise our products and engage with customers. Any public information you share by following, commenting, or interacting with our page may be visible to us and other users, but is not stored in any separate file by us. We do not control the privacy practices of these platforms. Please review their respective policies:

Instagram: https://privacycenter.instagram.com/policy

Contests and promotions

We may occasionally run contests or promotions through our website or social media channels. Specific terms and conditions for each contest will be published at the time of the promotion. Social media platforms used to host such contests do not sponsor, endorse, or administer them.

Cross-border data transfers

Where we use service providers (such as Shopify's global infrastructure, email marketing tools, or analytics platforms) that store or process data outside India, such transfers will be made in accordance with the DPDP Act, 2023, which permits transfers to countries not restricted by the Central Government. We take reasonable steps to ensure such providers maintain adequate data protection standards.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes outlined above, or as required under applicable Indian law (for example, 8 years for accounting records under GST law, subject to change).

Children's data

Our website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors without verifiable parental or guardian consent, as required under the DPDP Act.

Data security

We implement reasonable security practices and procedures, as mandated under the IT Act, 2000 and the SPDI Rules, 2011, to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Changes to this policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The Last updated date at the top will indicate the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.