Your information deserves care and clarity.

Introduction and scope

This Privacy Policy applies to OmnieLite, an online fashion business operated by OMNIELITE ECOMMERCE PRIVATE LIMITED. References in this policy to “we”, “us”, “our”, “Company” or “OmnieLite” mean OMNIELITE ECOMMERCE PRIVATE LIMITED, as applicable.

This policy describes our practices relating to personal data that may be collected when an individual accesses our website, registers an account, places or tracks an order, contacts customer support, participates in a transaction or otherwise interacts with our digital services.

We seek to process personal data in accordance with applicable laws of India, including applicable provisions of the Digital Personal Data Protection Act, 2023, rules made thereunder, the Information Technology framework where applicable, the Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020, as amended or replaced from time to time.

Our products and services

OmnieLite operates an e-commerce website focused on fashion and apparel. Our principal product categories include:

• Saree and related fashion selections.
• Kurta Set collections and available variants.
• Tshirt styles offered through the website.
• Cord Sets and coordinated clothing.
• Short Kurtis and associated size or colour variants.

Information relating to size, colour, product preference, shopping behaviour and order history may therefore form part of the information processed in connection with our fashion retail services.

Personal data we may collect

The information collected depends on how you interact with our website and which services you use.

How we obtain personal data

Personal data may be obtained directly from you or through systems required to operate our e-commerce services.

• When you register or maintain a customer account.
• When you add products to the cart or complete checkout.
• When you provide billing or shipping information.
• When you initiate or complete payment through an available payment method.
• When you track, cancel, return or seek a refund for an order.
• When you contact customer support.
• When your browser or device communicates with our website.
• Through authorised service providers involved in payment, delivery, hosting, security or fulfilment.

We expect users to provide information that is accurate and relates to themselves or information they are legally authorised to provide.

Why we process information

Consent and lawful processing

Where processing is based on consent, we seek to obtain consent in a clear manner for the specified purpose for which the information is required.

Personal data may also be processed where permitted by applicable law, including where you voluntarily provide information for a specified purpose such as placing an order, requesting delivery, seeking customer support or requesting another service from us.

Consent may be withdrawn where applicable. Withdrawal does not ordinarily affect processing lawfully undertaken before withdrawal and may not prevent processing necessary to complete an existing transaction, comply with law or establish, exercise or defend legal claims.

Orders, checkout and payments

When you place an order, information such as your name, contact details, billing details, shipping address, products ordered and transaction information may be processed to complete the purchase.

Depending on the payment method selected, payment processing may be carried out by banks, UPI service providers, payment gateways or other authorised payment partners. Such third parties may process information according to their own legal obligations and privacy practices.

We may receive payment-related information such as transaction references, payment status, amount, timestamps or confirmation necessary to associate a payment with your order.

Customers should never send passwords, OTPs, UPI PINs, card PINs or similar authentication credentials to our customer support team.

Cookies and similar technologies

Our website may use cookies, browser storage and similar technologies where necessary to operate website features and improve security and functionality.

These technologies may support functions such as:

• Maintaining shopping cart contents.
• Keeping users signed in where applicable.
• Remembering website or account preferences.
• Maintaining website security.
• Understanding technical website performance.
• Detecting abnormal, fraudulent or unauthorised activity.

Where consent is required for non-essential cookies or similar technology under applicable law, such technology should be used in accordance with the applicable consent mechanism.

Who may receive personal data

Personal data may be shared only where reasonably required for legitimate business operations, requested services or compliance with applicable law.

• Payment service providers: to process or verify payments and refunds.
• Logistics and courier partners: to dispatch, transport and deliver orders.
• Technology and hosting providers: where required to operate, secure or maintain the website.
• Communication providers: for transactional email, SMS or other order-related messages.
• Professional advisers: where reasonably required for accounting, audit, legal or compliance purposes.
• Government or regulatory authorities: where disclosure is required or authorised by applicable law.

Data processors acting on our behalf are expected to process information for authorised purposes and subject to appropriate contractual or legal requirements.

How long information is retained

Personal data is not intended to be retained indefinitely. We may retain information for as long as reasonably necessary to fulfil the purpose for which it was collected or for a period required under applicable law.

Retention may be necessary for purposes including:

• Completing and documenting customer orders.
• Managing warranties, returns or refunds where applicable.
• Accounting, taxation and statutory record keeping.
• Consumer complaints and dispute resolution.
• Fraud prevention and information security.
• Establishing, exercising or defending legal claims.

Where personal data is no longer required for its permitted purpose and no applicable law requires further retention, it may be deleted, anonymised or otherwise handled in accordance with applicable data-protection requirements.

Security of personal data

We seek to use reasonable technical and organisational safeguards appropriate to our business and the nature of information processed.

Measures may include, where applicable:

• Access controls and account authentication.
• Secure website communication and encryption where appropriate.
• Restricted administrative access.
• Website and server security measures.
• Monitoring and logging designed to identify security issues.
• Backups and recovery measures where appropriate.
• Controlled access by authorised service providers.

No online transmission or storage environment can be guaranteed to be completely risk-free. Customers should therefore protect their account credentials and promptly inform us if they suspect unauthorised use of their account.

Children's personal data

The website is a general fashion e-commerce service and is not designed specifically to target children.

Where an individual is treated as a child under applicable Indian data-protection law, processing of the child's personal data will be subject to applicable requirements, including parental or lawful guardian consent where required.

We do not intend to use children's personal data for tracking, behavioural monitoring or targeted advertising where such activity is prohibited by applicable law.

Your privacy rights

Subject to applicable law, eligible individuals may have rights in relation to personal data processed by us. These may include the ability to request access-related information, correction, completion, updating or erasure and to use available grievance redressal mechanisms.

Additional rights available under applicable law may include withdrawal of consent and nomination of another individual to exercise applicable rights in specified circumstances such as death or incapacity.

Requests may be subject to reasonable verification to protect accounts and personal information against unauthorised access or fraudulent requests.

Marketing communications

Where permitted and where applicable consent or another valid legal basis exists, customers may receive promotional communications concerning OmnieLite, products, collections or offers.

Where an unsubscribe, withdrawal or preference-control mechanism is provided, customers may use it to stop or modify promotional communications.

Transactional communication concerning an existing order, payment, delivery, refund, account security or customer request may continue where necessary even where a customer does not wish to receive promotional marketing.

Processing and transfers outside India

Some service providers or technical infrastructure used in connection with website hosting, communication, security or other digital services may process information using systems located outside India.

Any cross-border processing or transfer of personal data is subject to applicable Indian law, including any restrictions, conditions or notifications issued by the Government of India from time to time.

Third-party websites and services

Our website may contain links, integrations or services operated by third parties. This Privacy Policy does not govern independent websites or services controlled by those third parties.

Payment gateways, banks, delivery partners and external services may maintain their own privacy policies and legal obligations. Customers should review the relevant third-party terms where appropriate.

Personal data breach

If a personal data breach occurs, we may investigate, contain and remediate the incident and take other reasonable measures appropriate to the circumstances.

Where applicable Indian law requires notification of an affected individual, the Data Protection Board of India or another authority, notifications will be handled in accordance with the requirements applicable at that time.

Legal and regulatory disclosures

We may preserve, use or disclose information where reasonably necessary to comply with applicable law, a lawful governmental request, court order, regulatory requirement or legal process.

Information may also be processed where reasonably necessary for investigation or prevention of fraud, cybersecurity incidents, unlawful activity or for the establishment, exercise or defence of legal claims where permitted under applicable law.

Nothing in this Privacy Policy is intended to limit any statutory right available to consumers under applicable Indian consumer-protection legislation.

Changes to this Privacy Policy

This Privacy Policy may be revised when our services, technologies, business practices or applicable legal requirements change.

The revised version may be published on this page with an updated effective or revision date. Where additional notice or consent is required by applicable law, we may take appropriate steps to provide such notice or obtain such consent.

Privacy questions and grievance redressal

If you have a question regarding this Privacy Policy, believe your personal data requires correction, wish to make an applicable privacy request or have a grievance concerning the handling of your information, you may contact us using the official details below.

We may request reasonable information necessary to verify the requester and identify the relevant account, transaction or personal data before acting on a request.