Who we are (Data Fiduciary)
Dress To Impress by Mohini ("we", "us"), proprietor Mohini Sachin Shinde, Talegaon Dabhade, Maval, Pune 410507, is the Data Fiduciary responsible for the personal data described here. Contact details, including our Grievance Officer, are at the end of this notice.
What personal data we collect
- Identity & contact: your name, email address and phone number(s).
- Delivery details: shipping address, landmark, PIN code, and — only if you tap "use my location" — approximate GPS coordinates.
- Order & payment: items ordered, order history, and payment status. Card/UPI details are entered on Razorpay and are NOT stored by us.
- Account: login email/phone and a securely hashed password (managed by our authentication provider; we never see your password).
- Reviews: the name and review text you choose to publish.
- Technical: IP address and browser type, used for security and rate-limiting.
Why we use it and our legal basis
- To create and run your account and to process, deliver and invoice your orders — the purpose for which you provide it (consent / performance of your requested service).
- To contact you about your order and replacements (via WhatsApp/email).
- To publish a review, only with your consent.
- To send offers and updates — only if you opt in (you can withdraw anytime).
- To keep the service secure and meet legal/tax obligations (e.g. GST invoicing and record-keeping).
Consent and how to withdraw it
Where we rely on your consent, it is requested through a clear, unticked checkbox at the point of collection, separately for each purpose. You can withdraw consent at any time — it is as easy to withdraw as it was to give — using our Data Rights form or by contacting the Grievance Officer. Withdrawing consent does not affect processing already carried out, and some data must be retained to meet legal obligations (see Retention).
Who we share it with (Data Processors & third parties)
- Supabase — database, authentication and file storage (hosting our data).
- Razorpay — payment processing.
- Resend — sending transactional emails.
- Courier partners (e.g. Shree Anjani Courier) — to deliver your order.
- OpenStreetMap/Nominatim & India Post — to turn a PIN code or map pin into an address (delivery only).
- Google Maps — an embedded map on our Contact page, loaded only if you accept optional cookies.
- We do not sell your personal data. We share only what each partner needs for the purpose above.
How long we keep it (Retention)
We keep personal data only for as long as it is needed for the purpose it was collected for, or for as long as the law requires — whichever is longer. Our standard periods are:
- Order & GST tax-invoice records — 8 years, to meet GST and income-tax record-keeping obligations.
- Account details (name, email, phone, saved addresses) — while your account is active, and deleted or anonymised within about 3 years of your last activity if the account becomes inactive. (Order and invoice records above are kept for their own period.)
- Consent records — for the life of your account and up to 3 years after you close it or withdraw consent, so we can demonstrate that consent was properly obtained.
- Data-rights requests — 3 years, as proof that we handled your request.
- Marketing contact — until you unsubscribe; we then stop and keep only the record that you opted out.
- Reviews — remain published until you ask us to remove them.
- Security logs (such as IP address) — about 90 days.
Your rights
- Access — get a summary of the personal data we hold about you.
- Correction & completion — fix inaccurate or incomplete data.
- Erasure — ask us to delete your data (subject to legal retention).
- Withdraw consent — for any purpose you opted into.
- Grievance redressal — raise a complaint and have it addressed.
- Nominate — nominate another person to exercise your rights in case of death or incapacity.
Security
We apply reasonable security safeguards, including encrypted connections (HTTPS), access controls, hashed passwords, row-level database security and rate-limiting. No method is perfectly secure, but we work to protect your data and will notify you and the Data Protection Board of India of a personal data breach as required by law.
Children
Our store is intended for adults. We do not knowingly collect the personal data of children without verifiable parental consent. If you believe a child has provided data, contact our Grievance Officer.
Exercise your rights
Use our Data Rights request form to access, correct, erase your data, withdraw consent, or raise a grievance.
Grievance Officer
Mohini Sachin Shinde — Owner & Founder
Dress To Impress by Mohini
Talegaon Dabhade, Maval, Pune — 410507
Email: dresstoimpressbymohini@gmail.com
WhatsApp: +917410558325
GSTIN: 27EJHPS8275K1Z9