Privacy Policy

1. Who Handles Your Data

INSTACLOSET FASHION HUB PRIVATE LIMITED operates the InstaCloset Customer App and handles personal data for the purposes explained in this Policy.

Registered Office: Flat No. 401, Plot No. 17, Mythri Nivas, Silpa Valley, Kondapur, K.V. Rangareddy, Serilingampally, Telangana, India 500084.

Independent sellers and payment providers may also handle data under their own privacy notices for their own legal responsibilities.

2. Information We Collect and Why

Depending on the features you use, we may process the following categories of information. This list must be verified against the released app, backend and third-party services before publication.

Account information: Name, mobile number, email address if supplied, login identifiers and authentication events. These support account creation, authentication, support and security.

Shopping information: Addresses, orders, cart and wishlist records, returns, support messages and uploaded evidence. These support shopping, fulfilment, refunds, customer service and transaction records.

Payment information: Payment method type, payment status, transaction reference and refund account details only when necessary. These support payment reconciliation, refunds and fraud prevention.

Device and usage information: Device/app version, IP address, security logs, crash reports and usage events, where actually collected. These support security, diagnostics and service improvement.

Location information: Customer-selected address or permitted device location, where implemented. This supports serviceability, address selection, dispatch, navigation and delivery tracking.

Remove any category not actually collected and disclose any additional categories before publication.

3. Location and Device Permissions

If location permission is optional, you may enter your address manually.

Before publication, InstaCloset must specify whether the app collects precise or approximate device location and when collection starts and stops.

Camera and selected photos/files, where enabled, support return evidence. Notifications support order and service alerts. Marketing preferences are separate.

Permissions must reflect the released app. Contacts, microphone, call logs, broad SMS access or continuous background access must not be requested without a necessary implemented feature and matching disclosure.

Permission withdrawal may disable the dependent feature, except where that feature is essential to the service requested.

4. Sharing and Service Providers

We share only the information reasonably needed with:

• Vendors for relevant orders.
• Logistics providers and assigned riders for delivery.
• Payment providers and banks for collection, verification and refunds.
• Contracted hosting, authentication, messaging, support, diagnostics and security providers for the stated purposes.

Access must be limited to authorised roles.

We may disclose information where lawfully required, to address fraud or safety incidents, or as part of a lawful business transfer with appropriate safeguards and notice.

5. Payments, Marketing and Tracking

Before publication, confirm whether payment details are entered directly with the payment provider or reach InstaCloset, and identify the tokens or references retained.

Do not send full payment credentials through support messages.

We use contact details for transactional communications and, where separately permitted, marketing. You may withdraw marketing consent without losing necessary service messages.

Before publication, verify whether personal data is sold or shared for targeted advertising, whether advertising identifiers are collected, and whether cross-company tracking occurs. Identify relevant SDKs and purposes.

Where Apple tracking permission or another separate consent is required, we request it before the relevant activity and respect refusal.

6. Retention and Deletion

We keep personal data only for the stated purpose and applicable legal obligations, then delete it or irreversibly anonymise it.

Account deletion removes the account and associated data that no longer needs to be retained. It is not merely deactivation.

Restricted retention may cover tax invoices, settlement records, unresolved claims, fraud evidence and legal holds. Retained records are not kept for unrelated marketing.

Before publication, define retention periods for:

• Active accounts and preferences.
• Invoices, orders and statutory records.
• Security, support and fraud records.
• Deleted data in backups.

The account deletion process and public deletion URL must be operational.

7. Security and Processing Locations

We apply reasonable technical and organisational safeguards appropriate to the information.

No service can promise absolute security. We investigate security incidents and make notifications required by applicable law.

8. Your Choices and Rights

You may contact the privacy team to request access to information about your data, correction, deletion, withdrawal of consent, or grievance handling as available under applicable law and our stated commitments.

Where legally available, nomination or other statutory rights may also be exercised through [ROUTE].

We will use proportionate identity verification and explain any lawful refusal or retention.

Withdrawing consent does not affect earlier lawful processing, but may prevent a service that needs the data. You may use available regulator or statutory complaint mechanisms after applicable grievance steps.

9. Children, Updates and Contact

The app is intended for adult account holders and is not directed to children under 18. We do not knowingly onboard children as customers.

If you believe a child has supplied personal data, contact support@theinstacloset.com. We will assess the situation, delete data where required and apply any legally required consent or safeguards.

Age restrictions must also be implemented in onboarding.

We will publish updated versions and notify you of material changes. A new purpose requiring consent will be presented separately before processing.