PRIVACY POLICY

INTRODUCTION

Arve Footwear ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website arvefootwear.com and make purchases from us.

This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 of India.

INFORMATION WE COLLECT

We collect information that you provide directly to us and information collected automatically when you use our website.

LEGAL BASIS FOR PROCESSING

Under the DPDP Act 2023, we process your personal data based on the following legal grounds:

• Consent: When you voluntarily provide information by making a purchase or subscribing to communications
• Contract Performance: To fulfill our obligations when you place an order
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interest: To improve our services and protect our business

HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

• Order Processing: To process and fulfill your orders, including shipping and delivery
• Communication: To send order confirmations, shipping updates, and respond to inquiries
• Customer Service: To provide support and handle returns or exchanges
• Marketing: To send promotional offers (only with your consent, which you can withdraw anytime)
• Website Improvement: To analyze usage patterns and improve our services
• Legal Compliance: To comply with legal obligations and protect our rights
• Fraud Prevention: To detect and prevent fraudulent transactions

DATA STORAGE & RETENTION

Your personal data is stored on secure servers located in India. We retain your data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

DATA SHARING & DISCLOSURE

We may share your personal data with the following categories of recipients:

• Shipping Partners: Courier companies to deliver your orders
• Payment Processors: Secure payment gateways to process transactions
• Service Providers: Third parties who assist in website hosting, analytics, and customer service
• Legal Authorities: Government agencies when required by law or legal process

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

YOUR RIGHTS (DPDP ACT 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request information about what personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal requirements)
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Nominate: Nominate another person to exercise your rights in case of death or incapacity
• Right to Grievance Redressal: File complaints with us or the Data Protection Board of India

To exercise these rights, please contact us using the details provided below.

DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure server infrastructure with access controls
• Regular security assessments and updates
• Employee training on data protection
• No storage of payment card data (RBI tokenization compliance)

While we take all reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

COOKIES & TRACKING

Our website uses cookies and similar technologies to enhance your browsing experience. Types of cookies we use:

• Essential Cookies: Required for website functionality (cart, checkout)
• Analytics Cookies: Help us understand how visitors use our website
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

CHILDREN'S PRIVACY

Our website is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will take steps to delete such information.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page with a new "Last Updated" date.

We encourage you to review this policy periodically.

GRIEVANCE OFFICER

In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, we have appointed a Grievance Officer to address your concerns: