Privacy policy

Brandian Private Limited
Privacy Policy

Brandian Private Limited (“Company”, “we”, “our”, or “us”) is committed to protecting and processing personal data in a lawful, fair, and transparent manner in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and other applicable rules and regulations.

This Privacy Policy explains how we collect, use, process, store, share, and protect your personal data when you access our website, purchase products, or interact with our services.

1. Definitions

  • Personal Data: Any data about an individual who is identifiable by or in relation to such data.

  • Sensitive Personal Data: As may be notified under applicable law (if applicable).

  • Data Principal: The individual to whom the personal data relates.

  • Data Fiduciary: Brandian Private Limited, responsible for determining the purpose and means of processing personal data.

  • Data Processor: Any entity processing personal data on behalf of the Company.

  • Processing: Any operation performed on personal data, including collection, storage, use, sharing, disclosure, or deletion.

2. Scope of Policy

This Privacy Policy applies to all users of our website, mobile interfaces, and services, including customers, visitors, and partners who provide personal data to us.

3. Personal Data We Collect

We collect only such personal data that is necessary for lawful and clearly defined purposes:

a. Data Provided by You

  • Full name

  • Mobile number

  • Email address

  • Billing and shipping address

  • Uploaded images, text, or content for personalized products

  • Communication data (messages, support queries)

b. Automatically Collected Data

  • IP address

  • Device identifiers

  • Browser type and version

  • Usage behavior and interaction data

  • Location (approximate, based on IP)

c. Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies for:

  • Website functionality

  • Analytics and performance tracking

  • Personalization and advertising

You may manage or disable cookies via your browser settings; however, this may affect certain functionalities.

4. Lawful Basis for Processing

We process personal data only on lawful grounds permitted under the DPDP Act:

  • Consent: Where you have provided explicit consent

  • Legitimate Uses: Including order fulfillment, customer support, fraud prevention

  • Legal Obligations: Compliance with applicable laws and regulatory requirements

5. Purpose of Processing

Your personal data is processed strictly for specific, lawful purposes:

  • Order processing, customization, and delivery

  • Customer support and communication

  • Payment processing and transaction management

  • Personalization of user experience

  • Marketing and promotional communication (only with consent)

  • Fraud detection, prevention, and security monitoring

  • Legal compliance and dispute resolution

We do not process your data for any purpose that is incompatible with the purposes stated above.

6. Consent Management

By using our services, you provide free, informed, specific, and unambiguous consent to the processing of your personal data.

You have the right to:

  • Withdraw consent at any time

  • Request discontinuation of processing

  • Opt out of marketing communications

Withdrawal of consent will not affect prior lawful processing.

7. Data Sharing and Third-Party Processing

We do not sell personal data. Personal data is shared only where necessary and under strict safeguards.

a. Categories of Third Parties

i. Logistics and Shipping Partners (e.g., Shiprocket)

  • Data Shared: Name, phone number, address, order details

  • Purpose: Order fulfillment and delivery

ii. Communication Platforms (e.g., WhatsApp / Meta Platforms, Inc.)

  • Data Shared: Phone number, communication content

  • Purpose: Order updates, support, notifications

iii. Review Platforms (e.g., Judge.me)

  • Data Shared: Name, email, review content

  • Purpose: Collecting and displaying product reviews

iv. Affiliate and Referral Platforms (e.g., SimpleAffiliate)

  • Data Shared: Name, contact details, referral activity

  • Purpose: Managing affiliate programs and commissions

v. Payment Gateways and Financial Partners

  • Data Shared: Transaction-related data (no storage of full payment details by us)

  • Purpose: Secure payment processing

vi. Advertising and Analytics Partners

  • Data Shared: Device identifiers, browsing behavior

  • Purpose: Performance analytics and targeted advertising (with consent)

b. Third-Party Obligations

All third parties:

  • Act as Data Processors under contractual obligations

  • Are required to implement reasonable security safeguards

  • Can process data only for specified purposes

  • Must comply with applicable data protection laws

8. Cross-Border Data Transfers

Personal data may be transferred outside India only to jurisdictions permitted by the Government of India and in compliance with applicable legal requirements under the DPDP Act.

9. Data Retention and Deletion

We retain personal data only for as long as necessary:

  • To fulfill the purpose for which it was collected

  • To comply with legal, tax, or regulatory obligations

  • For dispute resolution and enforcement

Upon completion of purpose, data is securely deleted or anonymized.

10. Data Security Measures

We implement appropriate technical and organizational measures, including:

  • Encryption and secure servers

  • Access controls and authentication mechanisms

  • Regular monitoring and audits

  • Secure payment processing protocols

Despite these measures, no system can guarantee absolute security.

11. Rights of Data Principals

Under the DPDP Act, you have the following rights:

  • Right to Access Information about your personal data

  • Right to Correction and Erasure

  • Right to Withdraw Consent

  • Right to Grievance Redressal

  • Right to Nominate another individual

To exercise your rights, contact us using the details below.

12. Grievance Redressal Mechanism

We have established a grievance redressal system in accordance with applicable law.

Grievance Officer Contact:
Email: help@brandian.in

All grievances will be acknowledged and resolved within timelines prescribed under applicable laws.

13. Personal Data Breach Notification

In the event of a personal data breach:

  • We will promptly assess and contain the breach

  • Notify affected users where required

  • Inform relevant authorities as mandated under law

14. Children’s Privacy

We do not knowingly collect personal data from individuals under 18 years of age. Where applicable, processing of children’s data requires verifiable parental or guardian consent.

15. User Obligations

Users agree:

  • To provide accurate and lawful information

  • Not to impersonate another individual

  • Not to upload unlawful, harmful, or infringing content

16. Updates to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Updates will become effective immediately upon posting.

17. Contact Details

For any queries, requests, or complaints:

Brandian Private Limited
Email: help@brandian.in

Last Updated: March 2026