PRIVACY POLICY.
Your trust is foundational to our craft. We protect your personal data with the same uncompromising discipline we apply to our heavyweight garment construction.
Zero Data Selling
We never monetize, rent, or trade your personal information with third-party data brokers.
256-Bit SSL Encryption
Every interaction, checkout payload, and user session is shielded with industry-standard encryption.
PCI-DSS Compliant Payments
Your card numbers and UPI PINs are processed directly by RBI-licensed Razorpay and never stored on our servers.
Total Control
Request access, modification, or deletion of your stored records anytime via our grievance officer.
01 // Information We Collect
When you visit our store, place an order, or interact with our client concierge, we collect information strictly required to fulfill your order and improve your shopping experience:
- Personal Identifiers: Your full name, delivery address, pincode, contact phone number, and email address.
- Order & Transaction Records: Purchased articles, sizing, order IDs, delivery preferences, invoice amounts, and payment method type (Prepaid vs. COD).
- Technical & Device Metadata: IP address, browser type, operating system, approximate geographic location, and session interaction logs to ensure store security and thwart automated fraud.
- Customer Communications: Inquiries, size advice requests, or exchange notes sent to our WhatsApp or email channels.
02 // Payment Security & Gateway Standards
HOCUS CROCUS does NOT store or process your sensitive credit/debit card numbers, CVVs, net banking credentials, or UPI PINs on our servers.
All transactions are handled through Razorpay, an RBI-authorized payment aggregator certified under PCI-DSS Level 1 (the highest security standard in the global payment cards industry) with bank-grade 256-bit SSL encryption.
03 // How We Use Your Information
We process your personal data exclusively for legitimate operational purposes:
- Processing, packing, and dispatching your streetwear order with assigned courier partners.
- Sending essential transactional updates (Order Confirmation, Invoice, Shipping AWB, and Delivery Confirmation) via SMS, WhatsApp, and Email.
- Managing 7-day doorstep size exchanges, returns, and reverse logistics pickups.
- Preventing checkout abuse, bogus COD orders, and identity impersonation.
- Sending drop alerts and new collection lookbooks (only if you have voluntarily subscribed to our newsletter). You may unsubscribe anytime with one click.
04 // Third-Party Service Providers
To deliver our garments to your doorstep, we share only necessary, minimal data with trusted third-party partners bound by strict non-disclosure obligations:
- Logistics Partners: Delhivery, Bluedart, DTDC, and Xpressbees receive your name, address, phone number, and order value strictly for parcel delivery and reverse pickups.
- E-Commerce Infrastructure: Shopify Storefront API processes and securely hosts our order catalogue.
- Analytics & Advertising: Meta Pixel and Google Analytics help us understand aggregate visitor flows. These tools collect anonymized browsing patterns and device types.
05 // Cookies & Tracking Technologies
We use functional cookies to remember items in your cart, retain your wishlist, and maintain your session across page transitions. We also utilize analytical cookies to monitor website performance. You can choose to disable non-essential cookies through your browser settings at any time without losing the ability to browse or make purchases.
06 // Data Retention & Storage
We retain your purchase records for the duration necessary to satisfy order fulfillment, manage potential 7-day exchanges/warranty claims, and comply with statutory Indian tax and accounting regulations (typically 7 years for financial records). Technical logs are automatically purged on a rolling 90-day cycle.
07 // Your Rights Under the DPDP Act
Under the Digital Personal Data Protection Act, 2023, you hold the following rights regarding your digital personal data:
- Right to Access: Request a summary of the personal data held by us and the processing activities undertaken.
- Right to Correction & Erasure: Request the rectification of inaccurate information or the complete deletion of your customer record (subject to mandatory legal retention).
- Right to Grievance Redressal: Submit a complaint to our Grievance Officer regarding any data handling concern.
08 // Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are provided below:
Grievance Officer: Client Protection Desk
Brand: HOCUS CROCUS Studio
Email: hocuscrocus002@gmail.com
Response Window: We acknowledge all grievances within 24 hours and resolve them within 15 working days.