1. Introduction: 

At IMPHALA, we take your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have — in accordance with applicable Indian law. By using our website or placing an order, you consent to the practices described in this policy.

2. Consent: 

We collect and process your personal data only with your informed, specific, and unambiguous consent. When creating an account or placing an order, you will be asked to confirm your consent to the relevant data processing activities. Consent to marketing communications is separate and optional.

You may withdraw your consent at any time by contacting us at support@imphala.com. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

3. Information We Collect:

• Name, email address, phone number, and shipping/billing address when you place an order or create an account.
• Payment details — processed securely by our payment gateway; we do not store full card or banking information.
• Communications you send us via email, WhatsApp, or our contact form.

Information collected automatically:

• Browser type, IP address, device type, and operating system.
• Pages visited, time spent on site, and click behaviour via cookies and analytics tools.
• Referring URLs and search terms that led you to our site.

4. How We Use Your Information:

We use your personal information for below - 

• Process and fulfil your orders, including shipping and delivery.
• Send order confirmation, tracking updates, and post-purchase communications.
• Respond to customer service enquiries.
• Personalise your experience on our website.
• Send occasional editorial updates or early-access communications, where you have opted in.
• Improve our website, product range, and overall customer experience.
• Comply with legal obligations under applicable Indian law.

5. Data Sharing & Third Parties: 

We do not sell your personal data. We may share your information with trusted third-party service providers solely for the purposes of operating our business, including:

• Payment gateways (e.g., Razorpay) for secure payment processing
• Logistics and courier partners for order fulfilment
• Email and communication platforms for transactional or opted-in marketing messages

All third-party partners are bound by their own privacy policies and applicable data protection obligations. Where data is transferred to entities outside India, we take reasonable steps to ensure adequate protection is in place.