Privacy Policy

• Your account - name, email address, mobile number and password. Passwords are stored only in encrypted, one-way form; nobody can read them, including us.
• Your orders - delivery and billing addresses, the pieces you buy, sizes and options, order notes, gift messages and your order history.
• Payments - handled by our payment partners. We receive confirmation that you paid and a reference number, never your full card number, CVV or UPI PIN.
• Your messages - what you send through the contact form, email or WhatsApp, and reviews you write (shown with your first name).
• Alerts you ask for - the email address you leave for a back-in-stock alert or our newsletter.
• Collected automatically - your IP address, device, browser and operating system, the pages you visit, time spent and what you click, and the pages or search terms that led you to us - through cookies and analytics tools (see below).

• To take, deliver and support your orders, and send order and shipping updates.
• To run your account, including signing in with your email or mobile number.
• To answer your questions and handle returns, exchanges and lifetime care.
• To send the messages you asked for: back-in-stock alerts, reminders about pieces left in your bag, a request to review a delivered order, and our newsletter. You can stop any of these.
• To issue tax invoices and keep the records the law requires.
• To keep the website secure and prevent fraud - for example limiting repeated sign-in attempts.
• To personalise your experience on the website.
• To send occasional editorial updates or early-access news, where you have opted in.
• To understand how the website is used, improve it and our range, and measure and show our advertising.

We collect and process your personal data only with your informed, specific and unambiguous consent - given when you create an account, place an order or ask us something - or where the law requires it. Consent to marketing messages is separate and optional.

You can withdraw your consent at any time by writing to support@imphala.com, as easily as you gave it. Withdrawing does not affect what was done before.

Cookies are small files your browser stores for a website. We also use your browser's local storage to remember small choices.

You can block or delete cookies in your browser settings. Essential features - signing in, your bag, checkout - will then stop working.

Google Analytics. We use Google Analytics to understand how the website is used. Google processes this data as described at policies.google.com/technologies/partner-sites. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

Microsoft Clarity. We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps and session replay, to improve and market our products. Website usage data is captured using first- and third-party cookies and other tracking technologies, to understand the popularity of our products and online activity; we also use it for site optimisation, fraud and security purposes, and advertising. Text you type into forms is masked and not recorded. For more about how Microsoft collects and uses your data, see the Microsoft Privacy Statement at privacy.microsoft.com. You can opt out at optout.aboutads.info.

Meta (Facebook and Instagram). Meta and other third parties may use cookies, web beacons and similar technology on this website to collect information about your visit and use it to measure our ads and show you relevant ads, as described in Meta's Privacy Policy at facebook.com/privacy/policy. You can control the ads you see in your Facebook or Instagram ad preferences, and opt out of interest-based advertising at optout.aboutads.info or youronlinechoices.eu.

Only the partners we need, and only what each one needs:

• Payment partners - such as Razorpay, CCAvenue and Stripe - to take your payment securely.
• Shipping partners - Shiprocket and its courier companies - to collect and deliver your parcel.
• Email and messaging services - to send order emails and messages, including WhatsApp when you chat with us there.
• Hosting - the servers this website and its data run on.
• Analytics and advertising - Google, Microsoft and Meta, as described above.
• Professional advisers and authorities - our accountants and lawyers, and government or law-enforcement bodies when the law requires it.

We do not sell your personal data.

Some of our partners - including Google, Microsoft, Meta and some payment and email providers - may store or process data outside India. We use established providers that protect it to the standards the law requires.

• Your account details - for as long as your account is open.
• Orders and tax invoices - for as long as tax and accounting laws require, generally up to eight years.
• Marketing details - until you unsubscribe or ask us to delete them.
• Analytics data - for the period set with each provider, after which it is deleted or anonymised.

When data is no longer needed, we delete it or make it anonymous.

The website uses encrypted (HTTPS) connections, passwords are stored in one-way encrypted form, card payments are handled by PCI-DSS-compliant gateways, and access to customer data is limited to the people who need it. If a data breach ever affected you, we would tell you and the Data Protection Board of India, as the law requires.

You can see and correct most of your details yourself under Account → Profile and Addresses. You can also ask us to:

• tell you what personal data we hold about you, how it is used, and who we have shared it with;
• correct, complete or update anything inaccurate;
• delete your account and personal data, unless the law requires us to keep it;
• stop marketing, or withdraw a consent you gave;
• nominate someone to exercise these rights for you if you are unable to.

Write to us at support@imphala.com to make a request. We reply as quickly as we can, and within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Every marketing email has an unsubscribe link. To stop bag reminders, review requests or WhatsApp messages, reply to the message or write to us. We will still send messages about orders you place.

This website is meant for adults. If you are under 18, please shop with a parent or guardian. We do not knowingly track or target advertising at children.

For any question or complaint about your personal data, contact our grievance officer:

UTKARSH SANDIP SHAH, Grievance Officer
IMPHALA, Manibhadra View, Pal Road, Adajan, Surat 394510, Gujarat, India
Email: support@imphala.com
Phone: +91 98700 36693

We acknowledge every complaint within 48 hours.