Privacy policy
Privacy Policy
Last updated: 16 August 2026
Seoul & Saint ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you visit seoulandsaint.com (the "Site") or purchase from us, how we use it, who we share it with, and what rights you have.
This policy is issued in accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Who We Are
Seoul & Saint is a partnership firm registered in India and is the Data Fiduciary responsible for your personal data.
- Registered address: Andheri, Mumbai, Maharashtra, India – 400093
- Email: seoulandsaint@gmail.com
- Support hours: Monday to Friday, 9:00 AM to 6:00 PM IST
2. Information We Collect
2.1 Information you give us
- Name, email address, phone number
- Billing and shipping address
- Order details and purchase history
- Account login credentials, if you create an account
- Communications you send us (emails, WhatsApp messages, support tickets)
- Reviews, photographs, or other content you submit
- Size, fit or preference information you voluntarily share
2.2 Information collected automatically
- IP address, browser type, device type, operating system
- Pages viewed, products viewed, time spent on the Site
- Referring URL and how you arrived at the Site
- Cookie and similar identifiers
2.3 Payment information
We do not collect or store your full card number, CVV, UPI PIN or net banking credentials. Payments are processed directly by our payment gateway partners, who handle that data under their own privacy policies and PCI-DSS obligations. We receive only a transaction reference, payment status, and the last four digits of the instrument where applicable.
3. How We Use Your Information
We use your personal data to:
| Purpose | Examples |
|---|---|
| Fulfil your order | Process payment, ship products, share your address with couriers |
| Communicate with you | Order confirmations, dispatch and delivery updates, return status |
| Provide support | Respond to queries, complaints and return requests |
| Improve our products and Site | Understand which products and pages perform well, fix issues |
| Marketing (with your consent) | Emails, SMS or WhatsApp about new drops, restocks and offers |
| Prevent fraud and abuse | Detect suspicious orders, repeated fraudulent returns, chargebacks |
| Comply with law | Tax records, GST filings, responding to lawful requests |
We process your data on the basis of your consent, the performance of our contract with you, and our legitimate business and legal obligations.
4. Marketing Communications
We will send you marketing messages only where you have opted in, or where you are an existing customer and applicable law permits.
You can withdraw consent at any time by clicking "unsubscribe" in any marketing email, replying STOP to messages, or emailing seoulandsaint@gmail.com. Withdrawing marketing consent does not stop transactional messages about orders you have placed.
5. Who We Share Your Data With
We share personal data only as necessary, with:
- Shopify — our e-commerce platform, which hosts the Site and stores order data
- Payment gateways — to process your payment
- Courier and logistics partners — to deliver your order (name, address, phone number)
- Communication tools — email, SMS or WhatsApp providers used to send order updates and, with consent, marketing
- Analytics providers — to understand Site usage in aggregate
- Professional advisers and authorities — accountants, auditors, or law enforcement where legally required
We do not sell your personal data.
Some of these providers may process or store data outside India. Where that happens, we take reasonable steps to ensure appropriate safeguards are in place, consistent with applicable law.
6. Cookies
We use cookies and similar technologies to:
- Keep items in your cart and keep you logged in (essential)
- Remember your preferences
- Measure Site performance and traffic (analytics)
- Show relevant advertising, where you have consented (marketing)
You can manage or disable cookies through your browser settings. Disabling essential cookies may prevent checkout from working correctly.
7. Data Retention
We retain personal data only as long as necessary:
- Order and transaction records: retained for at least [8] years to meet tax, GST and accounting obligations
- Account data: retained while your account is active, and for a reasonable period thereafter
- Marketing data: retained until you withdraw consent
- Support correspondence: retained for [X] years
After these periods, data is deleted or anonymised.
8. Data Security
We take reasonable technical and organisational measures to protect your data, including HTTPS encryption across the Site, access controls limiting who can view customer data, and reliance on established platforms and payment processors.
However, no method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security, and you share information with us at your own risk.
If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required under applicable law.
9. Your Rights
Under the DPDP Act, you have the right to:
- Access — request a summary of the personal data we hold about you and how it is processed
- Correction — request that inaccurate or incomplete data be corrected or updated
- Erasure — request deletion of your data, subject to our legal retention obligations
- Withdraw consent — withdraw consent for processing based on consent, at any time
- Grievance redressal — raise a complaint with us, and escalate to the Data Protection Board of India if unresolved
- Nominate — nominate another individual to exercise your rights in the event of your death or incapacity
To exercise any of these rights, email seoulandsaint@gmail.com. We will respond within the timelines prescribed by law. We may need to verify your identity before acting on a request.
10. Children's Data
The Site is not intended for anyone under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a person under 18 without verifiable parental consent, we will delete it.
11. Third-Party Links
The Site may link to third-party websites and social media platforms. We are not responsible for their privacy practices. We encourage you to read their policies before sharing data with them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date reflects the most recent revision. Material changes will be notified on the Site or by email where appropriate.
13. Contact
If you have any concern or complaint about how we handle your personal data, contact us at:
Seoul & Saint Andheri, Mumbai, Maharashtra, India – 400093 Email: seoulandsaint@gmail.com Support hours: Monday to Friday, 9:00 AM to 6:00 PM IST
We will acknowledge your complaint within 48 hours and endeavour to resolve it within 30 days.