10% Off on First Order | Use Code: FIRST ECO

Privacy policy

Last updated: June 5, 2026

Ecolore ("we," "us," or "our") operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated shopping experience (the "Services"). Ecolore is the "Data Fiduciary" responsible for determining the purposes and means of processing your personal data under applicable Indian law. Our services are powered by Shopify, which acts as our Data Processor.

This Privacy Policy describes how we collect, use, disclose, and protect your digital personal data when you visit, use, make a purchase, or otherwise communicate with us.

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read this Privacy Policy and understand how your information is handled. Under the Digital Personal Data Protection (DPDP) framework, you are the "Data Principal."

1. Personal Data We Collect

We collect only the digital personal data that is necessary to fulfill your requests, process transactions, and provide you with our Services. This includes:

  • Contact Details: Your name, residential/delivery address, billing address, phone number, and email address.

  • Financial & Transaction Information: Payment card details, transaction details, form of payment, bank account numbers (where necessary for refunds), and payment confirmations. (Note: Payments are securely processed through our authorized Indian payment gateways).

  • Account Information: Your username, password, security questions, preferences, and saved settings.

  • Activity & Usage Data: Items you view, put in your cart, add to your wishlist, purchase, return, or cancel, as well as your interaction timelines with the website, IP address, and browser/device specifications.

  • Communications: Any details or information you provide when reaching out to our customer support or messaging channels.

2. How We Collect Your Personal Data

We collect data through the following lawful means:

  • Directly from You: When you voluntarily register an account, make a purchase, fill out a form, or communicate with us.

  • Automatically: Through cookies, pixel tags, and tracking technologies when you navigate our platform to analyze performance and remember your shopping cart.

  • From Our Partners: From Shopify and integrated logistics or payment service providers to complete your order lifecycle.

3. Purpose of Processing Your Personal Data

We process your personal data under the lawful grounds of your explicit, unambiguous consent, or for specified legitimate uses (such as fulfilling a contract or complying with a legal order). We use it to:

  • Fulfill Orders & Services: Process payments, arrange shipping through domestic couriers, handle returns/exchanges, and manage your account.

  • Customer Communication: Respond to inquiries, provide shipping updates, and offer customer support.

  • Security & Fraud Prevention: Ensure safe transactions, authenticate your identity, and investigate potential fraudulent, unauthorized, or malicious activity.

  • Marketing & Promotions: Send you updates, offers, and newsletters via SMS, WhatsApp, or email, provided you have given your explicit consent to receive marketing materials. You may withdraw this consent at any time.

4. Sharing and Disclosure of Your Data

We do not sell your personal data. We disclose personal data to third parties only for legitimate business and operational purposes, including:

  • Shopify: Our e-commerce platform provider, which processes data on our behalf to maintain the storefront.

  • Service Providers: Third-party vendors operating within India who assist with payment gateways, domestic shipping/logistics, IT management, and data analytics.

  • Legal & Government Authorities: When strictly required by law, court orders, or requests from government agencies under the provisions of Indian law.

5. Data Retention and Erasure

We will retain your personal data only for as long as it is necessary to fulfill the specific purposes outlined in this Privacy Policy, or as required to meet legal, tax, or accounting requirements. Once the purpose of data collection is satisfied, or if you choose to withdraw your consent, we will take reasonable technical measures to delete or de-identify your personal data from our servers and ensure our processors (like Shopify) do the same, unless retention is mandated by Indian law.

6. Processing Children’s Data

Our Services are intended for individuals who can form legally binding contracts under Indian law. We do not knowingly collect or process personal data from individuals under the age of 18 (minors) without verifiable parental or legal guardian consent. We do not engage in behavioral tracking or targeted advertising directed at children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately to have it erased.

7. Your Rights as a Data Principal

Under Indian data protection laws, you enjoy specific rights regarding your digital personal data. You can exercise these rights by contacting us through the details provided below:

  • Right to Access and Know: You have the right to request a summary of the personal data we hold about you and a list of third parties with whom it has been shared.

  • Right to Correction and Erasure: You can request that we update, correct, complete, or delete inaccurate or unnecessary personal data.

  • Right to Withdraw Consent: You have the right to withdraw your consent for data processing at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal. Please note that withdrawing essential consent may limit our ability to provide you with services (like shipping an order).

  • Right to Nominate: You have the right to nominate any other individual to exercise your data rights in the event of your death or incapacity.

  • Right of Grievance Redressal: You have the right to file a complaint regarding our data practices. We are committed to resolving your concerns promptly.

8. Data Security

We implement reasonable and legally compliant administrative, technical, and physical security safeguards to protect your personal data against unauthorized access, loss, or alteration. However, please remember that no transmission method over the internet is completely bulletproof, and you are responsible for maintaining the confidentiality of your account login credentials.

9. Grievance Redressal & Contact Us

If you have any questions, wish to exercise any of your Data Principal rights, or have a complaint regarding how your personal data is being processed, please contact our designated Grievance Officer:

  • Name/Designation: Mr Jude - CEO

  • Email Address: support@ecolorefashion.com

  • Postal Address: 19th A Main Road Indiranagar, Chandirapuram East, Bengaluru, KA, 560008, IN

We will review and respond to your grievance or request in a time-bound manner as required by law. If you are not satisfied with our response or resolution, you have the right to escalate your complaint directly to the Data Protection Board of India (DPBI).