Privacy Policy

Spiider India ("Spiider," "we," "us," or "our") Last updated: 4th July 2026

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit spiiderind.com, place an order, contact us, or interact with our brand across web, WhatsApp, or phone. It is written in plain language, as required under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). By using our site or services, you are agreeing to the practices described here.

This policy applies to all "Data Principals" (that's you, the user) whose personal data we process as a "Data Fiduciary" under the DPDP Act.

---

1. What Personal Data We Collect

We do not knowingly collect sensitive personal data (health, biometric, financial account details beyond what's needed to process payment) beyond what's required to complete a transaction, and payment card details are handled directly by our payment gateway partners — we never store your full card number on our servers.

2. Your Consent

• We ask for your consent before collecting personal data, in plain language — not buried in these Terms.
• Consent for account creation is separate from consent for marketing emails/WhatsApp updates. You can say yes to one and no to the other.
• We do not use pre-ticked checkboxes, and continuing to browse the site does not count as consent to marketing communications.
• Withdrawing consent is as easy as giving it: go to Account → Privacy Settings, or email us at the grievance contact below, to withdraw marketing consent or request account deletion at any time, with no need to explain why.
• If we ever materially change what we do with your data, we'll ask existing users to re-consent rather than relying on the old consent.

3. How We Use Your Data

We use your data only for the purpose it was collected: processing and shipping orders, authenticating your account, responding to enquiries, sending order updates, and — only with separate opt-in consent — sending you marketing emails/WhatsApp messages about new drops and offers. We do not sell your personal data to third parties.

4. Who We Share Data With

We share limited data with the following categories of service providers ("Data Processors"), each bound by a data processing agreement:

• Payment gateways (e.g. Razorpay) — to process your payment
• Shipping & logistics partners — to deliver your order
• SMS/OTP gateway (TRAI/DLT-registered) — to send login and order OTPs
• Cloud hosting providers — to store account and order data securely
• Analytics tools — to understand site usage in aggregate (you can opt out; see our Cookie Policy)

We never share your data with third parties for their own marketing purposes without your explicit, separate consent.

5. Cross-Border Data Transfer

Some of our service providers store data on servers outside India. We only work with processors under a valid data processing agreement, and we do not transfer data to any country restricted by the Central Government under the DPDP Act. Details of our processors are available on request from our Grievance Officer.

6. How Long We Keep Your Data

We keep your data only as long as needed for the purpose it was collected — account data for as long as your account is active, order records as required under Indian tax/audit law, and marketing consent data until you withdraw consent. Inactive accounts and their data are periodically reviewed for deletion.

7. Your Rights

Under the DPDP Act, you have the right to:

• Access — request a summary of what personal data we hold about you, its purpose, and who we've shared it with.
• Correction — update incorrect or outdated personal data directly from your Account page, or by contacting us.
• Erasure — request deletion of your account and associated personal data via Account → Delete My Account, or by writing to us. We will action this within 30 days, except for data we're legally required to retain (e.g. GST/financial records).
• Grievance redressal — raise a complaint with our Grievance Officer (below) if you believe your data has been mishandled.
• Nominate — appoint a nominee to exercise these rights on your behalf in the event of your death or incapacity, by writing to our Grievance Officer.

We respond to all rights requests within 30 days.

8. Children's Data

Spiider sells kids' fashion, but our platform itself is intended to be used by adults (18+) — parents and guardians purchasing on behalf of children. We do not knowingly collect personal data directly from users under 18, do not run behavioural tracking or targeted advertising toward identified minors, and do not require children to create their own accounts. If we become aware that a user under 18 has created an account without guardian involvement, we will delete that account's data.

9. Cookies

We use cookies for site functionality, analytics, and (with your consent) personalised marketing. See our full Cookie Policy for details and how to manage your preferences.

10. Security

We use encryption, access controls, and secure hosting to protect your data, and we never store OTPs or full payment card numbers. In the unlikely event of a data breach affecting your personal data, we will notify you and the Data Protection Board as required by law.

11. Grievance Officer

In accordance with the DPDP Act, we've appointed a Grievance Officer to handle privacy-related requests and complaints:

Name: [GRIEVANCE OFFICER NAME] Email: onlyspiderind@gmail.com Phone: +91 90620 50449 Address: B. B. T. Road, Kolkata, India, 700141 Hours: Mon – Sat, 10am – 7pm IST

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified to you via email or an in-app notice, and where required, we will ask for fresh consent.

---

This policy is provided for informational purposes and reflects our current practices under the DPDP Act, 2023. It does not constitute legal advice. Rules under the Act are still being finalised by the Central Government and this policy will be updated accordingly.