Effective Date: October 20, 2026
Last Updated: October 20, 2026

Welcome to Crimson & Root ("we," "our," or "us"). We operate the website https://www.crimsonandroot.com/ (the "Site"). We respect your privacy and are committed to protecting your personal data in accordance with applicable laws in India, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. INFORMATION WE COLLECT
When you visit our Site, register an account, or place an order, we may collect the following categories of information:
- Personal Identification Information: Your full name, email address, phone number, billing address, and shipping address provided during checkout, account registration, or newsletter sign-up.
- Payment & Transaction Data: Payment transactions are processed securely through authorized third-party payment gateways (supporting UPI, credit/debit cards, net banking, and digital wallets). We do not store your full card numbers, CVV, or UPI PINs on our servers.
- Account Details: Your login credentials, saved addresses, wishlists, and order history if you create a member account on https://www.crimsonandroot.com/.
- Technical & Usage Information: IP address, browser type, device model, operating system, session activity, and page interaction metrics collected automatically via cookies and analytics tools.

2. HOW WE COLLECT YOUR DATA
- Directly From You: When you purchase a product, sign up as a member, subscribe to marketing updates, or contact our support team.
- Automatically: Through cookies, session tokens, and web analytics technologies when you browse https://www.crimsonandroot.com/.

3. HOW WE USE YOUR INFORMATION
We use the information we collect to:
- Process, fulfill, ship, and deliver your orders.
- Manage your member account and provide customer support.
- Send transactional communications, including order confirmations, invoices, and real-time shipping updates.
- Send promotional offers and brand updates (only if you have opted in; you may unsubscribe at any time).
- Improve our website functionality, product offerings, and user experience.
- Prevent fraudulent transactions, unauthorized access, and security breaches.

4. PLATFORM HOSTING & DATA STORAGE
Our Site is hosted on the Wix Studio e-commerce platform. Your data may be stored through Wix's secure data storage, databases, and general applications on encrypted servers protected by advanced firewalls. All payment gateways integrated with our Site adhere to PCI-DSS security standards.

5. SHARING OF PERSONAL INFORMATION
We do not sell, rent, or trade your personal data. We share your information only with trusted third-party service providers strictly necessary to operate our business:
- E-Commerce & Hosting Infrastructure: Our website hosting and store management provider.
- Payment Processors: Authorized payment gateways to authenticate and complete your payments.
- Logistics & Courier Partners: Shipping carriers to deliver your orders to your designated address.
- Legal & Regulatory Authorities: When required by applicable law, court order, or governmental request to comply with legal obligations or protect our rights.

6. YOUR RIGHTS & CHOICES
Under applicable Indian data protection laws, you have the right to:
- Access and review the personal information we hold about you.
- Request correction or updating of inaccurate or incomplete personal data.
- Request deletion/erasure of your member account and personal data, subject to mandatory tax and legal record-keeping requirements.
- Withdraw consent for promotional communications or non-essential cookies at any time.

7. DATA RETENTION & SECURITY
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with tax, accounting, and statutory obligations. We use SSL/HTTPS encryption and industry-standard security protocols to safeguard your information.

8. GRIEVANCE REDRESSAL & CONTACT US
In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, if you have any questions, concerns, or grievances regarding your privacy or personal data, please contact our Grievance Support Team:

Brand Name: Crimson & Root
Website: https://www.crimsonandroot.com/
Email: crimsonandroot@gmail.com
Response Time: We acknowledge complaints within 48 hours and aim to resolve all grievances within 15 business days.