WeFrame

Legal

Privacy Policy

Last updated: April 2026

This Privacy Policy explains how WeFrame Studio (“WeFrame”, “we”, “us”) collects, uses, shares, and protects information about you when you use our website or place an order with us. It is written to comply with the Digital Personal Data Protection Act, 2023 of India and the IT Act, 2000 framework.

1. What we collect

We collect personal data that you give us directly and data we observe when you use the site.

  • Account data: your name, email address, phone number, and password (stored hashed).
  • Order data: shipping and billing addresses, order history, payment method tokens (we never store full card numbers).
  • Communication data: messages you send us via forms, WhatsApp, or email.
  • Technical data: IP address, browser type, device type, referring page, and approximate location, collected via server logs and (if you consent) Google Analytics.
  • Cookies & local storage: session cookies, cart contents, and your analytics consent choice.

2. Why we collect it

  • To create and manage your account.
  • To process, ship, and track your orders.
  • To respond to enquiries you send us.
  • To improve the website and understand which pages are useful.
  • To detect fraud, abuse, and security incidents.
  • To comply with legal obligations (tax, GST records, consumer-protection rules).

3. Your consent

Where required by law, we rely on your freely given consent to process your personal data — in particular for analytics and marketing. You can withdraw that consent at any time using the “Cookie Preferences” link in our footer or by writing to us. Withdrawing consent does not affect any processing already carried out lawfully before the withdrawal, nor does it affect processing we rely on to perform our contract with you (like fulfilling your order).

4. Who we share data with

We share the minimum data necessary with a small number of service providers:

  • Payment gateways (e.g. Razorpay) — to process transactions. They handle card details directly; we never see them.
  • Shipping and logistics partners — to deliver your order.
  • Infrastructure providers (e.g. our hosting, our database, our email provider) — contractually bound to protect your data.
  • Analytics providers (e.g. Google Analytics, if you consent) — with IP anonymisation enabled.
  • Authorities — only when legally required (court order, regulatory demand).

We do not sell your personal data to anyone.

5. How long we keep it

We retain personal data only for as long as needed for the purposes described above. Order records are retained for at least seven years to meet tax and accounting requirements. Marketing consent records are kept until you withdraw them. Logs are rotated after ninety days.

6. How we protect it

We use industry-standard security practices: encryption in transit (HTTPS), encryption at rest for database backups, hashed passwords, role-based access controls internally, and regular security reviews. No system is perfectly secure, but we take this seriously.

7. Your rights

Under the DPDP Act and related Indian law, you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to erase data we no longer need (subject to legal retention rules).
  • Withdraw consent for optional processing.
  • Nominate another person to exercise these rights on your behalf in the event of death or incapacity.
  • File a grievance with our Grievance Officer (below) or with the Data Protection Board of India.

To exercise these rights, email us at the address in the contact section.

8. Children

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us and we will delete it.

9. Changes to this policy

We may update this policy as our services evolve or laws change. Significant changes will be announced on this page and, where relevant, by email.

10. Contact & Grievance Officer

Grievance Officer: WeFrame Studio.
Email: hello@weframe.in
Response time: we aim to reply within seven working days.

Related: Terms & Conditions · Contact us