1. Purpose and Scope
This Privacy Policy outlines how Swarna Shop Moda&Boutique (“Company”) collects, processes, stores, and protects personal information from users through its website, mobile applications, and other digital platforms. The purpose is to ensure user privacy, comply with international data protection standards, and maintain transparency in data handling practices.

2. Types of Personal and Technical Data Collected

• Identity and Contact Information: Full name, address, phone number, email.

• Financial Information: Payment data (credit/debit card), billing details.

• Purchase and Usage Data: Order history, product preferences, promotion and campaign participation.

• Technical Data: IP address, browser and device information, cookies, and usage analytics.

• Location Data: GPS or IP-based location, collected with user consent.

3. Purpose of Data Processing

• Processing orders, payments, and delivery logistics.

• Customer service, complaints, and return management.

• Marketing, promotions, and notifications (with user consent).

• Website and app analytics to improve user experience.

• Compliance with legal obligations and official requests.

4. Data Security and Retention

• Personal data is stored only for processing purposes and using industry-standard secure methods.

• Protection includes SSL encryption, firewalls, access restrictions, and regular audits.

• Employee access is strictly controlled; unauthorized access triggers disciplinary and legal action.

• Data is securely deleted after the retention period ends.

5. Cookies and Tracking Technologies

• Session Cookies: Manage sessions, remember preferences.

• Persistent Cookies: Analyze user behavior, optimize site performance, support advertising.

• Third-party Cookies: Analytics, advertising, and partners’ usage.

6. Data Sharing

• Shared only with third parties for order fulfillment, payment processing, or legal obligations.

• Example: Shipping companies receive only name, address, and phone for delivery purposes.

• No sharing occurs without explicit user consent.

7. User Rights

• Access, correct, or update personal data.

• Request deletion or object to processing.

• Data portability requests.

• Notification in the event of a data breach.

8. Data Breach and Notification Procedures

• Any breach is reported immediately to users and relevant authorities.

• Details of affected data, breach scope, and mitigation measures are provided.

• Example: If credit card information is compromised, users are contacted via email and phone, and the payment provider is notified to mitigate risks.