Privacy policy
Havva Fashion Operated by Havva Lifestyle Private Limited
Last Updated: July 10, 2026 Effective Date: July 10, 2026
1.INTRODUCTION
This Privacy Policy ("Policy") describes how Havva Lifestyle Private Limited, operating under the brand name "Havva Fashion" (referred to herein as the "Company", "Havva Fashion", "we", "us", or "our"), collects, uses, stores, discloses, and otherwise processes personal information of individuals who visit, browse, register on, or transact through our website havvalifestyle.com, including any mobile-optimized or app versions thereof (collectively, the "Site"), or who otherwise interact with our products, services, marketing communications, or customer support channels (collectively, the "Services").
For the purposes of this Policy, "you" and "your" refer to any individual who accesses or uses the Services, including but not limited to visitors, registered users, and customers, whether such use results in a completed purchase or not.
This Policy is published in accordance with, and is subject to, the provisions of:
The Information TechnologyAct, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");
The Digital Personal Data Protection Act, 2023 ("DPDP Act"), to the extent it is brought into force and applicable;
The Consumer Protection Act, 2019 and the Consumer Protection (E-Commerce) Rules, 2020; and
Such other applicable data protection and privacy legislation as may apply to your use of the Services, including, where relevant, the General Data Protection Regulation ("GDPR") for users located in the European Economic Area and the United Kingdom, and applicable state privacy laws for users located in the United States.
PLEASE READ THIS POLICY CAREFULLY. By accessing, browsing, registering on, or otherwise using the Site or the Services, or by providing your personal information to us through any means, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy and consent to the collection, use, storage, disclosure, and processing of your personal information as described herein. If you do not agree with any provision of this Policy, you must immediately discontinue use of the Site and the Services and refrain from providing us with any personal information.
Where consent forms the basis of processing under applicable law, you may withdraw such consent at any time in the manner described in Section 12 below, subject to the effects of such withdrawal as outlined therein.
2. CHANGES TO THIS POLICY
We may revise and update this Policy from time to time, at our sole discretion, to reflect changes in our data practices, technology, legal or regulatory requirements, or for other operational reasons. Any changes will be posted on this page with a revised "Last Updated" date. Where required by applicable law, we will provide additional notice of material changes, which may include email notification or a prominent notice on the Site.
Your continued use of the Services following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.
3. PERSONAL INFORMATION WE COLLECT
The categories of personal information we collect depend on the nature of your interaction with the Site and the Services. We collect information in the following ways:
3.1 Information You Provide Directly to Us
Identity and Contact Information: Full name, gender, date of birth (where voluntarily provided), postal/billing/shipping address, email address, and mobile/telephone number.
Account Information: Username, password, account preferences, security questions, and any other information you provide when creating an account on the Site. Order and Transaction Information: Products viewed, added to cart, wishlisted, or purchased; order history; billing and shipping details; payment confirmation and transaction identifiers (please note that full payment card details are collected and processed directly by our third-party payment gateway providers and are not stored on our servers, as detailed in Section 3.4 below).
Communications: Information you provide when contacting our customer support team, submitting queries, feedback, complaints, or grievances, whether via email, telephone, WhatsApp, live chat, social media, or any other channel.
User-Generated Content: Product reviews, ratings, testimonials, photographs, comments, or other content you voluntarily submit or post on the Site or on our social media pages.
Marketing Preferences: Information you provide when subscribing to our newsletter, participating in promotional campaigns, contests, giveaways, or surveys.
3.2 Information We Collect Automatically
When you access or use the Site, we and our authorized service providers automatically collect certain technical and usage information ("Usage Data"), including but not limited to:
Device information (device type, operating system, unique device identifiers); Browser type and version;
IP address and approximate geographic location derived therefrom;
Referring/exit pages and URLs;
Pages viewed, time spent on pages, click-stream data, and navigation paths; Date and time stamps of visits;
Information collected through Cookies and similar tracking technologies, as further described in Section 5 below.
3.3 Information We Receive from Third Parties
We may receive personal information about you from third-party sources, including:
Shopify Inc., our e-commerce platform provider, which hosts the Site and processes certain information on our behalf;
Payment gateway and processing partners (such as Razorpay, PayU, Cashfree, or similar providers as may be engaged from time to time), who share limited transaction confirmation data with us to enable order fulfilment;
Logistics and courier partners, who provide delivery status and tracking information;
Marketing and analytics partners, including Meta Platforms, Inc.
(Facebook/Instagram) and Google LLC, in connection with advertising, analytics, and audience measurement services;
Social media platforms, where you choose to interact with us or log in via a social media account.
We are not responsible for the accuracy or completeness of information received from third parties and are not liable for the privacy practices of such third parties, which are governed by their own respective privacy policies.
3.4 Payment Information
All online payment transactions on the Site are processed through secure, PCI-DSS compliant third-party payment gateways. We do not collect, store, or have access to your complete credit card, debit card, net banking, or UPI credentials. Such information is collected and processed directly by our payment partners in accordance with their own privacy and security policies, and your provision of such information to them is governed by their respective terms.
3.5 Sensitive Personal Data or Information
In the ordinary course of providing the Services, we do not intentionally collect "sensitive personal data or information" as defined under the SPDI Rules (such as financial information beyond transaction confirmation, health data, biometric data, or sexual orientation). Should any such information be voluntarily shared by you (for example, in the context of a customer service communication), it will be processed solely for the purpose for which it was shared and in accordance with applicable law.
4. HOW WE USE YOUR PERSONAL INFORMATION
We use the personal information we collect for the following purposes, each grounded in a lawful basis such as contractual necessity, legitimate business interest, legal obligation, or your consent, as applicable:
1. To Provide and Fulfil the Services: Processing and fulfilling orders, arranging shipping and delivery, processing payments and refunds, managing returns and exchanges, creating and maintaining your account, and enabling product reviews.
2. Customer Support: Responding to your queries, complaints, and grievances, and providing after-sales support.
3. Marketing and Promotional Communications: Sending you newsletters, promotional offers, product updates, and marketing communications via email, SMS, WhatsApp, or push notification, where you have opted in or where otherwise permitted by applicable law. You may opt out of such communications at any time as described in Section 12.
4. Personalization and Advertising: Tailoring product recommendations, website content, and advertisements (including retargeted advertisements on third-party platforms such as Meta/Instagram and Google) based on your browsing and purchase behaviour.
5. Analytics and Site Improvement: Analysing usage patterns and trends to improve the functionality, content, and user experience of the Site.
6. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal or malicious activity, and protecting the security and integrity of the Site and our systems.
7. Legal Compliance: Complying with applicable laws, regulations, court orders, or governmental requests, including tax, accounting, and consumer protection obligations, and to establish, exercise, or defend legal claims.
8. Business Operations: Internal record-keeping, audits, and business analytics.
We will not use your personal information for any purpose materially different from those disclosed in this Policy without obtaining your consent, where required by applicable law.
5. COOKIES AND TRACKING TECHNOLOGIES
The Site uses Cookies, web beacons, pixels, and similar tracking technologies ("Cookies") to operate and improve the Site and to support our marketing and analytics efforts.
5.1 Categories of Cookies We Use
Strictly Necessary Cookies: Required for core Site functionality, such as maintaining your shopping cart and enabling secure checkout.
Performance and Analytics Cookies: Used to understand how visitors interact with the Site (e.g., Google Analytics).
Functional Cookies: Used to remember your preferences, such as language or currency selection.
Advertising and Targeting Cookies: Used by us and third parties, including Meta Platforms, Inc. and Google LLC, to deliver advertisements relevant to your interests on and off the Site, and to measure the effectiveness of our advertising campaigns.
Since the Site is powered by Shopify, certain cookies are set by Shopify to enable core e commerce functionality. For further information on Shopify's use of cookies, please refer to Shopify's own cookie policy at shopify.com/legal/cookies.
5.2 Managing Cookies
Most web browsers are set to accept Cookies by default. You may modify your browser settings to decline or delete Cookies; however, doing so may impair certain features and functionality of the Site, including your ability to complete a purchase. Where required by applicable law, we will present a cookie consent banner allowing you to manage your cookie preferences.
6. HOW WE DISCLOSE YOUR PERSONAL INFORMATION
We do not sell your personal information for monetary consideration. We may, however, disclose your personal information to the following categories of recipients for the purposes described in this Policy:
Service Providers and Vendors: Including our e-commerce platform (Shopify), payment gateway providers, logistics and courier partners, IT and hosting service providers, customer support tool providers, email/SMS marketing platforms, and data analytics providers, each of whom is contractually or otherwise obligated to handle your information in accordance with applicable law and for the limited purpose of providing services to us.
Marketing and Advertising Partners: Including Meta Platforms, Inc. and Google LLC, for the purposes of advertising, retargeting, and campaign performance measurement, in accordance with their respective privacy policies.
Professional Advisors: Including legal, accounting, and financial advisors, where necessary for the conduct of our business.
Regulatory and Law Enforcement Authorities: Where disclosure is required to comply with applicable law, legal process, subpoena, or governmental request, or to protect the rights, property, or safety of Havva Fashion, our customers, or the public. Business Transferees: In connection with any merger, acquisition, restructuring, sale of assets, or bankruptcy involving Havva Lifestyle Private Limited, in which case personal information may be disclosed to, or transferred to, the relevant third party as part of such transaction, subject to appropriate confidentiality arrangements. With Your Consent: Where you have directed or consented to the disclosure of your personal information to a specified third party.
7. DATA STORAGE, SECURITY, AND RETENTION
7.1 Security Measures
We implement reasonable and appropriate technical, administrative, and physical security measures, consistent with the standards prescribed under the SPDI Rules and applicable law, to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, without limitation, the use of secure servers, encryption during data transmission (SSL/TLS), restricted access controls, and reliance on PCI-DSS compliant payment processing partners.
Notwithstanding the foregoing, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security of your personal information. Any transmission of personal information to us is undertaken at your own risk.
7.2 Data Retention
We retain your personal information for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, tax, or reporting requirements, resolving disputes, and enforcing our agreements. In determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the purposes for which it is processed, and applicable statutory retention periods (including those under Indian tax and consumer protection law). Where personal information is no longer required, we will securely delete, anonymize, or aggregate it.
7.3 Data Storage Location
Your personal information may be stored and processed on servers located in India and/or in other jurisdictions where our service providers (including Shopify Inc. and its sub-
processors) maintain infrastructure, including the United States and other countries. Where your personal information is transferred outside India, we take reasonable steps to ensure that such information continues to be protected in accordance with this Policy and applicable law, including, where applicable, through the use of standard contractual clauses or equivalent safeguards.
8. THIRD-PARTY LINKS AND SERVICES
The Site may, from time to time, contain links to third-party websites, plugins, applications, or services that are not operated or controlled by us. This Policy does not apply to such third-party websites or services, and we are not responsible for their content, privacy practices, or security. We encourage you to review the privacy policies of any third-party website or service before providing any personal information to them.
9. USER-GENERATED CONTENT
If you submit product reviews, ratings, comments, photographs, or other content to publicly accessible areas of the Site or our social media pages, such content will be visible to other users and the general public. We are not responsible for the manner in which third parties may use, collect, or disclose information that you voluntarily make publicly available. Please exercise discretion when submitting user-generated content.
10. CHILDREN'S PRIVACY
The Services are intended for use by individuals who are eighteen (18) years of age or older, or who are otherwise competent to contract under the Indian Contract Act, 1872. We do not knowingly collect, solicit, or process personal information from children. If we become aware that we have inadvertently collected personal information from a child without appropriate parental or guardian consent, we will take reasonable steps to delete such information promptly. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us using the details in Section 14 to request deletion of such information.
11. THIRD-PARTYADVERTISING AND ANALYTICS DISCLOSURES
We use Meta Pixel, Google Analytics, and similar tools to serve targeted advertisements and measure campaign performance across our Meta (Facebook/Instagram) and Google advertising accounts. These tools may collect information about your visits to the Site and other websites in order to provide advertisements about goods and services that may be of interest to you.
You may opt out of interest-based advertising by:
Adjusting your ad preferences directly within your Meta (Facebook/Instagram) account settings;
Adjusting your ad personalization settings within your Google account; Using industry opt-out tools such as the Digital Advertising Alliance's opt-out page (optout.aboutads.info) or the Network Advertising Initiative's opt-out page (optout.networkadvertising.org), where available in your jurisdiction.
12. YOUR RIGHTS AND CHOICES
Subject to applicable law, you may have some or all of the following rights in relation to your personal information:
Right to Access/Know: To request confirmation of whether we process your personal information and to obtain access to such information.
Right to Correction: To request correction of inaccurate, incomplete, or outdated personal information.
Right to Erasure/Deletion: To request deletion of your personal information, subject to any legal or contractual retention obligations.
Right to Withdraw Consent: Where processing is based on your consent, to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
Right to Grievance Redressal: To raise a grievance regarding the processing of your personal information with our Grievance Officer, as detailed in Section 14. Right to Data Portability: Where applicable, to receive a copy of your personal information in a structured, commonly used format.
Right to Restrict or Object to Processing: Where applicable, to request that we restrict or cease certain processing activities, including direct marketing. Right to Opt Out of Marketing Communications: You may unsubscribe from our promotional emails at any time by using the "unsubscribe" link included in such communications, or from promotional SMS/WhatsApp messages by replying "STOP" or through your account preferences. Please note that you may continue to receive non-promotional, transactional communications relating to your orders and account even after opting out of marketing communications.
To exercise any of these rights, please contact us using the details provided in Section 14. We may require you to verify your identity before processing your request and will respond within the timeframe prescribed by applicable law. We will not discriminate against you for exercising any of these rights.
13. GRIEVANCE REDRESSAL
In accordance with the Information TechnologyAct, 2000, the rules made thereunder, and the Consumer Protection (E-Commerce) Rules, 2020, any complaints or grievances relating
to the processing of your personal information or your use of the Services may be addressed to us using the contact details provided in Section 14 below, and are also set out in our separate Contact Us / Grievance Redressal Policy.
Complaints will be acknowledged within the timeframe prescribed under applicable law and resolved as expeditiously as possible.
14. CONTACT US
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise any of the rights described above, please contact us at:
Havva Lifestyle Private Limited (Operating as Havva Fashion)
Registered/Business Address: A-Wing, Next to Patel Vanika, W.E. Highway, L026 Express Zone Mall, Goregaon East, Mumbai - 400063, Maharashtra, India
Email: info@havvafashion.com Phone: +91 9769750137
15. GOVERNING LAWAND JURISDICTION
This Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts at Mumbai, Maharashtra, India.
This Privacy Policy should be read in conjunction with our Terms of Service and Shipping and Exchange Policy, each of which is available on our Site.
- Choosing a selection results in a full page refresh.