1. Our Commitment
Palm And Plush Pvt Ltd (“we”, “us”, “our”), registered at 309A, Tower A, SAS Tower, Sector 38, Gurgaon – 122001, Haryana, respects your right to privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights over it.
This policy is consistent with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and will be updated to comply with India’s Digital Personal Data Protection Act (DPDPA) as it comes into effect.
2. What We Collect
Information you give us
- Name, email address, phone number, and delivery address when you place an order or create an account.
- Payment information — processed directly by our payment gateway; we do not store card or UPI credentials.
- Messages or reviews you submit to us directly.
Information we collect automatically
- Browser type, device type, and IP address.
- Pages visited, time spent, and interactions via cookies and analytics tools (Shopify Analytics, Google Analytics).
3. How We Use Your Data
- To fulfil your orders — processing payment, arranging shipping, sending tracking updates.
- To communicate with you — order confirmations, customer support, and policy updates.
- To improve our products and site — understanding which pages perform, which products resonate.
- To send marketing communications — only if you have opted in. You can unsubscribe at any time.
- To comply with legal obligations — GST filings, audit requirements, and law enforcement requests where legally required.
4. Sharing Your Data
We do not sell your personal data. We share data only with logistics partners, payment gateways, platform providers (Shopify, Google Analytics), and legal authorities when required by law.
5. Cookies
We use cookies to keep your cart intact, remember your preferences, and understand site performance. You can manage cookie preferences through your browser settings.
6. Data Retention
We retain your order information for 7 years as required under Indian GST law. Account information is retained for as long as your account is active, or up to 3 years after your last interaction. To request deletion, write to info@palmandplush.com.
7. Your Rights
- Access the personal data we hold about you.
- Correct inaccurate information.
- Request deletion of your data (subject to legal retention requirements).
- Withdraw consent for marketing communications at any time.
Contact us at info@palmandplush.com. We will respond within 30 days.
8. Security
We implement SSL/TLS encryption, PCI-DSS compliant payment processing, and access controls limiting data to authorised personnel only.
9. Children’s Privacy
Our website is not directed at children under the age of 13. If you believe a child has submitted personal data to us, contact us and we will delete it promptly.
10. Policy Updates
Material updates will be communicated by email and noted on this page with a revised effective date.