Privacy policy

Privacy Policy — By the Block

Effective Date: [DD Month YYYY] Last Updated: [DD Month YYYY]

This Privacy Policy explains how By the Block ("we," "us," "our," or the "Data Fiduciary") collects, uses, stores, shares, and protects your personal data when you visit our website, shop with us, or interact with us on our social platforms. This policy is drafted in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian law.

By using our website, placing an order, or otherwise sharing your personal data with us, you agree to the terms of this policy.

1. Who We Are

By the Block is a hand block printing apparel and fabric label, operated by Vemulapati Sridhar Enterprises LLP, registered at [Registered Business Address], India.

For any questions about this policy or your personal data, you can reach us at:

Email: support@bytheblock.in

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us, or that is generated through your use of our website and services. This may include:

Identity data — name, phone number, email address
Order and delivery data — shipping address, billing address, order history
Payment data — processed through our third-party payment gateway; we do not store your full card or banking details
Account data — login credentials, if you create an account with us
Communication data — messages sent via email, Instagram, WhatsApp, or our contact forms
Technical data — IP address, browser type, device information, collected via cookies or similar technologies when you browse our website

We do not knowingly collect any personal data beyond what is necessary for the purposes listed below.

3. Why We Collect Your Data

We process your personal data for the following purposes:

To process and fulfil your orders, including shipping and returns
To communicate with you about your order, queries, or requests
To send updates, offers, or promotional content, where you have given consent
To improve our website, products, and customer experience
To comply with legal, tax, and regulatory obligations
To detect and prevent fraud or misuse of our services

We do not use your personal data for any purpose beyond what you have been informed of and consented to, in line with the purpose limitation principle under the DPDP Act.

4. Your Consent

Where we rely on your consent to process personal data, we will ask for it clearly and specifically, in plain language, before collection. You may:

Withdraw your consent at any time
Choose not to receive promotional communications, by unsubscribing or writing to us

Withdrawing consent will not affect the lawfulness of any processing carried out before the withdrawal, and may affect our ability to provide certain services to you (for example, order fulfilment).

Where required, we may also process data based on "legitimate uses" recognised under the DPDP Act, such as fulfilling a contract with you or complying with a legal obligation, without separately seeking consent.

5. How We Share Your Data

We do not sell your personal data. We may share it with:

Service providers who help us operate — payment gateways, courier and logistics partners, website hosting, and email or SMS service providers — solely to perform the services we've engaged them for
Legal and regulatory authorities, where required by law
Business transfers, in the event of a merger, acquisition, or sale of assets, subject to this policy continuing to apply

Any third party we share data with is required to handle it securely and only for the purpose specified.

6. Cross-Border Data Transfer

Some of our service providers (such as payment or hosting providers) may process data outside India. Where this happens, we ensure such transfers comply with the DPDP Act and any conditions notified by the Central Government from time to time.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable law (such as tax and accounting requirements). Once data is no longer needed, we take steps to securely delete or anonymise it.

8. Your Rights as a Data Principal

Under the DPDP Act, you have the right to:

Access a summary of the personal data we hold about you and how it's being processed
Correction and updating of inaccurate or incomplete personal data
Erasure of your personal data, where it is no longer necessary for the purpose it was collected
Grievance redressal, through our Grievance Officer (see Section 10)
Nominate another individual to exercise these rights on your behalf, in the event of death or incapacity

To exercise any of these rights, write to us at support@bytheblock.in. We will respond within the timeline prescribed under the DPDP Act.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure payment processing, restricted access to customer data, and regular review of our data handling practices.

In the event of a personal data breach, we will notify affected individuals and the Data Protection Board of India, as required under the DPDP Act.

10. Grievance Officer

If you have concerns about how your personal data is handled, you can reach our Grievance Officer at:

Email: support@bytheblock.in

We aim to acknowledge and resolve grievances within the timelines prescribed by law.
Please use the following format for the subject line - Grievance: [Short Description of Issue]

11. Children's Data

Our products and services are intended for individuals who are 18 years or older. We do not knowingly collect personal data from children. If you believe a child's data has been shared with us without appropriate parental or guardian consent, please contact us immediately so we can take corrective action.

12. Cookies

Our website may use cookies to improve browsing experience, remember preferences, and understand site usage. You can control or disable cookies through your browser settings. Disabling cookies may affect certain website features.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on our website with a revised "Last Updated" date. We encourage you to review this policy periodically.