Last updated: June 2025
1. Information We Collect
We collect information you provide directly to us and information generated through your use of the Service:
- Account data: name, email address, phone number, and password (hashed).
- Order data: shipping address, order history, and payment method type (we do not store full card numbers).
- Usage data: device type, IP address, pages visited, and interactions within the app.
- Profile data: avatar photo and saved addresses.
2. How We Use Your Information
- To process and deliver your orders.
- To send order confirmations, OTP verification, and transactional emails.
- To personalize your shopping experience and show relevant products.
- To detect and prevent fraud or unauthorized access.
- To improve our Service through analytics.
3. Sharing of Information
We do not sell your personal data. We may share it only in the following circumstances:
- Service providers: trusted third parties (e.g., Cloudinary for image storage, MongoDB Atlas for database hosting) under strict confidentiality agreements.
- Legal obligations: when required by law or to protect our legal rights.
- Business transfers: in the event of a merger or acquisition, your data may be transferred to the new entity.
4. Data Security
We use industry-standard measures including HTTPS encryption, hashed passwords (bcrypt), JWT-based authentication, and rate limiting to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us. Order records may be retained for up to 7 years for legal and financial compliance.
6. Your Rights
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Opt out of marketing communications at any time.
7. Cookies
We use cookies and similar technologies to maintain your session and remember preferences. You can control cookies through your browser settings, though disabling them may affect Service functionality.
8. Children's Privacy
Our Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us immediately.
9. Data Deletion Policy
When you request deletion of your account, all personal data associated with your account — including your profile, addresses, and activity history — is permanently and completely deleted from our systems within 90 days of the request.
- To request deletion, contact us at privacy@dresslite.com or delete your account from the app settings.
- During the 90-day period, your account is deactivated and your data is no longer accessible or used.
- Certain data may be retained beyond 90 days only where required by law (e.g., financial transaction records for tax compliance).
- Anonymized or aggregated data that cannot identify you may be retained for analytics purposes.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice in the app.
11. Contact Us
For privacy-related inquiries or to exercise your rights, contact us at privacy@dresslite.com.