Your privacy,
our promise.

At Astooti, your privacy is not a legal formality — it is a core value. We are committed to being transparent about how we collect, use, and protect your personal information.

This Privacy Policy applies to all users of astooti.com, including visitors who browse without purchasing and customers who create accounts or place orders. By using our website, you consent to the practices described herein.

We collect only what we need, use it only for what we say, and never sell your data to anyone. If we change how we handle your data in any significant way, we will notify you via email or a prominent notice on our website.

This policy is governed by the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 of India.

Personal Identification Data: When you create an account or place an order, we collect your full name, email address, phone number, and delivery address. This information is required to process and deliver your order.

Payment Information: We do not store your card numbers, CVV, or banking credentials. All payment processing is handled by Razorpay, a PCI-DSS compliant payment gateway. We only retain a transaction reference ID for reconciliation purposes.

Browsing & Device Data: We automatically collect certain technical information when you visit our website, including your IP address, browser type, device type, pages visited, and session duration. This helps us improve your experience.

Communications: If you email us, submit a return request, or contact support, we retain those communications to provide context for future interactions and improve our service quality.

Preferences & Consent: We record your marketing preferences, including whether you have opted in to receive promotional emails, so we can honor your choices accurately.

Order Fulfillment: Your name, phone number, email, and delivery address are used exclusively to process, pack, and deliver your order, and to communicate about its status.

Customer Support: We use your contact details to respond to queries, resolve issues, process returns, and follow up on disputes. We retain these records for up to 3 years.

Marketing Communications: With your explicit consent, we may send you emails about new collections, limited-edition drops, and brand updates. You can opt out at any time. We will never send unsolicited commercial messages.

Website Improvement: Aggregated, anonymised browsing data helps us understand how visitors interact with our site, which pages perform well, and where we can improve the experience.

Legal Compliance: We may use or disclose your data to comply with applicable Indian laws, court orders, or government requests, or to protect the rights, property, or safety of Astooti and its customers.

Astooti does not sell, rent, or trade your personal information to any third party for commercial purposes. Ever.

We share data only with trusted service providers who are essential to our operations, and only to the extent necessary. These include: our payment partner Razorpay (for secure payment processing), logistics and courier partners (for order delivery), and our email service provider (for transactional and marketing emails).

All third-party partners are contractually required to maintain the confidentiality and security of your data and to use it only for the specific purpose for which it was shared.

We may disclose information if required to do so by law, regulation, or a valid government or court order. In such cases, we will notify you unless we are legally prohibited from doing so.

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. We will notify you before your data becomes subject to a different privacy policy.

We use cookies — small text files stored in your browser — to make your experience on Astooti.com smoother and more personalised. Cookies help us remember your cart, keep you signed in, and understand how the site is being used.

Essential Cookies: These are required for the website to function. They enable features like your shopping cart, account sessions, and secure checkout. These cannot be disabled.

Analytics Cookies: We use anonymised analytics to understand traffic patterns and user behaviour. This data is aggregated and never tied to individual identities.

Marketing Cookies: With your consent, we may use cookies to serve relevant content or retargeting ads. You can withdraw this consent at any time through your browser settings or by emailing us.

You can control or delete cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of parts of our website.

We implement industry-standard security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Our website uses HTTPS encryption for all data transmission.

Payment data is never stored on our servers. Razorpay's PCI-DSS Level 1 infrastructure handles all sensitive financial information.

Access to customer data within our team is strictly limited to individuals who need it to perform their role. All team members are bound by confidentiality obligations.

Despite our best efforts, no method of data transmission or storage is completely secure. If you believe your data has been compromised, please contact us immediately at support@astooti.com.

In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of it, as required by applicable law.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Indian law.

Order and transaction records are retained for a minimum of 7 years for tax and regulatory compliance purposes, as required under Indian accounting and GST regulations.

Customer support communications are retained for 3 years. Account data is retained for the duration of your account's existence and for 1 year after deletion.

Marketing consent records are retained for as long as you remain subscribed, plus 1 year. Anonymous analytics data may be retained indefinitely.

You may request deletion of your personal data at any time, subject to our legal obligations to retain certain records. See Section 09 for your rights.

The Astooti website is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@astooti.com and we will delete the information promptly.

By using our website and completing a purchase, you confirm that you are at least 18 years of age or that a parent or legal guardian has consented on your behalf.

You have the following rights with respect to your personal data held by Astooti. To exercise any of these rights, email us at support@astooti.com with your request.

Right to Access: You may request a copy of the personal information we hold about you at any time. We will provide this within 30 days.

Right to Correction: If any information we hold is inaccurate or incomplete, you have the right to request correction. You can also update most information directly through your account settings.

Right to Deletion: You may request that we delete your personal data. We will honor this request subject to our legal obligation to retain certain records (such as transaction data for tax purposes).

Right to Opt Out: You can unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by emailing us directly. Transactional emails related to your orders cannot be opted out of.

Right to Portability: You may request a copy of your data in a structured, machine-readable format. We will provide this within 30 days of a verified request.

If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact us at: support@astooti.com

In accordance with the Information Technology Act, 2000 and applicable rules, our designated Grievance Officer can be reached at the above email. We will acknowledge your complaint within 48 hours and resolve it within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in India.

Our registered address for legal correspondence is: Astooti, Jaipur, Rajasthan, India.