MYDESIGNATION ONLINE CLOTHING PRIVATE LIMITED (“MYDESIGNATION”, “Company”, “we”, “our”, or “us”) is committed to protecting your personal data in accordance with:
-
The Information Technology Act, 2000
-
The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
-
The Digital Personal Data Protection Act, 2023
By accessing our website, Shopify store, mobile interfaces, or visiting our physical outlets, you agree to this Privacy Policy.
1. Role of the Company
Under the DPDP Act, MYDESIGNATION acts as a Data Fiduciary, meaning we determine the purpose and means of processing your personal data.
2. Personal Data We Collect
We collect only data necessary for lawful purposes.
A. Identity & Contact Data
-
-
Name
-
-
-
Email address
-
-
-
Mobile number
-
-
-
Billing and shipping address
-
B. Transaction Data
-
-
Order history
-
-
-
Payment transaction reference details
-
-
-
Refund information
-
C. Account Data
-
-
Username
-
-
-
Encrypted password
-
D. Technical Data
-
-
IP address
-
-
-
Browser type
-
-
-
Device information
-
-
-
Cookies and usage analytics
-
We do not intentionally collect data from children below 18 years of age.
3. Purpose of Processing (Lawful Use)
We process personal data only for:
-
Order fulfilment
-
Customer support
-
Account management
-
Collaboration processing
-
Fraud detection
-
Legal compliance
-
Marketing communications (with consent)
-
Improving user experience
Personal data will not be processed for purposes other than those stated above unless explicit consent is obtained from the user or where such processing is required under applicable law.
4. Consent (Core DPDP Requirement)
Consent under DPDP Act must be:
-
Free
-
Specific
-
Informed
-
Unconditional
-
Unambiguous
-
Given through clear affirmative action
By clicking “I Agree”, placing an order, or creating an account, you provide consent for processing your data for specified purposes.
You have the right to:
-
Withdraw consent at any time
-
Request correction
-
Request erasure
-
Access information about processing
To exercise these rights, contact: care@mydesignation.com
Withdrawal of consent will not affect lawful processing done prior to withdrawal.
5. Data Principal Rights (DPDP Compliance)
Under the DPDP Act, you have the right to:
1.Right to Access Information
-
-
Summary of data processed
-
-
-
Processing activities
-
-
-
Identities of data processors
-
2.Right to Correction and Erasure
Users have the right to request correction of inaccurate or incomplete personal data or request deletion of their personal data maintained by the Company.
Process to exercise this right:
-
-
Submit a Request:
Users may submit a request by emailing the designated grievance/support email mentioned on the website.
-
-
-
Provide Required Details:
The request should include the user’s name, registered contact details, and a clear description of the data that needs to be corrected or erased.
-
-
-
Verification:
The Company may verify the identity of the requester before processing the request.
-
-
-
Processing:
Upon verification, the Company will review the request and take appropriate action to correct or delete the data, where applicable.
-
-
-
Timeline:
The Company will respond to such requests within 15 working days of receiving the request.
-
-
-
Exceptions:
Certain information may be retained where required under applicable laws or for legitimate business purposes.
-
3.Right to Grievance Redressal
Users have the right to raise grievances regarding the collection, use, or processing of their personal data.
Grievance Redressal Process:
-
Filing a Complaint:
Users may submit their grievance through the contact form on the website or by emailing the designated grievance officer.
-
Complaint Details:
The complaint should include the user’s name, contact information, and a brief description of the issue.
-
Acknowledgement:
The Company will acknowledge the complaint within 3–5 working days.
-
Review and Resolution:
The grievance will be reviewed internally and appropriate action will be taken.
-
Resolution Timeline:
The Company will aim to resolve the grievance within 15 working days from the date of receipt.
4.Right to Nominate
You may nominate another individual to exercise your rights in case of death or incapacity.
Requests will be addressed within prescribed timelines.
6. Children’s Data
We do not knowingly process personal data of children (below 18 years).
If discovered, such data will be deleted promptly.
No behavioural tracking or targeted advertising is conducted for minors.
7. Data Security Safeguards
We implement reasonable technical and organisational safeguards including:
-
SSL encryption
-
Secure payment gateway integration
-
Access control mechanisms
-
Vendor confidentiality agreements
-
Periodic security audits
In the event of a data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act.
8. Data Retention
We retain data only as long as necessary for:
-
Fulfilling orders
-
Legal compliance (tax, audit, accounting)
-
Dispute resolution
When data is no longer required, it is securely deleted or anonymised.
9. Disclosure of Data to Third Parties
In order to provide our services effectively, we may share limited personal data with trusted third-party service providers including:
-
Payment gateway providers for processing transactions
-
Logistics and delivery partners for order fulfilment
-
Cloud hosting providers (including Shopify infrastructure)
-
IT service providers supporting our website and systems
-
Auditors, legal advisors, and regulatory authorities where required by law
Such sharing will take place only with the explicit consent of the user or where it is necessary for the performance of a contract or compliance with legal obligations.
All third parties with whom personal data is shared are contractually obligated to maintain strict confidentiality, implement appropriate security measures, and process personal data only for the specified purpose in accordance with applicable data protection laws.
10. Cross-Border Data Transfers
Personal data may be processed outside India through cloud service providers or Shopify infrastructure.
Such transfers shall comply with restrictions notified by the Government of India under the DPDP Act.
11. Non-Personal Identifiable Information
We may also collect aggregated information regarding the use of our service, such
as the extent to which certain features are used. Aggregated information is
anonymous, statistical information that reflects the scope of our user base,
sales, and customer patterns from both online and physical outlet usage. We
use this information to better understand how MYDESIGNATION service is used,
and to improve the online experience of our users. This information is not used in a
way that will personally identify you. In addition, certain non-personally identifiable
information is collected by MYDESIGNATION and may be used by any third-party
advertising providers during the course of your use of MYDESIGNATION service
12.Cookies & Shared Objects
We may also use cookies and/or shared objects to track and understand the traffic
on our website. Cookies are alphanumeric identifiers that our website places onto
your computer’s hard drive. Cookies identify your computer so that we can recognize you the next time you visit us. We may use cookies and/or shared objects to collect and store some information about you, such as the name of the domain and host from which you access the Internet, the Internet Protocol (IP) address of the computer you are using, the date and time you access our website and the Internet address of the website from which you linked directly to our website. We use this information to better understand our users and customize our site for users’ particular preferences.
13.Deletion of E-commerce Transaction Data
For users who have made purchases through our Shopify website or at our physical outlets, certain transactional data may be retained for accounting and legal compliance purposes. However, any unnecessary personal information will be securely deleted upon request.
14. Confirmation of Data Deletion
Upon successful deletion of user data, MYDESIGNATION will provide confirmation to the user via email or another agreed-upon communication method.
15.Data Backup and Deletion
We regularly backup our website data for security and disaster recovery purposes. While deleted user data is removed from active systems, it may be retained in backup archives for a limited period. These backups are securely stored and will be overwritten or deleted in due course.
16. Grievance Officer
In compliance with applicable law:
Name: Anisha V S
Designation: General Manager
Email: care@mydesignation.com
Address: MYDESIGNATION, TC 94/3210(57),The Legend, Pallimukku, Pettah PO, Thiruvananthapuram-695024
Complaints will be acknowledged within 36 hours and resolved within one month.
17. Changes to this Policy
MYDESIGNATION reserves the right to update or modify this User Data Deletion section of the privacy policy at any time. Users will be notified of any changes through the website or other communication channels.
For any inquiries or concerns regarding data deletion, please contact our team at care@mydesignation.com.

