1. Definitions

In this Privacy Policy:

• Personal Data means any information relating to an identified or identifiable natural person, including identifiers such as name, ID number, location data, or online identifier.
• Profiling means any form of automated processing of Personal Data to evaluate personal aspects, such as analysing or predicting preferences, interests, or behaviour.
• Consent means any freely given, specific, informed, and unambiguous indication of a Data Principal’s wishes by which they signify agreement to processing.
• Data Fiduciary or Controller means Qorsage Fashion, which determines the purposes and means of processing Personal Data.
• Data Principal or Data Subject means an individual whose Personal Data is processed by Qorsage Fashion.
• Processing means any operation performed on Personal Data, including collection, storage, alteration, retrieval, use, disclosure, or erasure.

2. Who We Are

Qorsage Fashion (“Qorsage,” “we,” “us,” or “our”) is a women’s apparel brand based in Faridabad, India. Our Data Controller is:

3. The Data We Gather

3.1 Personal Data You Provide

• Identity: Name, email, phone.
• Address: Shipping & billing.
• Payment: Securely tokenized details.
• Preferences: Order history, sizes, style choices.
• Community: Loyalty program info & product reviews.
• Choices: Marketing opt-ins (email, SMS, push).

3.2 Technical & Behavioral Data

• IP address, device type, browser, and OS.
• Site activity: pages visited, clicks, session duration, search terms.
• Error logs, crash reports, and performance metrics.
• Referral tags, promo codes, and ad campaign identifiers.

3.3 Fit & Size Recommendation Data

To help you choose the right fit, we may process:

• Your entered measurements or past purchase fit feedback.
• Aggregate sizing trends to improve recommendations.

3.4 Visual Recognition & Virtual Try-On

With your consent, we may use:

• Camera data for virtual try-on features.
• Image analysis to suggest matching styles or sizes.

3.5 Third-Party Connections

By using “Login with Google/Facebook/Instagram” or third-party payment (Stripe, PayPal), we receive basic profile, email, and transaction data.

3.6 Cookies & Tracking

• Essential: Keep cart and login active.
• Performance: Analytics (Google Analytics, Hotjar).
• Functional: Language, currency, display settings.
• Marketing: Remarketing pixels (Facebook Pixel, Google Ads).

You can manage cookies via your browser; disabling some may limit site features.

4. Legal Basis for Processing Personal Data

Under applicable laws, we rely on the following bases for processing:

• Consent: you have given clear consent for specific purposes.
• Contractual Necessity: processing is required to perform a contract with you.
• Legal Obligation: processing is necessary to comply with a legal requirement.
• Legitimate Interests: processing for our legitimate interests, unless overridden by your rights.
• India DPDP Act: processing based on consent or legitimate uses permitted by the Digital Personal Data Protection Act, 2023.

5. Why We Use Your Data

• Order Processing: Confirm purchases, manage shipping & returns.
• Personalization: Tailored product suggestions, flash-sale alerts.
• Loyalty & Rewards: Track points, exclusive offers.
• Customer Support: Power live chat, email responses, ticketing.
• Fraud Prevention: Verify transactions, secure accounts.
• Site Improvement: A/B testing, surveys, feature development.
• Advertising: Relevant ads on social platforms and partner sites.
• Sustainability Insights: Aggregate data on fabric usage, returns rates.

6. Who Sees Your Data

• Service Providers: Payment gateways, couriers, hosting & analytics partners.
• Advertising Networks: Facebook, Google for remarketing.
• Affiliates & Influencers: Under strict confidentiality.
• Mergers & Acquisitions: Data may transfer if Qorsage is acquired.
• Legal Requests: Law enforcement or regulatory mandates.
• You: Access, update, or delete via your account dashboard.

7. Returns, Exchanges & Data Use

• We retain order and return details for fraud prevention.
• Your feedback on fit and quality helps refine future recommendations.
• Records are stored securely for up to 7 years.

8. Influencer, Referral & Affiliate Programs

If you join our referral or affiliate program, we collect:

• Payment details for commissions.
• Referral link usage statistics.
• Performance metrics (clicks, conversions).

We share only aggregate reports; individual data remains confidential.

9. Customer Support & Live Chat

We may log:

• Conversation transcripts.
• Support ticket statuses.
• User satisfaction ratings.

10. Sustainability & Ethical Sourcing Data

• Your selections of “sustainable” product tags.
• Survey responses on ethical sourcing.
• Aggregate carbon-footprint reports (no PII).

11. Data Retention

• Orders & accounts: 7 years (tax & legal purposes).
• Usage & analytics: 12 months.
• Loyalty & consents: Until withdrawal + 24 months inactivity.
• Support tickets & chat logs: 5 years.
• Referral & affiliate records: 3 years after program end.

12. Your Privacy Rights

12.1 EU/EEA (GDPR)

• Access, correct, update, or delete your data.
• Restrict or object to processing.
• Receive data portability.
• Withdraw consent anytime.
• File a complaint with your Data Protection Authority.

12.2 California (CCPA/CPRA)

• Know what we collect, use, share, or sell.
• Request deletion of your personal data.
• Opt-out of sale of data.
• No discrimination for exercising rights.

12.3 India (DPDP Act)

• Right to access your personal data, its source, purpose, and recipients.
• Right to correct inaccurate or incomplete data.
• Right to erase data no longer necessary or upon consent withdrawal.
• Right to restrict processing in certain circumstances.
• Right to data portability in a machine-readable format.
• Right to object to processing for marketing or automated decision-making.
• Right to withdraw consent at any time.
• Right to grievance redressal with our team or via the Data Protection Board.
• Right to nominate someone to exercise rights on your behalf.

13. “Do Not Track” & Children’s Privacy

13.1 Do Not Track

We do not currently honor DNT signals. Use cookie controls as described above.

13.2 Children’s Privacy

We do not knowingly collect data from anyone under 13. If discovered, we delete it immediately.

14. International Transfers & Security

We implement technical and organisational measures—encryption, pseudonymization, access controls, and regular security audits—to safeguard your data.

15. Data Breach Notification

In the event of a breach, we will notify you and relevant authorities within 72 hours, detailing steps taken and recommended actions.

16. Supervisory Authority

If you wish to lodge a complaint, contact our Data Protection Officer at dpo@qorsage.com, or file with:

17. Updates to This Policy

We may update this policy as we add features or to comply with new laws. Major changes will be highlighted on our homepage and via email.

18. Contact Us

• Email: support@qorsage.com
• Address:
  Qorsage Fashion
  Entire Ground Floor, House No. 1396, Sector 37
  Faridabad, Haryana 121003, India