Your Privacy Matters to Us

Section 01

Information We Collect

When you shop with Tiarra — online or in-store — we may collect the following types of information to process your orders and provide you with the best experience:

We only collect what is necessary and proportionate to the service we are providing.

Section 02

How We Use Your Data

Your information helps us deliver a seamless, personalised shopping experience. Specifically, we use your data to:

• Process and fulfil your orders, including delivery and returns
• Send order confirmations, shipping updates, and receipts via email or SMS
• Respond to customer service queries and complaints
• Personalise your shopping experience and product recommendations
• Send promotional emails and special offers (only if you have opted in)
• Improve our website, products, and services based on usage data
• Prevent fraud and ensure the security of your account
• Comply with legal obligations such as tax records and accounting

Section 03

Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share limited data only in the following circumstances:

• Delivery Partners: Your name and address are shared with our courier partners solely to fulfil your order.
• Payment Processors: Razorpay processes payments securely. We do not store your card details.
• Email Services: We use a third-party email service (Gmail SMTP) to send transactional emails.
• Legal Requirements: We may disclose data if required by law, court order, or government authority.
• Business Transfer: If Tiarra is acquired or merges, your data may be transferred as part of that transaction, subject to equivalent privacy protections.

All third-party service providers we work with are contractually required to handle your data securely and in accordance with applicable data protection laws.

Section 04

Data Protection

We take the security of your personal information seriously and implement a range of technical and organisational measures to protect it:

• All data is transmitted over HTTPS encrypted connections
• Passwords are hashed using industry-standard algorithms — never stored in plain text
• Payment transactions are processed through Razorpay's PCI-DSS compliant infrastructure
• Access to customer data is restricted to authorised team members only
• Our database is protected with secure credentials and access controls
• We regularly review and update our security practices

Section 05

Cookies Policy

We use cookies — small text files stored on your device — to enhance your experience on our website. Here is how we use them:

You can manage cookie settings in your browser at any time. Note that disabling certain cookies may affect website functionality.

Section 06

Payment Security

All online payments on the Tiarra website are processed through Razorpay, a leading payment gateway in India. Here's what you should know:

• Tiarra does not store, access, or log your full card number, CVV, or net banking credentials
• Razorpay is PCI-DSS Level 1 certified — the highest level of payment security
• All transactions are encrypted with 256-bit SSL encryption
• We support UPI, credit/debit cards, net banking, and wallets via Razorpay
• Cash on Delivery (COD) orders are also available for eligible pincodes

If you notice any suspicious or unauthorised transaction, contact Razorpay support and our team immediately.

Section 07

Your Rights

You have the following rights with respect to your personal data held by Tiarra:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Opt-Out: Unsubscribe from marketing communications at any time.
• Data Portability: Request your data in a structured, machine-readable format.
• Withdraw Consent: Where we rely on consent to process your data, you can withdraw it at any time.

To exercise any of these rights, please contact us at tiarra.co.in@gmail.com. We will respond within 30 days.

Section 08

Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy:

• Order and transaction data is retained for 7 years for tax and accounting compliance
• Account information is retained for the duration of your account and 2 years after closure
• Marketing preferences and opt-in records are retained until you opt out
• Website analytics data (anonymised) may be retained indefinitely
• Customer service correspondence is retained for 3 years

After the retention period, data is securely deleted or anonymised.

Section 09

Children's Privacy

Tiarra's website and services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age.

If you believe that a child has provided us with personal information, please contact us immediately at tiarra.co.in@gmail.com and we will promptly delete such information from our records.

Section 10

Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes:

• The "Last Updated" date at the top of this page will be revised
• We will notify registered users by email if the changes are material
• Your continued use of our website after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically. The current version will always be available at tiarra.co.in/privacy.

Section 11

Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please reach out to us: