Asking us to act on your data

  1. You write to usOne line, saying what you want: a copy of your data, a correction, an erasure, or a consent withdrawn.
  2. We check it is youA short identity check, so that your data is never handed to somebody asking on your behalf.
  3. We act within 30 daysOr tell you why we cannot. GST law requires us to keep order and invoice records for eight years.
  4. Still not satisfiedOur Grievance Officer answers within 48 hours, and after that the Data Protection Board of India.

Your data, your call

Ask us what we hold.

A copy of it, a correction, an erasure, or a consent withdrawn — write and we will answer within 30 days. We will check who you are first, so that nobody can ask on your behalf without you.

Email your request All our contact details

Privacy policy

Privacy Policy

Last updated: 31 August 2026

This policy explains what personal information we collect when you visit or buy from sahasravastra.com, why we collect it, who we share it with, and the rights you have over it. We have written it in plain language because we would rather you actually read it.

1. Who we are

SAHASRA VASTRA is a sole proprietorship registered in Thiruvananthapuram, Kerala, India. We sell children's clothing online across India. In this policy "we" and "us" mean SAHASRA VASTRA.

Registered address: CRA 28 TC 76/1511, Opposite Sivaram Gardens, Madhumukku Kallummoodu, Anayara PO, Thiruvananthapuram, Kerala 695029, India
Email: info@sahasravastra.com
WhatsApp / Phone: +91 85476 29251
Udyam Registration: UDYAM-KL-12-0148356
GSTIN: 32CEAPC9058J1ZL

We are the Data Fiduciary for the personal data described in this policy, in the sense given to that term by the Digital Personal Data Protection Act, 2023.

2. What we collect — and what we deliberately do not

When you place an order we collect:

  • Your name, delivery address, email address and phone number.
  • Your order details — what you bought, the size, the amount paid, and the date.
  • Payment confirmation from our payment gateway. We never see or store your card number, UPI PIN, CVV or bank credentials. Those go directly to the gateway and never reach us.

When you browse the site we collect basic technical information — the pages you viewed, your approximate location from your IP address, your device and browser type. This is described in section 5.

If you contact us by email or WhatsApp, we keep that conversation so we can help you.

What we do not ask for. We sell clothes for children, but our customers are adults. We do not ask for a child's date of birth, name, school, daily routine, photographs or any other detail about a child, and we never require any of it to place an order. If you choose to tell us an age or a measurement to help pick a size, we use it for that order and nothing else.

Our store is not directed at children and accounts may only be opened by adults aged 18 or over. We do not knowingly collect personal data from a child, and we do not use anyone's data for behavioural advertising directed at children. If you believe a child has given us information, write to us and we will delete it.

3. Why we use your information

We use it only for these purposes:

  • To fulfil your order — to pack it, ship it, keep you updated and handle any claim afterwards.
  • To talk to you about your order — dispatch and delivery messages by email and WhatsApp, and replies to your questions.
  • To meet our legal duties — tax and GST record-keeping, and responding to a lawful request from an authority.
  • To run and improve the shop — understanding which pages and products people look at, so we stock better.
  • To send you marketing — only if you have separately and affirmatively agreed. The marketing box at checkout is unticked by default. We will never add you to a list because you bought something.

We do not sell your personal information to anybody, and we do not rent or trade our customer list.

4. Who we share it with

We share only what is necessary, only with the following, and only so that your order can happen:

  • Our courier partner — your name, delivery address and phone number, so the parcel can be delivered and the delivery agent can call you.
  • Our payment gateway — your payment is processed by them directly. They are regulated by the Reserve Bank of India and hold your payment details, not us.
  • Shopify, who host this store — see below.
  • Our accountant and tax authorities — order and invoice records, as the law requires.

We may also disclose information where we are required to by law, by a court, or by a government authority acting under lawful powers.

Data shared with Shopify. Our online store is hosted by Shopify Inc. Shopify processes your personal data as our service provider so that the store can operate, and also uses store data across its platform to provide and improve its own services, including product improvement, advertising measurement and personalisation. How Shopify collects, uses and discloses that data, and the rights you have in relation to Shopify, are set out in the Shopify Consumer Privacy Policy. You may contact Shopify directly to exercise those rights.

Some of these providers store or process data on servers outside India. Where that happens, we rely on the provider's own contractual and security commitments, and we share only what the service needs to do its job.

5. Cookies and tracking

A cookie is a small file a website stores on your device. We use two kinds:

  • Necessary cookies, without which the site does not work — keeping your cart, keeping you signed in, and security. These are always on.
  • Analytics and marketing cookies, which tell us how the shop is being used and let us measure advertising. These are optional.

Where we ask for your consent to the optional cookies, you may accept or decline, and you may change your mind at any time using the Cookie preferences link in the footer of every page. Withdrawing consent is as easy as giving it, and declining does not affect your ability to shop with us.

Most browsers also let you block or delete cookies in their own settings.

6. How long we keep it

  • Order, invoice and tax records: eight years from the end of the relevant financial year. We are required to keep these under GST law and we cannot delete them earlier, even on request.
  • Marketing consent records: for as long as you remain subscribed, and for a reasonable period afterwards so we can show that you consented and later withdrew.
  • Messages you send us: up to two years, so we have context if you come back to us.
  • Photographs you send us: as described in section 10.
  • Website analytics: in an aggregated form that does not identify you.

When a retention period ends we delete the data or anonymise it so it can no longer be linked to you.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

  • Ask what we hold about you and get a summary of it.
  • Ask us to correct anything inaccurate, incomplete or out of date.
  • Ask us to erase your data, where we are not required by law to keep it.
  • Withdraw consent you previously gave — for marketing, for cookies, or for a photograph — at any time.
  • Nominate another person to exercise these rights on your behalf if you are unable to.
  • Complain to our Grievance Officer, and afterwards to the Data Protection Board of India if you are not satisfied.

To exercise any of these, write to info@sahasravastra.com. We will respond within 30 days. We may ask you to confirm your identity first, so that we do not hand your data to someone else.

8. How we protect your information

This site runs over an encrypted HTTPS connection. Access to customer data is limited to the people who need it to pack and ship your order, and the store account is protected by two-step authentication. Payment details never reach our systems at all.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that affects your personal data, we will notify you and the Data Protection Board of India as the law requires.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made under it, the following officer handles privacy complaints:

Name: Gopika Chandralal
Email: info@sahasravastra.com
Phone: +91 85476 29251
Address: CRA 28 TC 76/1511, Opposite Sivaram Gardens, Madhumukku Kallummoodu, Anayara PO, Thiruvananthapuram, Kerala 695029, India

We acknowledge every complaint within 48 hours and aim to resolve it within 30 days.

10. Reviews and photographs you send us

You may choose to send us a written review, or a photograph of your child wearing something you bought from us. This is always optional. It is never a condition of any purchase, refund or claim, and declining changes nothing about how we treat you.

If you send us a photograph, you confirm that you are the parent or legal guardian of any child appearing in it, and that you agree to us publishing it on our website, our Instagram page or our Facebook page.

Where we publish it, we undertake that:

  • We show your first name only. We never publish a child's full name, age, school or location.
  • We remove location data from the image file before posting.
  • We do not use it in paid advertising unless we ask you separately and you agree.
  • You may ask us to take it down at any time, for any reason, and we will do so without asking why. We remove it from public view immediately and delete it from our systems within 30 days.

Please send us photographs only of a child you are the parent or guardian of.

11. Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects how we use your data, we will tell you directly.

12. Contact us

SAHASRA VASTRA
CRA 28 TC 76/1511, Opposite Sivaram Gardens, Madhumukku Kallummoodu, Anayara PO, Thiruvananthapuram, Kerala 695029, India
Email: info@sahasravastra.com
WhatsApp / Phone: +91 85476 29251
Udyam Registration: UDYAM-KL-12-0148356
GSTIN: 32CEAPC9058J1ZL