Privacy Policy

Souled Hub is an online store operated by Souled Hub, sole proprietor, based in New Delhi, India. We act as the Data Fiduciary under the DPDP Act, 2023, meaning we determine the purpose and means of processing your personal data.

Contact for privacy matters:
Email: souledhub@gmail.com
Address: New Delhi – 110001, India

We collect only the information necessary to process your orders and provide a good shopping experience. This includes:

a) Information you provide directly:

• Contact details — name, phone number, email address.
• Delivery information — shipping address, PIN code, city, state.
• Order details — products purchased, quantity, order value.
• Communication — messages you send us via email or the contact form.
• Marketing preferences — if you opt in to promotional emails.

b) Information collected automatically:

• Device and browser information — IP address, browser type, device type, operating system.
• Usage data — pages visited, time spent, referring website, clicks.
• Cookies — small data files stored on your device (see Section 6 below).

This automatic data is collected by Shopify (our e-commerce platform) as part of standard website functionality.

What we do NOT collect:

• Bank account numbers, card details, or UPI IDs (we currently accept only Cash on Delivery).
• Aadhaar, PAN, passport, or other government ID numbers.
• Sensitive personal information such as health, biometric, or financial data.

We use your personal data strictly for the following purposes:

• Order processing — to confirm, prepare, pack, and ship your orders.
• Delivery — to share your address and contact details with our courier partners.
• Customer support — to respond to your queries, complaints, or exchange requests.
• Order updates — to send you order confirmations, shipping notifications, and tracking information via email.
• Marketing communication — if you have opted in, to send you promotional emails about new products, offers, and updates. You can unsubscribe at any time.
• Fraud prevention — to detect and prevent fake orders, fraudulent activity, or misuse of our platform.
• Legal compliance — to meet legal, tax, or regulatory obligations.
• Website improvement — to understand how visitors use our site and improve their experience.

We do not use your personal data for automated decision-making or profiling that could significantly affect you.

Under the DPDP Act 2023, we process your personal data based on the following legal grounds:

• Your consent — when you place an order, sign up for our newsletter, or submit a form.
• Performance of a contract — to fulfill your order and deliver the products you purchased.
• Legitimate interests — such as fraud prevention, security, and improving our services.
• Legal obligation — to comply with applicable Indian laws and regulations.

You have the right to withdraw your consent at any time by contacting us at souledhub@gmail.com. Please note that withdrawing consent may affect our ability to process your orders or provide certain services.

We do not sell, rent, or trade your personal information to any third party. We share your data only with the following categories of trusted service providers, strictly for the purposes of fulfilling your order:

• Shopify — our e-commerce platform, which hosts our website, processes orders, and stores customer data securely. Shopify is compliant with global data protection standards. Learn more at shopify.com/legal/privacy.
• Courier and logistics partners — we share your name, phone number, and delivery address with our shipping partners to deliver your order.
• Legal authorities — if required by law, court order, or government request, we may disclose your data to comply with legal obligations.

We ensure that all third parties we work with follow reasonable security practices and process your data only for the specified purposes.

Our website uses cookies and similar technologies to improve your browsing experience and provide core website functionality.

Types of cookies we use:

• Essential cookies — required for the website to function (e.g., keeping items in your cart, remembering your session).
• Analytics cookies — set by Shopify to help us understand how visitors use our website (aggregated, anonymous data).
• Preference cookies — remember your preferences such as language or region.

Managing cookies: You can control or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of our website (for example, checkout may not work).

We do not currently use third-party advertising or marketing tracking cookies. If we introduce such tools in the future, this policy will be updated accordingly.

We take reasonable security measures to protect your personal data from unauthorized access, disclosure, alteration, or loss. These measures include:

• Hosting our website on Shopify, a globally trusted e-commerce platform with enterprise-grade security, including SSL/TLS encryption for all data in transit.
• Restricting access to your personal data to authorized personnel only, on a need-to-know basis.
• Regularly reviewing our data handling practices and Shopify's security updates.
• Ensuring courier partners we work with follow standard data protection practices.

While we take reasonable steps to secure your data, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach affecting your personal information, we will notify you and the Data Protection Board of India as required under the DPDP Act, 2023.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Order and transaction data — retained for a minimum of 7 years as required under Indian tax and accounting laws.
• Marketing data — retained until you unsubscribe or withdraw consent.
• Support and communication data — retained for up to 2 years for record-keeping.
• Website analytics data — retained by Shopify per their data retention policies.

Once the retention period ends or you request deletion (subject to legal obligations), your data will be securely deleted or anonymized.

Under the DPDP Act, 2023, you (referred to as a "Data Principal") have the following rights over your personal data:

• Right to Access — request a copy of the personal data we hold about you.
• Right to Correction — request that we correct any inaccurate or incomplete personal data.
• Right to Erasure — request deletion of your personal data, subject to legal retention requirements (e.g., tax records).
• Right to Withdraw Consent — withdraw your consent to processing at any time.
• Right to Grievance Redressal — raise a complaint about how we handle your data (see Section 12).
• Right to Nominate — nominate another individual to exercise these rights on your behalf in case of your death or incapacity.

To exercise any of these rights, email us at souledhub@gmail.com with your request and order/contact details. We will respond within 30 days of receiving a valid request.

Our website and products are intended for users aged 18 years and above. We do not knowingly collect personal information from children under 18.

If you are under 18, please do not use our website or provide personal information without the consent and supervision of a parent or legal guardian.

If we become aware that we have collected personal data from a child under 18 without verified parental consent, we will take steps to delete such information promptly. Parents or guardians who believe their child has provided us with personal data can contact us at souledhub@gmail.com for removal.

If you opt in, we may send you promotional emails about new products, offers, discounts, and updates from Souled Hub.

You have full control:

• Every marketing email includes an "unsubscribe" link at the bottom. Click it to stop receiving promotional emails.
• You can also email us at souledhub@gmail.com to opt out.
• Unsubscribing from marketing does not stop essential transactional emails (order confirmations, shipping updates, exchange responses).

We do not send promotional SMS or WhatsApp messages at this time.

If you have any concerns, complaints, or grievances regarding how we handle your personal data, please contact our Grievance Officer:

Email: souledhub@gmail.com
Address: New Delhi – 110001, India

We will acknowledge your complaint within 48 hours and resolve it within 30 days of receipt.

If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India, once established under the DPDP Act, 2023.

Our website may contain links to third-party websites, such as our social media pages (Instagram, Facebook) or partner services. This Privacy Policy applies only to Souled Hub. We are not responsible for the privacy practices or content of third-party websites.

We recommend reading the privacy policies of any third-party sites you visit through our links.

Our website is hosted on Shopify, which may store and process data on servers located outside India, including in Canada, the United States, and other jurisdictions where Shopify operates. By using our website, you consent to such international transfers.

We ensure that all such transfers comply with applicable Indian laws and that Shopify maintains globally recognized data protection standards. Learn more at shopify.com/legal/privacy.

We may update this Privacy Policy from time to time to reflect changes in our practices, new services, or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.

For significant changes, we may also notify you via email or a prominent notice on our website. We encourage you to review this policy periodically.

Your continued use of the website after any changes indicates your acceptance of the revised policy.

For any questions, requests, or concerns regarding this Privacy Policy or your personal data:

Email: souledhub@gmail.com
Business: Souled Hub
Address: New Delhi – 110001, India