Privacy policy

COOFANDY PRIVACY POLICY

Effective date: 14 August 2026

This Privacy Policy explains how personal data is collected, used, disclosed, retained and protected when a person visits, communicates with, or makes a purchase through https://www.coofandy.in/ (“Website”).

Coofandy is a brand owned and operated by DG CREATION, a sole proprietorship registered in India. In this Policy, “Coofandy”, “DG CREATION”, “we”, “us” and “our” refer to DG CREATION.

Business and data-contact details

Registered name: DG CREATION
GSTIN: 24DCFPG8612E1ZX
Registered/business address: DG Creation, Shop No. 358, Raghuvir Scarlett, DMD Textile Market Road, Shakti Nagar, Surat, Gujarat – 395010, India
Email: coofandyfashion@gmail.com
Phone and WhatsApp: +91 74900 06066
Support hours: 10:00 AM to 6:00 PM IST

1. Personal data we collect

Depending on how a person interacts with us, we may collect:

• Identity and contact data, such as name, billing and shipping address, email address and phone number;
• Order and transaction data, such as products ordered, order value, payment status, delivery status, returns, refunds and communications about an order;
• Payment-related data, such as payment method, transaction reference and limited payment status information. Full card, banking or UPI credentials are generally collected and processed directly by authorised payment providers and are not stored by us;
• Account data, if an account is created, and information required for guest checkout;
• Device and technical data, such as IP address, browser type, device identifiers, operating system, cookie identifiers, referral source and Website activity;
• Marketing data, such as communication preferences, advertisement interactions and campaign attribution information;
• Customer-service data, including emails, WhatsApp messages, calls, reviews, return evidence, photographs, unboxing videos and complaint information; and
• Any other information voluntarily provided to us.

2. How we collect personal data

We may collect personal data:

• Directly from the customer when an order is placed, a form is submitted, support is contacted or marketing consent is given;
• Automatically through cookies, pixels, analytics technologies and server logs;
• From Shopify, FastRR, Shiprocket, Razorpay, courier partners and other providers involved in operating the Website and fulfilling transactions; and
• From advertising and analytics services such as Meta and Google, in accordance with the customer’s choices and those providers’ policies.

3. How we use personal data

We may use personal data to:

• Operate, maintain and improve the Website;
• Process payments and verify, fulfil, deliver, cancel, return or refund orders;
• Communicate order confirmation, tracking, delivery, support and service messages;
• Detect and prevent fraud, misuse, security incidents and unlawful activity;
• Maintain business, tax, accounting and transaction records;
• Provide customer support and handle complaints or legal claims;
• Personalise content, measure Website performance and understand customer behaviour;
• Send promotional WhatsApp messages, SMS and emails where permitted and in accordance with customer preferences;
• Measure and improve advertising through Meta Pixel, Google Analytics, Google Ads and similar tools;
• Enforce our policies and Terms of Service; and
• Comply with legal, regulatory, tax, law-enforcement and court requirements.

We process personal data only for lawful purposes and, where consent is the basis, in accordance with the consent provided. A customer may withdraw consent for optional processing, but withdrawal will not affect processing already lawfully completed or processing required to fulfil an existing order or comply with law.

4. Guest checkout and customer accounts

Guest checkout is available. A customer may also create or use an account where that feature is offered. Customers are responsible for keeping account credentials confidential and for informing us promptly of suspected unauthorised use.

5. Cookies, analytics and advertising

The Website and its service providers may use necessary, preference, analytics and advertising cookies or similar technologies. These tools may remember selections, keep the cart functioning, prevent fraud, measure traffic and display or measure relevant advertising.

Browser settings may allow cookies to be blocked or deleted. Blocking necessary cookies may prevent parts of the Website or checkout from functioning correctly. Where required, optional cookies or similar technologies will be used according to the consent choices presented to the user.

6. How we share personal data

We may disclose personal data to service providers only as reasonably necessary for the purposes described in this Policy, including:

• Shopify, which hosts and supports the online store;
• FastRR and Shiprocket, which support checkout, order processing, shipping, tracking and delivery;
• Razorpay and other authorised financial institutions or payment processors used to process or refund payments;
• Courier, logistics and warehousing partners;
• WhatsApp, SMS, email and customer-support providers;
• Meta, Google and analytics or advertising partners;
• Professional advisers, insurers, auditors and technology or security providers; and
• Government, regulatory, court, law-enforcement or tax authorities where disclosure is required or permitted by law.

We do not sell personal data for money. Advertising and analytics providers may process identifiers and activity data according to the customer’s consent choices and their own privacy policies.

7. Payment security

Online payments are processed through Razorpay or another payment option displayed at checkout. Payment providers process payment credentials under their own terms and privacy practices. DG CREATION generally receives payment confirmation, status and transaction references rather than full card, bank-account or UPI credentials.

Customers should never send card PINs, CVVs, UPI PINs, passwords or one-time passwords to DG CREATION through email, phone or WhatsApp.

8. Marketing communications and opt-out

Where permitted, we may send promotional messages through WhatsApp, SMS or email. A customer may request to stop optional promotional communications at any time by emailing coofandyfashion@gmail.com from the relevant email address or by identifying the relevant phone number.

Where an unsubscribe link is provided, it may also be used. Opting out of promotional messages will not stop essential messages about active orders, payments, delivery, security or customer-service requests.

9. Data retention

We generally retain customer, order and related transaction information for up to 5 years from the relevant transaction or last meaningful interaction. We may keep specific information longer where necessary for tax, accounting, fraud prevention, dispute resolution, legal claims or another legal obligation.

Personal data that is no longer required for a lawful purpose will be deleted, anonymised or securely disposed of, subject to technical and legal limitations.

10. Data security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no internet transmission or storage system is completely secure, and absolute security cannot be guaranteed.

If a personal-data breach occurs, we will take steps required under applicable law, including notifications where legally required.

11. Children and parental responsibility

The Website is not intentionally directed to children for independent purchasing. A person under 18 years of age may use the Website or place an order only under the supervision of, and with consent from, a parent or lawful guardian. The parent or guardian is responsible for the minor’s use and order.

Where applicable law requires verifiable parental consent before processing a child’s personal data, the parent or guardian should place the order or provide the required consent. If we learn that a child’s personal data was provided without appropriate consent, we may delete or restrict it as required by law.

12. Customer rights

Subject to applicable law and permitted exceptions, a customer may request:

• Information about the personal data processed and a summary of processing;
• Access to available personal data;
• Correction, completion or updating of inaccurate or incomplete personal data;
• Erasure of personal data that is no longer required or legally retained;
• Withdrawal of consent for optional processing;
• Review of a grievance; and
• Nomination of another individual to exercise applicable rights in the event of death or incapacity, where provided by law.

Requests may be sent to coofandyfashion@gmail.com. We may request reasonable information to verify identity and protect the customer’s data. A request may be limited or refused where retention or processing is required by law, necessary for an existing transaction, or otherwise permitted by applicable law.

13. Cross-border processing

Some technology, analytics, payment or communication providers may process data using systems located outside the customer’s state or outside India. Where personal data is transferred or processed across borders, we will rely on appropriate provider safeguards and comply with applicable Indian restrictions and requirements.

14. Third-party links and services

The Website may link to third-party websites, applications or services. Their privacy practices are controlled by them, not DG CREATION. Customers should review the relevant third party’s privacy notice before providing personal data.

15. Changes to this Policy

We may update this Privacy Policy to reflect operational, technological or legal changes. The revised version will be posted on the Website with an updated effective date. Material changes may be communicated through additional reasonable means where required.

16. Contact and grievance redressal

For privacy requests or complaints, contact:

Grievance Officer: Dharmesh Babubhai Gujjar
Designation: Proprietor – DG CREATION
Email: coofandyfashion@gmail.com
Phone/WhatsApp: +91 74900 06066
Address: DG Creation, Shop No. 358, Raghuvir Scarlett, DMD Textile Market Road, Shakti Nagar, Surat, Gujarat – 395010, India

Customer grievances will be acknowledged within 48 hours and handled within one month from receipt, in accordance with applicable law.