Privacy policy
Last Updated: 1ˢᵗ October 2026
EISHAYA (“EISHAYA”, “we”, “us”, or “our”) is committed to protecting your privacy and handling your personal data responsibly.
This Privacy Policy describes how EISHAYA collects, uses, stores, discloses and otherwise processes your personal information when you visit, access or use our website, purchase our products, contact us, interact with us through social media or messaging platforms, or otherwise communicate with us (collectively, the “Services”).
EISHAYA offers a diverse range of products, including spiritual and devotional products, religious and cultural products, home décor, lifestyle accessories, jewellery, gifting products, handcrafted products and other products that may be introduced from time to time. Accordingly, the personal information we collect and the manner in which we use it may vary depending on how you interact with EISHAYA.
EISHAYA is run by Filo Hevis Fashion Pvt. Ltd. We are responsible for the personal data we collect about you.
Please read this Privacy Policy carefully to understand our practices regarding your personal data.
1. INFORMATION WE COLLECT
To provide our Services, we may collect personal information from different sources depending on how you interact with EISHAYA.
1.1 Information You Provide Directly
The information you provide to us may include:
- Name
- Email address
- Mobile/telephone number
- Billing address
- Shipping/delivery address
- Account/login information
- Order details
- Product preferences
- Payment confirmation and transaction information
- Customer support communications
- Return, refund and exchange information
- Reviews, ratings, feedback and other information voluntarily submitted by you
- Information provided when you participate in contests, promotions, surveys or campaigns
- Any other information you voluntarily provide to us.
Where relevant to a particular EISHAYA product or service, we may also collect information voluntarily provided by you for fulfilment of that specific product or service, such as a name, dedication/message, engraving details, gifting details or other personalisation information. We will use such information only for the purposes disclosed to you at the time of collection and for associated fulfilment, support and legal purposes.
EISHAYA does not require you to provide sensitive personal information merely to browse the website or purchase ordinary products. If a particular product or service requires additional information, the purpose for collecting that information will be communicated to you.
2. ORDER AND TRANSACTION INFORMATION
When you place an order with us, we may collect information necessary to process and fulfil your order, including your name, contact information, billing address, shipping address, products purchased, order value, transaction status, payment confirmation and related order information.
We use this information to:
- Process and fulfil your orders;
- Arrange delivery;
- Send order confirmations;
- Provide invoices;
- Communicate with you regarding your order;
- Process returns, replacements and refunds;
- Provide customer support;
- Prevent fraud and misuse;
- Comply with legal, tax and accounting requirements.
Payment card, banking, UPI or other payment credentials may be processed by third-party payment gateways (Razorpay/PayU/Easebuzz) or financial service providers. We do not store your card details. Such payment information may be subject to the privacy policies and security practices of the relevant payment service provider.
3. CUSTOMER SUPPORT AND COMMUNICATION INFORMATION
If you contact us by email, telephone, WhatsApp, social media, website chat or other communication channels, we may collect and retain information contained in those communications.
This may include your name, phone number, email address, order number, photographs, videos, messages, complaints, return/exchange information and other information you voluntarily provide.
We may retain customer-support communications, including relevant WhatsApp, telephone, email or chat records, where reasonably necessary to provide customer service, investigate complaints, prevent fraud, resolve disputes, maintain business records or comply with applicable law.
Where you communicate with us through a third-party platform such as WhatsApp, Instagram, Facebook or another messaging/social-media platform, that communication may also be processed by the relevant platform provider in accordance with its own privacy policy and terms.
4. DEVICE, LOG AND USAGE INFORMATION
When you visit or use our website, certain information may be collected automatically through cookies, pixels, tags, log files and similar technologies.
This may include:
- IP address;
- Browser type and version;
- Device type;
- Operating system;
- Network information;
- Time zone;
- Approximate location derived from technical information;
- Pages/products viewed;
- Search terms;
- Referring and exit pages;
- Date and time of visits;
- Website interactions;
- Shopping/cart activity;
- Other technical and usage information.
We may also receive information regarding your interaction with EISHAYA advertisements, emails, WhatsApp communications or other digital campaigns, including whether you opened, viewed, clicked or interacted with such communications, where permitted by applicable law and the relevant platform's technology.
5. COOKIES, PIXELS AND SIMILAR TECHNOLOGIES
Like many e-commerce websites, EISHAYA may use cookies and similar technologies to operate and improve the website.
These technologies may be used to:
- Keep the website functioning;
- Remember your preferences;
- Maintain your shopping cart;
- Understand website traffic;
- Analyse product and website performance;
- Detect fraud or security issues;
- Measure advertising effectiveness;
- Personalise website content;
- Understand customer behaviour;
- Deliver or measure relevant advertising, where permitted.
EISHAYA may use technologies provided by Shopify, Google, Meta and other analytics, advertising or technology providers, depending on the tools installed on the website from time to time.
Where applicable law requires consent for non-essential cookies or similar technologies, we will provide an appropriate mechanism to obtain and manage such consent.
You may also manage cookies through your browser settings. Disabling certain cookies may affect website functionality.
6. INFORMATION RECEIVED FROM THIRD PARTIES
We may receive information from third parties that support our business operations, including:
- Shopify and other e-commerce technology providers;
- Payment gateways (Razorpay/PayU/Easebuzz);
- Shipping and logistics providers;
- Customer-support and CRM providers;
- Marketing and advertising platforms;
- Analytics providers;
- Social-media platforms;
- Fraud-prevention providers;
- Service providers working on our behalf.
Where you interact with EISHAYA through Meta platforms, Google platforms, WhatsApp or other third-party platforms, those platforms may provide us with certain information or identifiers in accordance with your interactions with them and their respective policies.
We are not responsible for the independent privacy practices of third-party platforms, and you should review their respective privacy policies where applicable.
7. HOW WE USE YOUR PERSONAL DATA
We may use personal data for the following purposes:
7.1 Providing Products and Services
We may use your information to:
- Process and fulfil orders;
- Arrange shipping and delivery;
- Process returns, exchanges, replacements and refunds;
- Provide invoices and order confirmations;
- Manage accounts;
- Respond to customer-service requests;
- Communicate order-related information;
- Provide after-sales support.
7.2 Improving Our Website and Products
We may analyse website usage, customer feedback, purchasing behaviour and other information to improve:
- Website functionality;
- Product selection;
- Product presentation;
- Customer experience;
- Service quality;
- Marketing and communications.
We may use aggregated or appropriately de-identified information for analytical, statistical, research and business-planning purposes.
7.3 Marketing and Advertising
Where permitted by applicable law and, where required, based on your consent or communication preferences, we may use your information to send:
- Promotional emails;
- SMS;
- WhatsApp messages;
- Promotional notifications;
- Product recommendations;
- Offers;
- New-launch announcements;
- Campaign communications.
You may opt out of promotional communications by using the unsubscribe/opt-out mechanism provided in the relevant communication or by contacting us through the details in section 16.
Withdrawal of consent for promotional communications will not affect processing that is necessary for an order, transaction, legal obligation, fraud prevention, customer support or another purpose permitted under applicable law.
8. ADVERTISING AND ANALYTICS
EISHAYA may work with advertising and analytics providers, including platforms such as Meta and Google, to measure website activity, understand campaign performance, create audience insights and show or measure advertisements.
Depending on the technologies enabled on our website, these providers may receive information such as device identifiers, cookie identifiers, IP address, website activity, advertising interactions or other information generated through your interaction with our website or advertisements.
EISHAYA will use such technologies subject to applicable law and any consent requirements that apply to the relevant processing.
9. WHATSAPP, SMS AND TELEPHONE COMMUNICATIONS
If you provide your mobile number and interact with EISHAYA through WhatsApp, SMS, telephone or other communication channels, we may use that information to provide transactional communications such as order confirmations, delivery updates, return/exchange updates and customer support.
Where required, promotional WhatsApp/SMS communications will be sent only in accordance with applicable law and your applicable communication preferences or consent.
Information relating to WhatsApp communications may be processed through Meta's systems and is also subject to Meta's applicable terms and privacy policy.
10. HOW WE SHARE PERSONAL DATA
We may disclose personal information to third parties where reasonably necessary for providing our Services or for purposes permitted by applicable law.
These may include:
Service Providers
We may share relevant personal data with service providers that assist us with Shopify/e-commerce technology, website hosting, cloud services, analytics, customer support, CRM, marketing, communication, fraud prevention, payment processing and other business operations.
Payment Providers
Payment information may be shared with payment processors to process transactions and refunds.
Shipping and Logistics Providers
We may share your name, phone number, delivery address, order details and other information reasonably required with shipping, courier, freight, logistics and return-pickup providers to deliver orders and process returns, replacements and exchanges.
Marketing and Advertising Partners
Where permitted by applicable law, we may share or permit access to certain identifiers or website interaction information with analytics and advertising platforms for campaign measurement, audience creation, advertising and related purposes.
Legal and Regulatory Authorities
We may disclose personal data where required or authorised by applicable law, court order, governmental authority, regulatory requirement or legal process.
Group Companies
We may share data with our group companies, including Filo Hevis, where needed to run our business.
Business Transfers
If EISHAYA or the relevant business entity undergoes a merger, acquisition, restructuring, sale of assets, financing, insolvency or similar transaction, personal data may be transferred or disclosed as reasonably necessary in connection with that transaction, subject to applicable law.
11. COMPANIES THAT HELP US
We use other companies to help run our business, such as our website platform, payment partners, couriers and support tools. We only share the data they need, and we ask them to keep it safe and use it only for the work they do for us.
12. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:
- Providing products and services;
- Maintaining customer accounts;
- Processing orders and transactions;
- Managing returns and refunds;
- Customer support;
- Fraud prevention;
- Resolving disputes;
- Maintaining business and transaction records;
- Complying with tax, accounting and other legal obligations;
- Enforcing our agreements and policies.
Different categories of information may be retained for different periods depending on the purpose, nature of the information and applicable legal requirements.
Where personal data is no longer required for the relevant purpose and there is no legal or legitimate requirement to retain it, we will take reasonable steps to delete, anonymise or securely dispose of it.
13. DATA SECURITY
We take reasonable measures to protect personal data against unauthorised access, disclosure, alteration, misuse, loss or destruction.
We protect your data using encryption when data is sent, access limited to staff who need it, and secure storage with trusted providers.
However, no electronic transmission, storage system or internet communication can be guaranteed to be completely secure.
Customers should also take reasonable steps to protect their account credentials and avoid sharing passwords, OTPs or other authentication information with unauthorised persons.
14. PERSONAL DATA BREACHES
If EISHAYA becomes aware of a personal data breach, we will take reasonable steps to contain, investigate and remediate the incident and make notifications to affected individuals, authorities or other parties where required by applicable law.
15. YOUR RIGHTS AND CHOICES
Subject to applicable law and the provisions that are in force at the relevant time, you may have rights in relation to your personal data, including rights to:
Access / Information
Request information about the personal data we hold about you and who we share it with.
Correction and Updating
Request correction or updating of inaccurate or incomplete personal information.
Erasure / Deletion
Email us to delete your account and data. We will do it within 30 days, except records we must keep by law, such as invoices for tax.
Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent. Withdrawal of consent will not affect the lawfulness of processing that occurred before withdrawal and may not affect processing that is otherwise permitted or required by law.
Grievance Redressal
You may raise a grievance regarding the processing of your personal data by contacting our designated privacy/grievance contact using the details in section 16.
Nomination
Where applicable under the DPDP framework, you may have the right to nominate another individual to exercise your rights in accordance with applicable law.
16. GRIEVANCE REDRESSAL AND PRIVACY REQUESTS
To use any of your rights, or to make a complaint about how we handle your data, contact our Grievance / Privacy Officer:
Name: Mansi
Email: support@eishaya.com
Phone: 99999 78920
Address: A-39, 3rd Floor, Wazirpur Industrial Area – 110052, Delhi DL, India.
Please use the subject line "EISHAYA - Data Privacy Request". We may ask you to confirm your identity before acting on your request. We will acknowledge your request or complaint and reply within 30 days.
17. CHILDREN'S PRIVACY
Our Services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, please contact us and we will delete it.
18. REVIEWS, PHOTOGRAPHS, VIDEOS AND USER-GENERATED CONTENT
If you voluntarily submit a review, testimonial, photograph, video, social-media post, feedback or other content relating to EISHAYA products, we may use that content for customer-service, website, marketing or promotional purposes where permitted by law and subject to the terms communicated to you when the content is submitted.
Where a particular campaign or submission requires separate permission or consent for marketing use, EISHAYA will obtain such permission/consent as applicable.
Customers should avoid submitting unnecessary personal or sensitive information in public reviews, comments or social-media content.
19. PERSONALISATION AND SPECIAL-PURPOSE INFORMATION
Certain EISHAYA products may allow customers to provide personalisation information, such as names, initials, messages, dates, photographs or other details.
Such information will be used for the specific purpose of creating, processing, delivering or supporting the personalised product.
Customers are responsible for ensuring that they have the necessary rights and permissions to provide any third-party name, photograph, message or other personal information submitted for personalisation.
20. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to websites, applications, social-media platforms or services operated by third parties.
Such third-party services may have their own privacy policies, terms and data-processing practices. EISHAYA does not control and is not responsible for the independent privacy practices of third-party websites or platforms.
Customers should review the privacy policies of such third parties before providing personal information.
21. INTERNATIONAL DATA PROCESSING
EISHAYA is based in India.
Depending on the service providers used by EISHAYA, personal data may be processed or stored in India or in other jurisdictions.
Where personal data is transferred outside India, EISHAYA will take such measures as may be required under applicable Indian data-protection law and any other applicable law governing the relevant transfer.
22. DO NOT SELL / RENT PERSONAL DATA
EISHAYA does not sell or rent customers' personal data to third parties for their independent commercial use.
However, EISHAYA may share information with service providers, advertising/analytics platforms, logistics partners, payment providers and other processors where necessary for providing the Services or for purposes permitted under applicable law.
23. ACCURACY OF INFORMATION
You are responsible for providing accurate and current information when placing an order, creating an account or communicating with us.
If you provide information relating to another individual, you represent that you are authorised to provide such information and that the relevant processing is permitted under applicable law.
24. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our business practices, products, technology, service providers or applicable legal requirements.
The updated version will be published on this page with a revised “Last Updated” date.
Where required by applicable law, we will provide additional notice or obtain consent for material changes to the manner in which personal data is processed.
By using the EISHAYA website or providing personal data to us, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, EISHAYA will obtain such consent through the applicable consent mechanism.
Nothing in this Privacy Policy limits any rights available to you under applicable law.
Best Regards,
Team - Eishaya
