Privacy Policy

Who we are

AV Fashion is a children’s clothing label operating from Studio 4, Prestige Atrium, 100 Feet Road, Indiranagar, Bengaluru 560038, India. In data-protection terms we are the data fiduciary for the personal data described here, and we are responsible for how it is handled.

This policy covers avfashion.in, our email and WhatsApp conversations with you, and the order records held in our studio systems. It applies to everyone who browses, buys or writes to us, wherever they live.

What we collect

We group it into four buckets, and we never ask for more than the bucket needs.

• Order details you give us Name, delivery address, PIN code, email address and mobile number. Without these a courier cannot find you and we cannot confirm the order.
• Things you choose to add A child’s first name or age band if you tell us for sizing help, delivery instructions, gift messages, product reviews and any photograph you attach to a return request.
• Automatic technical data IP address, browser and device type, referring page and the pages you viewed. This is aggregated for fraud checks and to work out which pages are quietly broken.
• Stored in your own browser Your bag, wishlist, recently viewed items and last order sit in this device’s local storage under keys beginning avf.. They never leave your device unless you complete a checkout.

We do not collect government identity numbers, caste or religion, health information, or biometric data, and you should never send them to us.

How we use it

Every use maps to a purpose you would expect from a shop:

• Taking payment, packing your parcel and getting it delivered.
• Sending order confirmations, dispatch notices and delivery updates by email and SMS.
• Handling returns, exchanges, refunds and warranty claims.
• Answering your questions and keeping a thread of that conversation so you never have to repeat yourself.
• Preventing fraud, payment abuse and repeated undelivered COD orders.
• Meeting our tax, GST and accounting obligations in India.
• Sending the newsletter — only if you asked for it, and every email carries a one-click unsubscribe.

We do not build advertising profiles, we do not run automated decision-making that affects you, and we never use a child’s details for marketing of any kind.

Cookies & local storage

This site keeps its cookie use deliberately small. There are no advertising pixels, no cross-site retargeting tags and no social media trackers embedded in these pages.

Blocking cookies in your browser will not stop you browsing, but the bag and wishlist will empty every time you change page, because those features are built entirely on browser storage.

Payment data

We never see or store your card number. Card, UPI and net-banking details are captured directly by our PCI-DSS Level 1 certified payment gateway and tokenised in line with Reserve Bank of India card-storage rules.

What comes back to us is a transaction reference, the last four digits of the instrument, the payment method name and whether the payment succeeded. That is enough to reconcile an order and issue a refund, and nothing more.

If you save a card for faster checkout, the token lives with the gateway and the bank, not on our servers. You can remove it at any time from your bank’s tokenisation portal or by asking us to delete the mandate.

Third parties

A handful of service providers process data on our behalf, each under a written contract that limits them to our instructions:

• Courier partners receive your name, address and phone number so they can deliver the parcel.
• The payment gateway receives the amount, order reference and your email for the receipt.
• Email and SMS providers send transactional messages and the newsletter.
• Our hosting and backup provider stores the site and its encrypted database.
• Google Fonts serves the two typefaces used across the site; your browser requests them directly.

We do not sell, rent, barter or otherwise share your personal data with advertisers, data brokers or marketplaces. We will disclose data to a public authority only where a valid legal order compels us, and we will tell you unless the law forbids it.

Where a provider stores data outside India, we require contractual safeguards at least equivalent to the protection this policy promises.

How long we keep it

Order and invoice records are kept for eight financial years, because Indian tax law requires it. Support conversations are kept for three years so we can honour warranty claims. Newsletter subscriptions last until you unsubscribe, and we remove addresses that have not opened anything in 24 months.

Browsing analytics are aggregated after 14 months and can no longer be traced to a device. Anything held in your own browser under the avf. keys disappears the moment you clear your site data.

Security

The whole site is served over TLS. Order data is encrypted at rest, access is restricted to the small studio team who need it, and every administrative account requires two-factor authentication. Backups are encrypted and tested quarterly.

No system is perfect. If a breach ever affects your personal data we will notify you and the relevant authority without undue delay, tell you plainly what was exposed, and set out what we are doing about it.

Your rights

You can ask us to:

• Confirm what personal data we hold about you and send you a copy.
• Correct anything inaccurate, incomplete or out of date.
• Erase your data, except records we are legally required to retain.
• Withdraw consent for marketing, at any time and without giving a reason.
• Nominate someone to exercise these rights for you if you are unable to.
• Complain to us, and then to the relevant data protection authority if we have not put it right.

Email hello@avfashion.in with the subject line “Data request”. We respond within 7 working days and complete the request within 30, free of charge.

Children’s data

We make clothes for children, but our shop is designed for the adults who buy them. AV Fashion accounts and orders are for people aged 18 and over, and we do not knowingly collect personal data directly from a child.

If you give us a child’s first name, age or measurements for sizing, we treat it strictly as order information: it is used to pick the right size, never for marketing, never for profiling, and never shared beyond the courier label.

If you believe a child has sent us personal information without your consent, write to us and we will delete it within 72 hours of confirming the request.

Changes to this policy

When we change something material — a new category of data, a new processor, a new purpose — we update the date at the top of this page and email everyone on our list before the change takes effect. Minor wording fixes are made quietly, with the date updated.

Earlier versions are kept on file and available on request, so you can always see what you agreed to at the time you ordered.

Contact us

Our grievance officer is reachable at hello@avfashion.in or +91 90000 00000, Monday to Saturday, 10:00–19:00 IST.