Free Delivery on Orders Above ₹499

Privacy Policy

Snowie Soft respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights under Indian law — particularly the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

1.Who We Are

Snowie Soft is an Indian e-commerce brand selling baby products online at snowiesoft.com. We act as the Data Fiduciary (per DPDPA 2023) for the personal data we collect from our customers.

Throughout this policy, "we", "us", and "our" refer to Snowie Soft. "You", "your", and "customer" refer to the individual whose personal data we process.

2.Information We Collect

We collect the following categories of personal data:

  • Identity & Contact: name, email, mobile number, shipping/billing address, pincode
  • Transaction: order history, payment method (UPI / card / wallet — actual card numbers are processed and stored only by our PCI-DSS-compliant payment gateways, never by us)
  • Account: login credentials (passwords stored as one-way hashes), preferences, wishlist
  • Technical: IP address, device type, browser, operating system, page-views, referrer URL, cookies (see Section 6)
  • Communication: WhatsApp / email / phone records when you contact support

We do not knowingly collect data about children under 18. See Section 5 (Children's Privacy).

3.How We Use Your Information

We use your data only for these specified, lawful purposes:

  • Process and fulfill your orders (shipping, billing, returns)
  • Provide customer support via WhatsApp / email / phone
  • Send transactional notifications (order confirmation, shipping updates, refund confirmation)
  • Send marketing communications only with your prior consent (you can opt out at any time)
  • Improve our products and website experience (anonymized analytics)
  • Detect and prevent fraud, abuse, or violations of our Terms
  • Comply with legal obligations (tax, GST, regulatory inquiries)

We will not use your data for any other purpose without obtaining your fresh consent.

4.How We Share Your Information

We share your data only with these categories of trusted partners, and only to the minimum extent necessary:

  • Payment Gateways (Razorpay, Paytm, etc.) — to process your payment securely
  • Shipping Couriers (Delhivery, Blue Dart, DTDC, Ecom Express) — to deliver your order
  • SMS / Email Service Providers — to send order updates
  • Analytics Providers (Google Analytics) — anonymized usage data only
  • Government / Law Enforcement — only when required by valid legal process under Indian law

We never sell your personal data to third parties for marketing purposes.

5.Children's Privacy

Our products are for babies and young children, but our website and accounts are intended for use by parents, caregivers, and adults aged 18+.

We do not knowingly collect data directly from children. If you are under 18, you may use the Site only with the involvement of a parent or legal guardian, who is responsible for the account and any data submitted.

If you become aware that a child has provided us personal data without parental consent, please contact us immediately and we will delete it.

6.Cookies & Tracking

We use cookies and similar technologies to:

  • Keep you logged in and your cart contents during your session
  • Remember your preferences (language, currency)
  • Analyze site usage (anonymized)
  • Show relevant retargeting ads (only with your consent)

You can disable cookies via your browser settings, but some Site features (cart, checkout) may not work properly. Mobile apps similarly use device identifiers.

7.Data Retention

We keep your data only as long as needed for the purposes listed in Section 3:

  • Order data: retained for 7 years (per Indian tax/audit requirements)
  • Account data: retained while account is active. Deleted within 30 days of account deletion request, except where law requires longer retention
  • Marketing communication consent: retained until you opt out, then deleted within 30 days
  • Support communications: retained for 2 years for service quality, then deleted

8.Your Rights Under DPDPA 2023

The Digital Personal Data Protection Act, 2023 grants you the following rights as a Data Principal:

  • Right to Access: request a copy of your personal data
  • Right to Correction: correct inaccurate or outdated data
  • Right to Erasure: ask us to delete your data (subject to legal retention obligations)
  • Right to Withdraw Consent: opt out of marketing or data processing at any time
  • Right to Grievance Redressal: file a complaint with our Grievance Officer (see Section 12)
  • Right to Nominate: nominate another individual to exercise rights on your behalf in case of incapacity

To exercise any of these rights, contact us via the channels in Section 12. We respond within 30 days.

9.Data Security

We implement reasonable security practices and procedures as defined under Section 43A of the Information Technology Act, 2000 and Rule 8 of the IT (Reasonable Security Practices) Rules, 2011, including:

  • HTTPS/TLS encryption for all data in transit
  • Encrypted storage of sensitive data (passwords as one-way hashes)
  • Restricted access to personal data on a need-to-know basis
  • PCI-DSS compliance for payment processing (handled by certified gateways)
  • Regular security reviews and vulnerability assessments

However, no system is 100% secure. In the unlikely event of a data breach affecting your data, we will notify you and the Data Protection Board of India within 72 hours, as required under DPDPA 2023.

10.Cross-Border Data Transfer

Your personal data is primarily stored on servers located in India. Where we use international service providers (e.g., for analytics), data may be transferred outside India. We ensure such transfers comply with DPDPA 2023 — meaning the destination country has adequate safeguards or the transfer is permitted by the Central Government's notified list.

11.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable Indian law. The updated version will be posted on this page with a new "Last updated" date. We recommend reviewing this policy periodically.

If changes are material, we will notify you via email or a prominent notice on the Site before the changes take effect.

12.Grievance Officer & Contact

Per the Information Technology Act, 2000 and DPDPA 2023, our designated Grievance Officer handles privacy-related queries and complaints:

  • WhatsApp / Phone: +91 96500 31394
  • Email: hello@snowiesoft.com (subject line: "Privacy Grievance")
  • Hours: Mon–Sat, 9 AM – 6 PM IST
  • Address: Snowie Soft India, Mumbai, Maharashtra

If unsatisfied with our response, you may escalate to the Data Protection Board of India (per DPDPA 2023) or the Adjudicating Officer under the IT Act, 2000.

Last updated: May 2026. By using snowiesoft.com, you confirm that you have read and understood this Privacy Policy.