Privacy policy

1. Introduction

Nira by Origin respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains what personal data we collect, how and why we use it, when we disclose it, how long we retain it, and the choices and rights available to you.

This Policy applies when you:

  • Visit or use our website;

  • Create an account;

  • Place or enquire about an order;

  • Request customisation or made-to-order services;

  • Contact us by email, telephone, messaging service or social media;

  • Subscribe to marketing communications; or

  • Otherwise interact with Nira by Origin.

2. Data fiduciary

For applicable Indian data-protection law, Origin, operating Nira by Origin, is the entity responsible for determining why and how personal data covered by this Policy is processed.

3. Personal data we may collect

Depending on how you interact with us, we may collect:

Identity and contact information

  • Name;

  • Billing and delivery address;

  • Email address;

  • Telephone or mobile number; and

  • Account username or similar identifier.

Order and transaction information

  • Products viewed, ordered or returned;

  • Order number and purchase history;

  • Billing and delivery details;

  • Payment status and transaction reference;

  • Discounts, gift cards or promotional codes; and

  • Customer-support records.

Payment credentials may be processed by third-party payment gateways. We may receive limited payment-related information, such as transaction status, payment method, masked account details or a transaction identifier. The information accessible to us depends on the payment system used.

Made-to-order information

Where required to fulfil a customised order, we may collect:

  • Body measurements;

  • Fit and styling preferences;

  • Design or alteration instructions;

  • Reference photographs voluntarily provided by you; and

  • Approval or consultation communications.

Please provide only information reasonably necessary for the order.

Device and usage information

Subject to applicable law and your settings, we may collect:

  • Internet Protocol address;

  • Browser and device type;

  • Operating system;

  • Pages viewed and links selected;

  • Date, time and duration of visits;

  • Approximate location derived from an IP address;

  • Referring website; and

  • Cookie or similar technology identifiers.

Communications and content

We may retain emails, messages, call details, reviews, survey responses, feedback, photographs and other content you send to us.

Marketing preferences

We may record whether you wish to receive promotional email, SMS, telephone or messaging-service communications.

4. How we collect personal data

We may collect personal data:

  • Directly from you;

  • Automatically through our website and cookies;

  • From payment processors and fraud-prevention providers;

  • From courier and logistics providers;

  • From social-media services when you interact with us;

  • From a person placing an order or enquiry on your behalf; and

  • From other service providers involved in operating our business.

If you provide another person’s data, you confirm that you are authorised to do so and that the person has been informed of the relevant processing.

5. How we use personal data

We may process personal data to:

  • Create and manage customer accounts;

  • Accept, verify, produce, dispatch and deliver orders;

  • Process payments, reversals, cancellations and refunds;

  • Provide made-to-order or customisation services;

  • Communicate order and delivery updates;

  • Respond to questions, complaints and support requests;

  • Verify identity or transaction details;

  • Detect, investigate and prevent fraud, misuse or security incidents;

  • Maintain and improve our products, website and services;

  • Analyse website performance and customer preferences;

  • Send marketing communications where permitted;

  • Administer promotions, surveys or loyalty programmes;

  • Maintain business, tax, accounting and transaction records;

  • Establish, exercise or defend legal claims;

  • Comply with legal and regulatory obligations; and

  • Carry out another purpose disclosed to you at the time of collection.

We process personal data based on consent and other grounds or legitimate uses recognised by applicable law.

6. Consent and withdrawal

Where processing is based on consent, you may withdraw that consent using the contact details below or another method provided at the point of collection.

Withdrawing consent does not affect processing already lawfully completed. It may also prevent us from providing a service that necessarily requires the relevant information—for example, delivery cannot be completed without a delivery address.

7. Cookies and similar technologies

Our website may use cookies, pixels, local storage and similar technologies to:

  • Keep the website functioning;

  • Remember selections or shopping-cart contents;

  • Protect accounts and prevent fraud;

  • Understand website traffic and performance;

  • Personalise content; and

  • Measure or deliver advertising, where permitted.

You can manage cookies through browser controls and any consent tool made available on the website. Disabling essential cookies may affect website functionality.

Any separate cookie notice displayed on the website should be read with this Privacy Policy.

8. Marketing communications

Where permitted, we may use your contact information to send updates about products, launches, offers or events.

You can opt out by using an unsubscribe facility in the communication or by contacting us. Transactional messages relating to an active order, payment, account, security issue or customer-service request may still be sent.

9. Disclosure of personal data

We may disclose personal data only as reasonably necessary to:

  • Payment gateways, banks and payment-service providers;

  • Courier, logistics and fulfilment partners;

  • Website hosting, cloud-storage and technology providers;

  • Customer-support and communications providers;

  • Analytics, advertising or marketing providers, subject to applicable consent;

  • Professional advisers, insurers, auditors and accountants;

  • Government, regulatory, judicial or law-enforcement authorities where legally required; and

  • A successor or proposed successor in connection with a merger, restructuring, financing or transfer of all or part of the business.

Service providers are permitted to use personal data only for the relevant service or as otherwise authorised by law.

We do not rent personal data to third parties. We do not sell personal data in exchange for money.

10. Cross-border processing

Some service providers may process or store data outside the state or country in which you reside. Where personal data is transferred internationally, we will take measures required by applicable law and comply with any government restrictions governing such transfers.

11. Retention

We retain personal data only for as long as reasonably necessary to:

  • Fulfil the purpose for which it was collected;

  • Maintain an active customer relationship;

  • Comply with tax, accounting, consumer-protection or other legal obligations;

  • Resolve disputes and enforce agreements; and

  • Detect fraud or security incidents.

Different categories of data may have different retention periods. Data may be deleted, anonymised or securely isolated when it is no longer required, unless continued retention is required or permitted by law.

12. Security

We use reasonable administrative, organisational and technical safeguards intended to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.

No online service or transmission method can be guaranteed completely secure. You are responsible for maintaining the confidentiality of account credentials and for notifying us promptly of suspected unauthorised activity.

Where required by applicable law, we will provide notifications concerning a personal-data breach to affected individuals and the competent authority.

13. Your rights

Subject to applicable law, you may have the right to:

  • Request a summary of personal data being processed and related processing information;

  • Ask for inaccurate or incomplete personal data to be corrected or completed;

  • Ask for outdated personal data to be updated;

  • Request erasure of personal data that is no longer required, subject to lawful retention;

  • Withdraw consent;

  • Obtain information about entities with which data has been shared, where applicable;

  • Submit a grievance concerning our handling of personal data; and

  • Nominate another person to exercise applicable rights in the event of death or incapacity.

We may request information reasonably necessary to verify your identity and locate the relevant records. Legal exceptions may apply to certain requests.

You should provide authentic information and must not impersonate another person or submit a frivolous or fraudulent request.

14. Children

Our website is not intended to be used independently by persons under 18 years of age.

A parent or lawful guardian must place an order or provide consent on behalf of a child where required. We do not knowingly seek to track or target children with behavioural advertising.

If you believe a child has provided personal data without appropriate authorisation, contact us so that we can review and take suitable action.

15. Third-party websites and services

Our website may contain links to social-media platforms, payment providers or other third-party services. Their privacy practices are governed by their own notices, and we are not responsible for how independent third parties handle personal data.

16. Changes to this Policy

We may update this Privacy Policy to reflect changes in our practices, services or legal obligations.

The revised version will be posted with a new “Last updated” date. Where required, we will provide additional notice or obtain consent before applying a material change.

17. Privacy grievances and requests

To exercise a privacy right or raise a concern, contact:

Data Protection/Grievance Contact: [Insert full name before publication]
Designation: Grievance Officer, Nira by Origin
Email: origin.enquiries@gmail.com
Phone: +91 87148 23331
Address: Origin, 54/621, KMRRA – 20, K Murali Road, Kumaranashan Nagar, Kochi, Ernakulam, Kerala – 682017, India

Please describe your request clearly and provide enough information for us to verify and respond to it.