Privacy policy

Privacy Policy

Last updated: 5 October 2026

Modish India Private Limited ("Modishus", "we", "us") runs the store at modishus.in, including its content, tools, products and services (the "Services"). The store is powered by Shopify. This policy explains what personal data we collect, why we use it, who we share it with, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 and other applicable law. If this policy and our Terms of Service conflict on how we handle personal data, this policy applies.

By using the Services, you confirm that you have read this policy.

1. What we collect

Contact and delivery details: your name, email address, phone number, billing address and delivery address.
Order details: items you view, add to your cart or wishlist, buy or cancel; your order history; the details on your GST invoice, including your GSTIN if you ask for a business invoice.
Payment details: payments are processed by Razorpay. We receive a payment confirmation, the payment method and, for cards, the last digits. We never see or store your full card number, UPI PIN or banking login.
Account details: your login, saved addresses, sizes, preferences and wishlist.
Modish Privé details (members only): your birthday (day and month), favourite designers, style preferences, sourcing requests and store credit balance.
Your messages to us: emails, WhatsApp messages, calls and contact forms, including any photos or videos you send, such as an unboxing video for a claim.
Device and usage details: your IP address, browser, device, the pages you visit and how you use the Services, collected through cookies and similar technologies.
PAN details: for orders above ₹2 lakh, we collect your PAN and a photo of your PAN card (or Form 60 if you do not hold a PAN), as required under Indian income-tax rules. We use it only for this purpose and store it securely.

We do not ask for identity documents such as Aadhaar or passport to place an order.

2. Where it comes from

Directly from you, when you browse, create an account, buy, join Modish Privé or contact us.
Automatically, through cookies and similar technologies when you use the Services.
From our service providers, for example payment confirmations from Razorpay and delivery updates from our courier partners.
From Shopify, which hosts the Services.

3. Why we use it

To fulfil your order: process payment, source and inspect your item, arrange import and delivery, issue your GST invoice and send order updates by email, SMS or WhatsApp.
To verify authenticity and handle claims: record our inspection of your item, issue its certificate of authenticity, and assess damage, wrong-item and money-back guarantee claims.
To serve you: answer your questions, run your account and, for Privé members, provide the concierge service, sourcing requests, birthday credit and store credit.
To market to you, with your consent: send offers and new arrivals by email, SMS or WhatsApp, and show you relevant ads online. You can withdraw consent at any time (see section 5).
To run giveaways and promotions you choose to enter, including contacting winners, under the rules of each promotion.
To keep the Services safe: prevent fraud and misuse, and secure accounts and payments.
To meet legal obligations: keep tax and GST records, record PAN where income-tax rules require it, and respond to lawful requests from authorities.
To improve the Services: understand how the site is used so we can make it better.

4. Who we share it with

We share personal data only as far as each purpose needs:

Shopify, which hosts our store.
Razorpay, which processes payments.
Courier and logistics partners, such as DHL, Shiprocket and their delivery partners, who need your name, address and phone number to deliver your order.
Communication providers, such as our email service and WhatsApp Business (Meta), to send you messages.
Analytics and advertising partners, such as Google and Meta, through cookies, where you have agreed.
Our sourcing and authentication team in Singapore, who inspect and approve items and run the Privé concierge on our behalf.
Professional advisers, such as our chartered accountant and lawyers.
Government authorities, where the law requires it.
A buyer or successor, if our business is sold or restructured.

We do not sell your personal data. We may share statistics that are combined and anonymised so that they cannot identify you.

5. Your consent, our messages and how to opt out

Where we rely on your consent, for example for marketing, optional cookies or your Privé profile, you can withdraw it at any time, as easily as you gave it: use the unsubscribe link in our emails, reply STOP on WhatsApp, change your cookie choices, or write to us. We act on opt-out requests within 7 working days. Withdrawing consent does not affect what we did before. If you withdraw consent that an order depends on, we may not be able to complete that order.

We send order and delivery updates by SMS, call or WhatsApp even if your number is on India's Do Not Disturb (NCPR) list, as the telecom rules allow for service messages. We send promotional messages only with your consent.

6. Certificates of authenticity

Each item comes with an online certificate that anyone holding its QR code can view, so a future owner can also verify the piece. The certificate shows the item only: designer, item, colour, size, a photo of the piece, issue date and status. It never shows your name, contact details, order number or price.

7. Reviews and content you share

If you post a review on our site, or tag us on social media, we may show it on our site and social channels with your first name and city. You can ask us to remove it at any time. We never publish the unboxing or claim videos you send us without your permission.

8. Cookies

We use necessary cookies to run the cart, checkout and your account. We use analytics and advertising cookies only if you accept them in the cookie banner. You can change your choice at any time.

9. Shopify

Shopify hosts the Services and processes personal data about your use of them in order to provide and improve them. Information you submit is shared with Shopify and with third parties that may be located outside India. We also use certain Shopify features that draw on your interactions with our store, other merchants and Shopify. For those features, Shopify is responsible for the processing, including responding to your requests about it. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

10. Other websites

Our site links to other websites and apps, such as Instagram and WhatsApp. Their own privacy policies apply when you use them, and we are not responsible for how they handle your data.

11. Data stored outside India

Your data is stored on Shopify's servers, which may be outside India, and our team in Singapore can access it to fulfil your order. We transfer personal data outside India only as Indian law permits, and never to a country the Government of India has restricted.

12. How long we keep it

We keep personal data only for as long as the purpose needs it, or longer where the law requires:

Order and invoice records, for as long as GST and tax law require.
Claim photos and videos, until the claim is closed and any dispute period has passed.
Marketing data, until you withdraw your consent.
Privé details, for as long as you are a member and for a short period afterwards, so that renewal is easy.

Certificate pages stay online because they contain no personal data.

13. Security

We use reasonable technical and organisational safeguards to protect your data. No system is completely secure, so please avoid sending sensitive information over unsecured channels, and keep your account password to yourself.

Modishus will never ask for your card number, CVV, OTP, UPI PIN or password by phone, email or WhatsApp. If anyone claiming to be Modishus asks for these, it is not us. Please do not share them, and report it to contact@modishus.in.

If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

14. Children

You must be 18 or older to buy from us. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.

15. Your rights

You have the right to:

Access: get a summary of the personal data we hold about you and who we have shared it with.
Correct and update: fix data that is wrong, incomplete or out of date.
Erase: ask us to delete your account and data, unless we must keep it by law (for example, invoices).
Withdraw consent: at any time, as described in section 5.
Raise a grievance: about how we handle your data (see section 16).
Nominate: name someone to exercise these rights for you in the event of your death or incapacity.

To use any of these rights, email contact@modishus.in. We may need to verify your identity first. We will acknowledge your request within 48 hours and resolve it within one month.

16. Grievance Officer and complaints

If you have a concern about how we handle your personal data, contact our Grievance Officer:

V K Tripathi, Grievance Officer Email: vijay@modishus.in Phone: +91 78274 52149

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

17. Changes to this policy

This policy may change from time to time. The latest version is always on this page, with its "Last updated" date, so please check it regularly. We do not send individual notices of updates by email. If a change means using your personal data for a new purpose, we will ask for your consent first.

18. Governing law

This policy is governed by the laws of India. The courts at New Delhi have jurisdiction over any dispute about it.

19. Contact us

Modish India Private Limited 1/52 Nirankari Colony, Mukherjee Nagar, Delhi 110009, India Email: contact@modishus.in