Ivoric Lifestyle Private Limited (CIN U46419UP2025PTC226189) (“Ivoric”, “we”, “us”) runs ivoric.in and the Ivoric Android app, which shows the same website and collects nothing extra. For the personal data you give us, we are the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP Act). This page says what we collect, why, who else sees it, how long we keep it, and how to get it corrected or erased.

Last updated: October 2026.

1. What we collect

You give us

• Name, mobile number and email (to create your account and log in)
• Shipping and billing address, GSTIN if you give one for an invoice
• Order history, returns and refund requests (including the photos you upload with a return or replacement), reviews, support messages
• Job applications, including a CV, if you apply through our careers page

Collected automatically

• IP address, browser and device type, pages viewed (for security, fraud checks and analytics)
• Cookies (see section 6)

What we never see: your card, UPI or bank details. Payments are taken on Razorpay’s page and we only receive the payment status and reference.

2. Why we use it

Purpose	Data	Basis
Create your account, log you in (OTP on WhatsApp, Google, or password)	Name, phone, email	Your consent / contract
Take, ship, invoice and refund orders	Name, phone, address, order details	Contract, legal duty (tax)
Order updates on WhatsApp / email	Phone, email, order status	Contract
Offers, drop alerts and the newsletter	Phone, email	Your separate, optional consent. Withdraw any time
Security, fraud and abuse prevention	IP address, device data	Legitimate use
Site analytics	Pages viewed, device type	On by default; switch off any time with “Help us improve” (section 6)

We do not use your data for anything else without asking you first.

3. Who we share it with

We do not sell your personal data. We share only what is needed with:

• Razorpay – payments and refunds
• Shiprocket and courier partners – name, phone and address to deliver your parcel
• Meta (WhatsApp Business) – to send OTPs and order messages to your number
• Google – Google login (if you choose it) and Google Analytics (unless you switch analytics cookies off)
• Our hosting and email providers – who store and send data on our behalf
• Anthropic (AI photo check) – photos you upload with a return or replacement request, compared with our own packing photos of your order, to help our team check the request. Our team makes every decision
• Authorities – where the law requires it

Some of these providers process data outside India. We use them only for the purposes above.

4. How long we keep it

• Orders, invoices and credit notes: up to 8 years (GST, income-tax and company-law record rules)
• Account details: until you delete your account
• Courier webhook records: 90 days. Cart activity logs: 180 days. Password-reset tokens: deleted a week after expiry. Security logs: up to 60 days
• Marketing consent records: kept as proof of your choice
• Job applications and CVs: 12 months, then deleted
• Return and replacement photos: deleted 90 days after the request closes. Our packing photos of your order: deleted about 4 months after delivery

When you delete your account we erase your profile, addresses and saved details. We keep only what the law requires: invoices and a masked record (initials, masked email, last 4 digits of the phone).

5. How we protect it

When you ask for the OTP, your phone number is sent to WhatsApp to deliver the code. We rate-limit and may use bot checks on login and forms to stop abuse. Your password is stored only as a salted hash. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board as the law requires.

6. Cookies

Essential cookies keep you logged in, hold your cart and protect forms. They are always on. Analytics cookies (Google Analytics) help us see which pages work and what to fix. They are on by default. The “Help us improve” switch, here and in the footer, controls them: on means you allow all cookies (essential and analytics); off means essential cookies only. You can change it any time, or clear cookies from your browser. We do not run advertising cookies unless we say so here first.

Help us improve

7. Your rights

You can ask us to: see what we hold about you; correct it; erase it; withdraw consent (for example, stop WhatsApp or email offers); and nominate someone to act for you if you die or cannot act yourself. Delete your account from My Account (see how to delete your account), or email hello@ivoric.in from the address or number on the account. We reply within 30 days.

8. Children

Our site is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us data, write to us and we will delete it.

9. Changes

If we change this policy, the date at the top changes. For material changes we will tell logged-in customers.

10. Grievance officer and contact

Grievance Officer
Neelam Thapak, Director, Ivoric Lifestyle Private Limited
Reg Add: "Ivoric Warehouse", Plot No. 1225-26/1280, Patwari, Near Kamal Eye Centre, Greater Noida West, Gautam Buddha Nagar, Uttar Pradesh - 203207
Email: grievance@ivoric.in
Acknowledgement within 48 hours; resolution within 30 days.

If we do not resolve your complaint, you can approach the Data Protection Board of India.