Privacy policy

Last updated: [DD Month 2026]

At REYNA ("REYNA", "we", "us"), operated by Indishoe Company, we treat your personal data with the same care we give our craft. This notice explains what we collect, why, and the choices and rights you have. It is written to align with India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

The data we collect and why

  • Name, email, phone, delivery & billing address — to process, deliver and support your order.
  • Order and payment status (payments handled by Razorpay; we do not store your full card details) — to fulfil orders, issue exchanges and credit notes, and prevent fraud.
  • Account details, if you create an account — to let you track orders and check out faster.
  • Communication with us (WhatsApp, email) — to answer you and provide customer support improve our service.
  • Website usage & cookies (device, pages viewed) — to run and improve the site, and, only with your consent, for marketing.
  • Marketing preferences — to send you updates only if you opt in.

The basis on which we process your data

We process your data on the basis of your consent, and where necessary to fulfil the order you've placed with us or to meet a legal obligation. Your consent is sought through a clear, standalone request, and you may withdraw it at any time — as easily as you gave it. Withdrawing consent won't affect processing already carried out, and may limit our ability to serve you.

Who we share it with

We share data only with trusted partners who help us run REYNA, and only to the extent needed: Shopify (our store and checkout platform), Razorpay (payments — governed by their own privacy terms and RBI norms), courier & logistics partners (to deliver and pick up), WhatsApp Business (support) and analytics providers (e.g. Google Analytics).

We never sell your personal data. Some partners may process data outside India; where they do, we take reasonable steps to ensure it stays protected, consistent with applicable law.

How long we keep it

We keep your personal data only as long as needed for the purpose it was collected — typically for the life of your relationship with us and for a reasonable period afterwards to meet legal, tax and accounting obligations — after which it is deleted or anonymised.

How we protect it

We use reasonable security safeguards appropriate to the nature of the personal data and the risk involved — encryption in transit, access controls, and vetted processors — to protect your data.

In the unlikely event of a personal data breach, we will act and notify as required under the DPDP Rules, 2025.

Your rights

As a Data Principal, you have the right to:

  • Access the personal data we hold about you.
  • Correct, complete or update it.
  • Erase it, where it's no longer needed.
  • Withdraw consent at any time.
  • Nominate another person to exercise your rights in the event of death or incapacity.
  • Have it addressed.

Cookies

We use essential cookies to run the site and, with your consent, analytics and marketing cookies. You can manage your preferences through our cookie banner or your browser settings.

We may update this policy as our practices or the law evolve; the "last updated" date above will always reflect the current version.