Privacy Policy & Data Governance

2. Information We Collect

We collect information that is strictly necessary to deliver exceptional luxury products, facilitate air courier logistics, and meet legal commercial mandates:

• Identity Information: Name, salutation, contact email, and telephone number.
• Shipping & Delivery Address: Full postal address, city, state, pin code, and delivery instructions.
• Transactional Data: Order identifiers, purchased products, payment status, and parcel tracking numbers.
• Device & Telemetry Data: IP address, browser type, operating system, and anonymous performance analytics to guarantee fast load times.

3. Client Verification & Regulatory KYC Compliance

Because RareCart deals in certified high-value luxury goods, certain high-value transactions may require Know-Your-Customer (KYC) verification (such as Aadhaar or PAN) for statutory compliance and high-value fraud prevention as mandated by Indian Law.

Any verification document provided is transmitted through encrypted TLS channels solely for authorized identity validation. We do not use identity documents for marketing or commercial profiling.

4. Payment & Banking Security

Your financial security is our highest priority. All online payments on RareCart are processed through RBI-authorized, PCI-DSS Level 1 compliant payment gateways (such as Razorpay, Cashfree, or Stripe):

• Zero Card Storage: RareCart never receives, processes, or stores your raw credit/debit card numbers, CVVs, or net banking passwords on our servers.
• 256-Bit SSL/TLS: All communications between your browser and our servers are encrypted with military-grade 256-bit encryption.
• Doorstep COD: For patrons preferring Cash on Delivery, payment is collected physically upon courier handover after verifying package seals.

5. Data Sharing & Third-Party Disclosures

We never sell, trade, or rent your personal information to third-party data brokers or advertisers. Information is only shared with trusted service providers strictly necessary for order fulfillment:

• Air Logistics Partners: Blue Dart, Delhivery, and DHL Express to transport and deliver your parcel safely.
• Regulatory Authorities: Statutory government authorities when required by applicable laws.
• Communications Providers: Automated transactional SMS and email gateways to transmit order updates and tracking links.

6. Cookies & Local Storage

RareCart utilizes minimal, privacy-respecting client storage:

• Shopping Bag State: Retaining items in your cart drawer across page visits.
• Theme Preferences: Remembering whether you selected Light or Dark Mode.
• Session Security: Authenticating customer accounts and seller dashboard access.

You can instruct your browser to refuse all cookies. However, some features of the shopping cart may not function properly without essential session cookies.

7. Your Legal Rights

Under Indian data protection frameworks, including the Digital Personal Data Protection Act (DPDPA), you possess sovereign rights over your information:

• Right to review and access summary of your personal data held with us.
• Right to correction and updating of inaccurate contact or delivery information.
• Right to request erasure of personal data, subject to statutory tax and accounting retention requirements under Indian law.
• Right to grievance redressal regarding data handling practices.

8. Statutory Grievance Redressal Officer

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the designated Grievance Officer for RareCart Luxury is: