We ask for the least we can get away with, use it only to get your order to your door, and never sell it. This page sets out exactly what that means in practice.
Slaayze is operated by SLAYZE ENTERPRISES One Person Company (OPC), One Person Company (OPC) incorporated in India. We are the data fiduciary for the personal data described here, which means we decide why and how it is processed and we are answerable for it.
This policy applies to this website and to any order, enquiry or message you send us through it.
| Category | Examples | When |
|---|---|---|
| Identity & contact | Name, mobile number, email address | At checkout, or when you contact us |
| Delivery | Street address, city, state, pincode | At checkout |
| Order | Items, sizes, quantities, amount, order reference, payment status | When an order is placed |
| Transaction reference | Gateway transaction ID, bank reference number, UPI handle where the gateway returns it | On payment |
| Technical | IP address, browser and device type, pages viewed, timestamps | Automatically, as you browse |
| Correspondence | Messages you send us and our replies | When you write in |
We do not collect government identifiers, biometric data, health data, caste, religion, political opinion or any other sensitive category. Please do not send them to us.
We do not sell, rent or trade your personal data to anyone, for any purpose, ever. We do not build advertising profiles from your order history.
Under the Digital Personal Data Protection Act, 2023, we process your data on the basis of the consent you give when you place an order or write to us, and on the basis of the legitimate uses the Act allows — principally performing the contract you entered into and complying with law.
Marketing email is opt-in only, and every such email carries a one-click unsubscribe. Withdrawing marketing consent does not affect the transactional messages that are part of fulfilling an order you have already placed.
You may withdraw consent at any time by writing to us. Where withdrawal makes it impossible for us to complete an order in progress, we will tell you before acting on it.
Payments are processed by our PCI-compliant payment gateway partner over an encrypted connection. We never see, handle or store your card number, CVV, UPI PIN, bank credentials or OTP. Those are entered on the gateway's own screens and stay with the gateway and your bank.
What we do store against your order is the transaction reference, the amount, the payment method and the status returned to us — the minimum needed to reconcile a payment and process a refund. This is consistent with the RBI's card storage and tokenisation directions, under which merchants do not retain card data.
We use a small number of cookies and browser storage entries that are strictly necessary for the store to work: keeping your bag contents between pages, holding your session, and remembering preferences such as dismissed banners. Your bag is held in your own browser's local storage, not on our servers, until you check out.
We may use privacy-respecting analytics to count page views in aggregate. You can block or clear cookies in your browser settings; if you block the necessary ones, the bag and checkout will not function.
| Data | Kept for | Reason |
|---|---|---|
| Order and invoice records | 8 years | Tax and company law retention requirements |
| Support correspondence | 3 years | Handling repeat or escalated complaints |
| Marketing subscription | Until you unsubscribe | Consent-based |
| Server and access logs | Up to 12 months | Security and fraud investigation |
Once a retention period lapses the data is deleted or irreversibly anonymised.
The site is served over HTTPS with TLS encryption. Access to order data is restricted to authorised staff behind individual credentials, administrative access is logged, and passwords are stored only as salted hashes — never in readable form.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India as the DPDP Act requires, and tell you what to do about it.
You may ask us to:
Write to grievance@slaayze.com from the email address on the order. We respond within 30 days, and usually much sooner. We may ask you to confirm your identity before acting on a request, so that nobody else can obtain your data.
We sell boys' clothing, but the store is meant to be used by adults buying for children. This site is not directed at children and we do not knowingly collect data from anyone under 18. Accounts and orders must be placed by a parent or guardian. If you believe a child has given us personal data, tell us and we will delete it.
We may update this policy as the store or the law changes. The revision date at the top always reflects the current version, and material changes will be flagged on the site. Continuing to use the store after a change means you accept the updated policy.
Full escalation details are on the grievance redressal page. This policy is governed by the laws of India and any dispute is subject to the courts at New Delhi.