Privacy & Data Protection Policy

Effective Date: 11 October 2026

At PJ Vastraa — A Fashion Label from PJ Universe, we respect the privacy of our customers, website visitors and people who interact with us through our official communication channels.

PJ Vastraa is operated by PJ Universe Ventures Private Limited (“PJ Vastraa”, “PJ Universe”, “Company”, “we”, “us” or “our”).

This Privacy & Data Protection Policy (“Privacy Policy”) explains how we may collect, use, store, share and protect personal information in connection with:

  • the PJ Vastraa website;
  • customer accounts;
  • purchases and order enquiries;
  • WhatsApp Business communications;
  • email communications;
  • official social-media interactions;
  • returns, exchanges and customer support;
  • promotions and newsletters; and
  • other PJ Vastraa services or authorized customer-contact channels.

This Policy should be read together with our Terms & Conditions, Shipping & Delivery Policy and Returns, Exchanges & Cancellations Policy.

We process personal information only for lawful purposes and in accordance with applicable privacy and data-protection requirements.

1. Who Is Responsible for Your Personal Information

PJ Vastraa is a fashion label operated by:

PJ Universe Ventures Private Limited

For personal information processed in connection with PJ Vastraa, PJ Universe Ventures Private Limited is responsible for determining the purposes for which such information is processed, to the extent applicable under relevant data-protection law.

References to “PJ Vastraa” in this Privacy Policy include processing undertaken for the PJ Vastraa business by PJ Universe Ventures Private Limited and authorized service providers acting on its behalf.

2. Personal Information We May Collect

Depending upon how you interact with PJ Vastraa, we may collect the following categories of information.

Identity & Contact Information

This may include:

  • full name;
  • email address;
  • telephone/mobile number;
  • billing address;
  • shipping address;
  • country or region;
  • postal code; and
  • other contact information voluntarily supplied by you.

Account Information

If you create a customer account, we may process information associated with features such as:

  • My Account;
  • login credentials;
  • saved addresses;
  • order history;
  • wishlist information;
  • account preferences; and
  • customer profile information.

Passwords and authentication information may be handled through our website systems and service providers in accordance with the technical configuration of the platform.

Order & Transaction Information

We may collect information relating to:

  • products ordered;
  • sizes selected;
  • quantity;
  • purchase value;
  • discounts or promotional codes;
  • order number;
  • payment status;
  • shipping method;
  • delivery status;
  • returns or exchanges; and
  • other information necessary to process and service an order.

Sizing, Measurements & Customization Information

Where applicable, we may collect:

  • garment size;
  • body or garment measurements voluntarily supplied for tailoring;
  • requested garment lengths;
  • customization requirements;
  • colour or design preferences; and
  • other order-specific tailoring instructions.

We request customers to provide only information reasonably necessary for the relevant garment or service.

Communications & Customer-Support Information

We may retain information provided through:

  • email;
  • WhatsApp Business;
  • contact forms;
  • social-media messages;
  • telephone conversations where appropriately recorded or documented;
  • return or exchange requests;
  • complaints;
  • product enquiries; and
  • other customer-support communications.

Technical & Website Information

When you use our website, certain information may be collected automatically depending upon website configuration and your browser/device settings, including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • approximate location derived from technical information such as IP address;
  • referring pages;
  • pages visited;
  • date and time of access;
  • website interactions;
  • cookie identifiers; and
  • similar technical information.

We do not intend to collect precise device location unless such functionality is specifically offered, required and appropriately disclosed.

3. How We Collect Information

We may collect personal information:

Directly From You

For example when you:

  • create an account;
  • place an order;
  • enter billing or delivery details;
  • submit measurements;
  • request customization;
  • subscribe to communications;
  • contact us through WhatsApp, email or social media;
  • participate in a promotion;
  • request a return or exchange;
  • submit a review;
  • raise a complaint; or
  • otherwise provide information voluntarily.

Automatically Through the Website

Certain technical information may be generated through:

  • cookies;
  • website functionality;
  • server logs;
  • security tools;
  • analytics technologies where used; and
  • similar technologies.

From Service Providers

We may receive limited information from authorized service providers involved in:

  • payments;
  • shipping and delivery;
  • website operation;
  • fraud prevention;
  • customer communication; or
  • other services necessary to operate the business.

4. Why We Use Personal Information

We may process personal information for purposes including:

Order Processing & Fulfilment

To:

  • receive and confirm orders;
  • verify transaction details;
  • arrange sourcing or production;
  • process customization requirements;
  • prepare orders for dispatch;
  • arrange delivery;
  • provide tracking information; and
  • manage order-related communications.

Customer Accounts

To:

  • create and maintain customer accounts;
  • display order history;
  • manage saved preferences;
  • maintain wishlists and related account features; and
  • provide account support.

Customer Service

To:

  • answer enquiries;
  • respond to sizing questions;
  • resolve delivery issues;
  • process returns and exchanges;
  • investigate complaints;
  • provide after-sales support; and
  • respond to customer requests.

Payment & Transaction Administration

To:

  • confirm successful payment;
  • process refunds where applicable;
  • investigate payment irregularities;
  • reconcile transactions; and
  • maintain appropriate financial records.

Fraud Prevention & Security

To:

  • detect suspected fraudulent transactions;
  • protect customer accounts;
  • prevent unauthorized website access;
  • investigate misuse;
  • protect our business and customers; and
  • maintain website security.

Legal, Tax & Regulatory Compliance

To comply with obligations relating to:

  • tax;
  • accounting;
  • invoicing;
  • customs;
  • consumer protection;
  • legal proceedings;
  • regulatory requirements; and
  • lawful requests from competent authorities.

Business & Website Improvement

We may use appropriate information to understand:

  • website performance;
  • customer experience;
  • product interest;
  • navigation patterns;
  • operational issues; and
  • opportunities to improve PJ Vastraa’s services.

Where possible and appropriate, aggregated or non-identifiable information may be used for such analysis.

5. Orders Placed Through WhatsApp, Email or Social Media

PJ Vastraa may accept enquiries or orders through authorized direct communication channels, including WhatsApp Business, email or official social-media accounts.

Information provided through these channels may be used to:

  • answer product enquiries;
  • confirm sizes and measurements;
  • prepare quotations or order summaries;
  • process an order;
  • arrange payment;
  • provide shipping information; and
  • provide customer support.

Third-party communication platforms such as WhatsApp, Instagram, Facebook or other social-media services may independently process information according to their own privacy policies and terms.

PJ Vastraa does not control the independent data-processing practices of those platforms.

6. Payment Information

Payments may be processed through banks, payment gateways or other authorized payment-service providers made available by PJ Vastraa.

Depending upon the chosen payment method, payment providers may independently collect information such as:

  • payment-card details;
  • bank information;
  • payment identifiers;
  • transaction authentication information; or
  • other financial information necessary to authorize a payment.

PJ Vastraa generally does not need to directly receive or retain a customer’s complete payment-card credentials where those details are processed directly by an authorized payment provider.

However, we may retain limited transaction information such as:

  • payment status;
  • payment reference;
  • transaction identification number;
  • amount paid;
  • refund information; and
  • payment method category

where necessary for accounting, customer support, refunds or legal obligations.

Customers should also review the privacy and security terms of the payment service they use.

7. Marketing, Newsletters & Promotional Communications

Where permitted by applicable law, PJ Vastraa may send communications regarding:

  • new collections;
  • product launches;
  • festive edits;
  • promotions;
  • offers;
  • newsletters;
  • styling content;
  • referral programmes; and
  • other brand updates.

Where consent is required, promotional communications will be sent based upon appropriate consent.

Customers may withdraw from optional marketing communications through the available unsubscribe or opt-out method or by contacting us.

Opting out of promotional marketing will not normally stop essential transactional communications, including:

  • order confirmations;
  • payment information;
  • shipping updates;
  • customer-support responses;
  • security notices; or
  • return/refund communications.

8. Cookies & Similar Technologies

The PJ Vastraa website may use cookies and similar technologies to operate website features and improve customer experience.

Depending upon the website configuration, these may include:

Essential Cookies

Necessary for features such as:

  • shopping cart;
  • checkout;
  • security;
  • account login;
  • session management; and
  • basic website functionality.

Preference & Functionality Cookies

These may help remember:

  • customer preferences;
  • wishlist functionality;
  • browsing choices;
  • language or regional settings; and
  • other convenience features.

Analytics Cookies

Where analytics services are used, cookies or similar technologies may help us understand:

  • visitor numbers;
  • pages viewed;
  • website performance;
  • navigation patterns; and
  • general interaction with the website.

Advertising or Marketing Technologies

Where such technologies are introduced, they may be used to measure or improve advertising and marketing activity, subject to applicable consent requirements.

Where required by applicable law, non-essential cookies or similar technologies will be used subject to appropriate consent or choice mechanisms.

Users may also manage cookies through their browser settings.

Disabling certain cookies may affect features such as account login, cart persistence, wishlist functionality or checkout.

9. When We Share Personal Information

PJ Vastraa does not sell or rent customer personal information to independent data brokers for their own marketing purposes.

We may share information only where reasonably necessary for legitimate business operations, fulfilment, legal compliance or other lawful purposes.

Recipients may include:

Website & Technology Service Providers

Providers supporting:

  • website hosting;
  • e-commerce functionality;
  • technical infrastructure;
  • database management;
  • cybersecurity;
  • email or communication systems; and
  • website support.

Payment Providers

Banks, payment gateways and authorized financial-service providers necessary to process:

  • payments;
  • authentication;
  • refunds; and
  • transaction verification.

Courier & Logistics Providers

Relevant information such as:

  • recipient name;
  • shipping address;
  • telephone number;
  • email where required;
  • order/shipping reference; and
  • customs-related information

may be provided to delivery or logistics partners.

Manufacturers, Suppliers & Fulfilment Partners

Where necessary for an order, limited information may be provided to an authorized manufacturer, supplier, artisan, tailoring partner or fulfilment provider—for example where customization, direct fulfilment or order-specific production requires it.

Only information reasonably necessary for the relevant purpose should be shared.

Professional Advisers

Information may be shared where reasonably necessary with:

  • legal advisers;
  • accountants;
  • auditors;
  • tax professionals;
  • insurance advisers; or
  • other professional consultants

subject to appropriate confidentiality obligations and applicable law.

Government or Regulatory Authorities

Information may be disclosed where required or lawfully requested by:

  • courts;
  • law-enforcement authorities;
  • tax departments;
  • customs authorities;
  • consumer authorities;
  • regulators; or
  • other competent governmental bodies.

10. International Processing & Cross-Border Transfers

PJ Vastraa may serve customers outside India.

Some technology, communication, payment, hosting, analytics or logistics service providers may process information in India or other countries depending upon their infrastructure and the services used.

Where personal information is transferred or processed internationally, PJ Vastraa will take reasonable steps required under applicable law in relation to such processing or transfer.

Privacy and data-protection rules may differ between countries.

International customers may also have additional rights under laws applicable to them, where those laws apply to PJ Vastraa’s processing activities.

11. Data Security

PJ Vastraa takes reasonable technical and organizational measures intended to protect personal information against risks such as:

  • unauthorized access;
  • misuse;
  • accidental loss;
  • unauthorized disclosure;
  • alteration; or
  • destruction.

These measures may include appropriate access controls, website-security measures, protected administrative access and the use of reputable service providers.

However, no website, communication channel, electronic storage system or internet transmission can be guaranteed to be completely secure.

Customers should also protect their account passwords, devices and authentication information and should not share confidential payment credentials through insecure communication channels.

If we become aware of a personal-data incident requiring notification under applicable law, we will take steps required by that law.

12. How Long We Retain Personal Information

PJ Vastraa retains personal information only for as long as reasonably necessary for the purpose for which it was collected or for another lawful purpose.

Retention periods may depend upon factors including:

  • whether a customer account remains active;
  • order and transaction history;
  • tax and accounting requirements;
  • consumer and warranty matters;
  • returns and refunds;
  • fraud-prevention requirements;
  • contractual obligations;
  • disputes or legal proceedings;
  • statutory limitation periods; and
  • other applicable legal requirements.

Closing an account or requesting deletion does not necessarily require immediate deletion of every record.

For example, certain transaction, invoice, payment, tax, fraud-prevention or dispute records may need to be retained where required or permitted by law.

When information is no longer reasonably required, we may delete, anonymize or otherwise securely dispose of it as appropriate.

13. Accuracy of Your Information

Customers should provide accurate, complete and current information.

You may be responsible for updating information such as:

  • name;
  • email;
  • telephone number;
  • billing address;
  • shipping address; and
  • account information.

Incorrect information may affect fulfilment, delivery or customer support.

You may contact PJ Vastraa if you believe information associated with your account or transaction is inaccurate.

14. Your Privacy Rights & Choices

Depending upon the law applicable to you and the status of relevant legal provisions, you may have rights concerning your personal information.

These may include the right to:

  • obtain information about personal data processed about you;
  • request correction of inaccurate or incomplete information;
  • request updating of personal information;
  • request erasure or deletion where applicable;
  • withdraw consent where processing is based upon consent;
  • opt out of optional marketing communications;
  • raise a grievance regarding personal-data processing; and
  • exercise other rights made available under applicable law.

Some rights may be subject to lawful exceptions.

For example, we may retain information where necessary to:

  • comply with law;
  • maintain tax/accounting records;
  • establish or defend legal claims;
  • investigate fraud;
  • fulfil an existing contractual obligation; or
  • meet another lawful retention requirement.

Withdrawing consent will not ordinarily affect processing that was lawfully carried out before withdrawal.

To submit a privacy request, contact:

Email: pjvastraa@gmail.com

We may reasonably request information necessary to verify the identity of the person making the request before disclosing, changing or deleting personal information.

India’s DPDP framework and its notified Rules use a phased commencement model; therefore this policy deliberately expresses privacy rights to the extent applicable at the relevant time, rather than falsely representing every future statutory mechanism as already operational on the launch date. MeitY’s notified 2025 Rules phase significant provisions into force over different periods. MeitY

15. Withdrawal of Consent

Where we rely upon consent for a particular type of personal-data processing, you may withdraw that consent through an available method or by contacting us.

Withdrawal of consent may affect services that genuinely require the relevant information.

For example, if information necessary to fulfil an undelivered order is withdrawn before fulfilment, we may be unable to complete that order.

Withdrawal does not require us to erase information that must lawfully be retained.

16. Children & Minors

PJ Vastraa sells clothing that may include children’s collections, but our website and purchasing services are intended to be used by adults capable of entering into a valid transaction.

Children should not independently:

  • create customer accounts;
  • place orders;
  • submit payment details; or
  • provide personal information to PJ Vastraa

without appropriate involvement of a parent or legal guardian.

Where a parent or guardian provides a child’s size, measurements, name or other information necessary for a children’s-wear order, we will use that information only as reasonably necessary for the relevant order or another lawful purpose.

Parents and guardians should avoid supplying information about a child that is unnecessary for the transaction.

Where applicable law imposes additional requirements concerning children’s personal data, PJ Vastraa will comply with those requirements.

17. Legal Disclosure & Protection of Rights

PJ Vastraa may preserve or disclose personal information where reasonably necessary and legally permitted to:

  • comply with applicable law;
  • comply with a court order or lawful regulatory request;
  • respond to law-enforcement authorities;
  • satisfy tax or customs requirements;
  • investigate fraud or unauthorized transactions;
  • enforce contractual rights;
  • protect the rights, safety or property of customers, PJ Vastraa or third parties;
  • establish, exercise or defend legal claims; or
  • comply with other lawful obligations.

Only information reasonably relevant to the applicable purpose should be disclosed.

18. Business Reorganization or Transfer

If PJ Universe Ventures Private Limited undergoes a lawful:

  • merger;
  • restructuring;
  • acquisition;
  • transfer of business;
  • sale of assets;
  • succession; or
  • similar corporate transaction,

personal information associated with the relevant business may form part of that transaction where permitted by law.

Any such transfer will remain subject to applicable privacy and data-protection requirements.

19. Third-Party Websites & Platforms

The PJ Vastraa website may contain links to or interact with independent websites, platforms or services.

These may include services relating to:

  • social media;
  • payments;
  • shipping;
  • tracking;
  • communications; or
  • other external services.

Once you interact directly with an independent third party, its own privacy policy and terms may apply.

PJ Vastraa is not responsible for the independent privacy practices of third-party websites or platforms that we do not control.

Customers are encouraged to review the privacy policies of relevant third-party services.

20. Changes to This Privacy Policy

PJ Vastraa may update this Privacy Policy from time to time to reflect changes in:

  • applicable law;
  • regulatory requirements;
  • website functionality;
  • payment systems;
  • courier arrangements;
  • cookies or analytics technologies;
  • business operations; or
  • privacy practices.

The current version will be made available through the PJ Vastraa website with an appropriate Effective Date or Last Updated Date.

Where required by law, material changes may also be communicated through an appropriate additional notice or consent mechanism.

Customers are encouraged to review the current Privacy Policy periodically.

21. Privacy Requests & Customer Contact

For questions concerning this Privacy Policy, personal information or privacy-related requests, please contact:

PJ Vastraa
A Fashion Label from PJ Universe
Indian Roots • Global Style

Operated by:
PJ Universe Ventures Private Limited

Privacy / Customer Support Email: pjvastraa@gmail.com
WhatsApp / Customer Support: +91 70145 20175

Formal consumer grievances are handled through the Grievance Redressal mechanism stated in our Terms & Conditions.

The applicable Grievance Officer details and company address will also be displayed on the website as required before public launch.

Nothing in this Privacy Policy restricts any right to approach a competent regulator, consumer authority, data-protection authority, court or other forum where such right is available under applicable law.

22. Consent & Acknowledgement

By voluntarily providing personal information to PJ Vastraa, you acknowledge that such information may be processed for the purposes described in this Privacy Policy, subject to applicable law.

Where applicable law requires specific consent, PJ Vastraa will seek such consent through an appropriate affirmative mechanism rather than treating silence or inactivity as consent.

Consent for one purpose will not automatically be treated as consent for an unrelated purpose where separate consent is required.

Customers may exercise applicable withdrawal and privacy rights as described in this Policy.