Privacy Policy

Label Charmie Galaiya (“Charmie Galaiya”, “we”, “us”, “our”) is a luxury Indian bridal couture house operating from an atelier in Mumbai, Maharashtra, India. We design and hand-craft made-to-order bridal lehengas, gowns and jacket sets, and we publish this website at labelcharmiegalaiya.in and labelcharmiegalaiya.com. Both addresses serve the same brand, the same catalogue and the same policies; this Privacy Policy applies to both.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), Label Charmie Galaiya is the Data Fiduciary that determines why and how your personal data is processed. If you are an individual whose personal data we hold, you are a Data Principal.

We keep collection deliberately narrow. This website has no shopping cart, no checkout and no customer accounts, so there is no order history, password or payment credential to collect. Specifically, we collect the following.

a. Information you give us through the enquiry form

The enquiry form on our Contact page asks for:

• Name and email address — required, so we can reply to you.
• Phone number — optional.
• Occasion (bridal, sangeet, reception, cocktail or other) and preferred budget range — optional, and used only to guide our response.
• Your message, including anything you choose to tell us about the piece you have in mind.
• An optional inspiration image you may attach.

b. Newsletter sign-up

If you subscribe through the form in our footer, we collect your email address and nothing else. You are asked to consent before subscribing and can unsubscribe at any time.

c. Look-book downloads

Before we send you a printed look-book from our Lookbook page, we ask for your name and contact number — both required — and your email address, which is optional. We also record which look-books you download and when. We use these details to send you the look-book and to follow up about a possible commission. So that you are not asked twice, your name and contact details are also kept in your own browser’s local storage; you can clear them at any time by clearing this site’s data.

d. WhatsApp enquiries

Our “Enquire to Buy” and “Chat on WhatsApp” buttons open a WhatsApp conversation with a message pre-filled with the piece you were viewing — its name, SKU, collection, colour, fabric, starting price, the size you selected and a link back to the page. When you send that message we receive your WhatsApp phone number and profile name along with whatever you write to us. Nothing you write reaches us until you press send in WhatsApp.

We do keep our own note of the tap itself — which piece was enquired about, the size selected, the page it happened on and the time — so that we know which designs are drawing interest. That note records the piece, not the person: it carries nothing that identifies you, and it is not linked to the WhatsApp conversation that follows.

e. Technical and usage information

Collected automatically when you browse, through our analytics tools and standard server logs:

• IP address (from which an approximate city-level location is inferred) and the date and time of your visit.
• Device type, operating system, browser, screen size and language.
• The pages and products you view, how you arrived at the site (for example a search engine, an Instagram link or a direct visit), and how you move between pages.
• Cookies and similar identifiers set by Google Analytics and Google Tag Manager — see the Cookies section below.

f. Information stored only on your own device

Your wishlist and your recently viewed pieces are saved in your browser’s local storage. This data stays on your device, is never transmitted to us or to anyone else, and is erased when you clear your browser data. (The look-book details in (c) are kept there too, but those you gave us deliberately and we already hold them.)

g. What we do not collect

• Payment details. There is no checkout on this website. We never ask for and never receive your card, UPI or bank details through it. Payment for a commissioned piece is arranged separately and directly with the atelier.
• Passwords or account credentials — the site has no login.
• Sensitive personal data such as government identifiers, health, biometric, religious or caste information. Please do not send us any of this.

We process personal data only for the purposes below, and only for as long as those purposes require.

• To answer your enquiry — to reply, suggest pieces, quote a price, discuss customisation, and arrange measurements, fittings and delivery for a commissioned piece.
• To arrange appointments — to schedule and confirm in-studio or virtual styling consultations.
• To fulfil a commission — to make, finish and ship a made-to-order garment and to keep you updated on its progress.
• To send marketing communications — collection launches, look-books and atelier news, but only where you have subscribed or asked for them. Every message carries a way to opt out.
• To understand and improve the website — aggregate analytics showing which collections and pieces draw interest, so we can improve the catalogue, the photography and the navigation.
• To keep the site secure and working — server logs used to diagnose faults and detect abuse.
• To meet legal and accounting obligations — where Indian law requires us to retain or produce records.

We do not use your personal data to make automated decisions that produce legal or similarly significant effects on you, and we do not profile you beyond the aggregate analytics described above.

Under the DPDP Act we may process your personal data on the basis of your consent, or for certain legitimate uses recognised by the Act.

• Consent. You give it freely, specifically and unambiguously by submitting the enquiry form, subscribing to the newsletter, requesting a look-book, or messaging us on WhatsApp. Your consent is limited to the purpose stated at the point of collection, and you may withdraw it at any time (see Your Rights below). Withdrawing consent does not affect processing already carried out while it was in force.
• Voluntary provision for a specified purpose. Where you voluntarily give us your data for a purpose and have not indicated you object to its use for that purpose — for example giving us your measurements so a garment can be tailored to you.
• Compliance with law. Where we must process or keep data to comply with an Indian legal obligation, or in response to a lawful order.

Where you are located outside India, local data protection law may also apply to you. We honour access, correction, deletion and objection requests from anyone who contacts us, regardless of where they live.

This website uses Google Tag Manager to manage its measurement tags and Google Analytics 4 to understand how the site is used. Each of our two domains is a separate Google property, so data from labelcharmiegalaiya.in and labelcharmiegalaiya.com is measured separately.

These tools set cookies and similar identifiers that allow us to:

• distinguish one visit from another and one visitor from another, without knowing who you are;
• count page views and sessions, and measure how long pages are read;
• see which collections, look-books and products attract interest;
• understand where our visitors come from — search engines, social media, or direct visits;
• infer an approximate, city-level location from your IP address.

We do not use these cookies to serve you advertising on this website, and we do not sell the data they generate. Google processes this information as our service provider under its own privacy policy; you can also install Google’s Analytics opt-out browser add-on to stop your data being sent.

Your control. Every major browser lets you block or delete cookies, and most offer a “Do Not Track” or private browsing mode. Blocking cookies will not stop you browsing or enquiring — nothing on this site depends on them. Your wishlist and recently-viewed list use local storage rather than cookies, and clearing your browser data will empty them.

We do not sell your personal data, and we do not rent, trade or otherwise make it available to third parties for their own marketing.

We share the minimum necessary with the service providers below, each of which is permitted to use it only to perform its service for us:

Where a commission proceeds, we also share the delivery details you give us with the courier or logistics partner carrying your parcel, purely so it can be delivered.

We may additionally disclose information where we are required to by law, court order or a lawful request from a public authority, or where disclosure is necessary to establish, exercise or defend a legal claim, or to protect the rights and safety of our customers, our artisans or the house.

Some of these providers process data on servers outside India. Where that happens, transfers are made in accordance with the DPDP Act and any restrictions notified by the Central Government.

• Enquiries that do not become commissions — kept for up to 24 months, so we can pick up a conversation if you return to us, then deleted.
• Commission and order records — kept for as long as is necessary to complete the commission and thereafter for the period Indian tax and accounting law requires.
• Newsletter subscriptions — kept until you unsubscribe, after which we retain only the minimal record needed to honour your opt-out.
• Look-book download details — kept for up to 24 months from your last download so we can follow up on your interest, then deleted.
• Analytics data — retained by Google Analytics for the maximum period set on our property, and thereafter available to us only in aggregate.
• Server logs — kept for a short period for security and diagnostic purposes.

When personal data is no longer needed for the purpose it was collected for, and we are not required to retain it by law, we erase it.

The Digital Personal Data Protection Act, 2023 gives you the following rights over your personal data. We honour them free of charge and respond as quickly as we reasonably can.

• Right to access information — to ask us for a summary of the personal data we hold about you, how we are processing it, and the identities of anyone we have shared it with.
• Right to correction and erasure — to have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased where it is no longer needed for the purpose it was collected for and we are not required by law to keep it.
• Right to withdraw consent — to withdraw, at any time, consent you previously gave. Withdrawing is as easy as giving it: email us, or use the unsubscribe link in any marketing message.
• Right of grievance redressal — to complain to us about how we have handled your data or your request, using the details in the Contact section below. We will address it before you need to escalate.
• Right to nominate — to nominate another individual who may exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email charmiegalaiya23@gmail.com from the address you contacted us from, telling us which right you wish to exercise. We may ask you a question or two to confirm it is really you before we act.

You also have a duty under the DPDP Act to give us information that is accurate and not misleading, and not to make false or frivolous complaints. If you are not satisfied with our response to a grievance, you may escalate it to the Data Protection Board of India.

This website is intended for adults. We do not knowingly collect personal data from anyone under the age of 18, and we do not direct any marketing at children or carry out tracking or behavioural monitoring of them. If you believe a child has given us personal data, contact us and we will delete it.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration and loss. This website is served entirely over an encrypted HTTPS connection; enquiries are transmitted over encrypted connections and reach a small number of people at the atelier who need them to answer you.

No transmission over the internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal as required by the DPDP Act.

Our site links out to WhatsApp, Instagram, Facebook, Pinterest and an embedded map, and our look-books are published as downloadable PDFs. Once you follow a link away from this website you are on someone else’s service, governed by their privacy policy and not by ours. We are not responsible for the content or the data practices of any external site, and we encourage you to read their policies.

We may update this Privacy Policy to reflect changes in how the house operates, in the tools this website uses, or in the law. The revised version takes effect when it is published here, and the “Last updated” date at the top of this page always tells you when it last changed. Where a change materially affects your rights, we will make it prominent rather than quiet.

For any question about this policy, to exercise a right under the DPDP Act, or to raise a grievance about how your personal data has been handled, contact:

Please put “Privacy” or “DPDP Request” in your subject line so it reaches the right person quickly. If our response does not resolve your grievance, you may escalate the matter to the Data Protection Board of India.