Privacy Policy

Last updated: 21 May 2026

At Fancydresscostume.in — operated by Rita Barman, sole proprietor, trading as Fancy Dress Costume from C-22, Second Floor, Surya Nagar, Ghaziabad, Uttar Pradesh 201011, India (GSTIN: 09BPJPB0780B1ZA; referred to as "we," "us," or "our") — we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights as a customer. It applies to our website, our physical store, and all interactions you have with us by phone, WhatsApp, or email.

By using our website or services, you agree to the practices described here. We comply with India's Digital Personal Data Protection Act, 2023, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and follow internationally recognized privacy standards (including GDPR principles) so that customers visiting from any country are treated with the same level of care.

1. Information we collect

When you visit our store

To complete a rental or purchase, we collect: your full name, phone number, and address (for delivery and contact). For rental transactions, we may also note government-issued ID details verified visually at our counter (we do not retain photocopies of Aadhaar, PAN, or any other government ID).

When you use our website

We collect any information you provide voluntarily through forms (name, phone, email, school name, inquiry details) and we may automatically collect:

• IP address, browser type, device information, operating system
• Pages visited, time spent on pages, referring website
• Cookies and similar technologies for site functionality and analytics
• Analytics data via Google Analytics, Meta Pixel, and similar tools (when active)
• Communication records (WhatsApp messages, emails, call logs) when you contact us

What we never collect

We do not collect or retain copies of government-issued identity documents. We do not collect bank account details directly — payments go through our payment processor (Razorpay, when active), which handles card and account information separately under their own privacy practices. We do not collect children's personal details on our website; for school orders, individual student information is captured offline by our field measurement team during in-person visits.

2. How we use your information

We use your information to:

• Process and fulfill your rental, retail, school, wholesale, or franchise inquiry
• Coordinate delivery, pickup, and returns
• Communicate with you about your order, including reminders and confirmations
• Respond to your questions, complaints, or feedback
• Improve our website, products, and services
• Comply with legal, tax, and audit requirements under Indian law
• Prevent fraud and ensure the security of our systems

3. Who we share your information with

We share your information only with operational partners who help us serve you, and only to the extent necessary. These include:

• Delivery and pickup partners — when you have an active order requiring transport
• Payment processors (such as Razorpay, when active) — to process payments securely
• Communication services — for sending transactional emails, SMS, and WhatsApp messages related to your order
• Hosting and analytics providers — to operate our website (Vercel, Google Analytics, etc.)
• Legal authorities — only when required by law, court order, or to protect our rights and safety

We do not sell your personal information to anyone. We do not share your data with third parties for their independent marketing or advertising purposes.

4. How long we keep your information

We retain your information for up to 5 years from your last interaction with us. This longer retention period is necessary to comply with Indian tax laws, audit requirements, and to maintain accurate business records. After this period, we either delete your data or anonymize it so that it can no longer be linked to you.

You can request earlier deletion at any time (see Section 6). Once deleted, certain transaction records may be retained in anonymized form for tax and statutory compliance, but no personally identifying information will remain.

5. How we protect your information

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), access controls, and secure data storage. Despite our best efforts, no online transmission or storage system is 100% secure. We cannot guarantee absolute security, but we will notify you and the relevant authorities if a data breach affecting you occurs, in line with our DPDP obligations.

6. Your rights

Under Indian DPDP law and international privacy standards, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correct — request correction of inaccurate or incomplete information
• Delete — request deletion of your information (subject to legal retention requirements)
• Object — object to certain uses of your information, including marketing communications
• Withdraw consent — at any time, where we process data based on your consent
• Lodge a complaint — with the Data Protection Board of India or other relevant authority

To exercise any of these rights, contact us at fancydressncr@gmail.com or call us on +91 9871278984. We will respond within 30 days. There is no fee for these requests, except for repeated or excessive requests where we may charge a reasonable administrative fee.

7. Cookies and tracking

Our website uses cookies and similar technologies for essential functionality (such as remembering your preferences) and for analytics (to understand how visitors use our site). You can disable cookies in your browser settings, but some features of the site may not work properly. By continuing to use the site, you consent to our use of cookies.

8. International visitors

Our business operates from India. If you are visiting our website or contacting us from outside India, your information will be transferred to and processed in India. We follow international privacy standards (including GDPR principles for European visitors) to ensure your data is treated with care regardless of where you are located.

9. Children's privacy

Our products are designed for children, but our website and services are intended for use by adults (parents, school administrators, retailers). We do not knowingly collect personal information directly from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when changes were made. For significant changes, we will notify you by email (if we have your address) or via a prominent notice on our website. Continued use of our services after changes means you accept the updated policy.

11. Grievance officer

As required by India's Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the following individual is designated as our Grievance Officer to address any complaints regarding the collection, use, or processing of your personal data:

12. Contact us

For any privacy-related questions or to exercise your rights: