Privacy Policy - The Outliers Studio

Last Updated: July 20, 2026

Welcome to The Outliers Studio (referred to as "we", "us", "our", or the "Company"). We operate the e-commerce website at https://brand-two-mocha.vercel.app (the "Website").

This Privacy Policy is designed to comply with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020 of India. It explains how we collect, process, store, share, and protect the personal data of our users (referred to as "Data Principals", "you", or "your").

By using our Website or services, you acknowledge that you have read and understood this Privacy Policy. Your consent to our processing of your personal data is obtained through explicit, clear, and unambiguous opt-ins where required.

1. What Personal Data We Collect

We collect only the personal data necessary to provide you with our premium streetwear products and a seamless user experience.

A. Information You Provide Directly

Identity Data: Full name, gender, date of birth (optional, for age verification/birthday promotional programs).
Contact Data: Billing address, delivery address, phone number, and email address.
Account Credentials: Username, password, security options (when you create a customer account).
Communication Data: Records of your communications with our customer support teams via email, phone, or WhatsApp.

B. Information Collected Automatically

Device & Technical Data: IP address, browser type, operating system, network provider, and device identifiers.
Usage & Analytics Data: Pages visited, products viewed, time spent on pages, referral sources, and search queries (via Google Analytics, Meta Pixel, and Google Tag Manager).
Cookies & Tracking Data: We use cookies to manage shopping carts, maintain sessions, and offer personalized content. (For details, please review our Cookie Policy).

C. Information from Third Parties

Payment Information: We do not store or process your financial details (credit/debit cards, bank accounts, UPI credentials). Payments are processed securely via our payment gateway partner, Razorpay. Razorpay shares transaction status details (success/failure) and transaction IDs with us to confirm orders.

2. Grounds & Purposes for Data Processing

Under Section 6 of the DPDPA 2023, we process your personal data under the following lawful grounds:

A. Explicit Consent

We process your data for marketing communications, personalized suggestions, and newsletters only when you have given us explicit, affirmative consent.

B. Legitimate Use / Performance of Contract

We process your data to fulfill your order, which includes:

Managing payments via Razorpay.
Delivering packages to your address using shipping partners.
Informing you about order updates via Resend (email), SMS, and WhatsApp.
Handling refunds, exchanges, or customer service inquiries.

C. Legal Obligation

We process and retain data to comply with Indian tax laws (such as GST compliance), financial regulations, or court orders.

3. Data Storage, Retention, and Location

Storage Infrastructure: Your data is stored on secure databases (MongoDB/PostgreSQL) hosted within secure, encrypted cloud environments. Digital assets (like product images or user-uploaded media) are stored in Cloudflare R2 Storage (encrypted at rest).
Data Location: In compliance with local laws, your personal data is stored and processed on servers located in India.
Data Retention: We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or reporting requirements. Once the purpose is complete or consent is withdrawn, we will permanently delete or anonymize your data, unless retention is mandated by law.

4. Third-Party Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share your data only with trusted service providers who help us run our business:

Payment Gateway: Razorpay (for processing payments).
Email Provider: Resend (for sending transactional and marketing emails).
Analytics Providers: Google Analytics and Google Tag Manager (for measuring website usage and performance).
Marketing & Advertising: Meta Pixel (for measuring ad performance and target advertising, subject to your cookie settings).
Logistics & Delivery: Third-party courier partners (for delivery and return pickups).
Legal Authorities: When required under Indian law to prevent fraud, address security issues, or comply with requests from law enforcement agencies.

5. Your Rights as a Data Principal (DPDPA, 2023)

Under the DPDPA 2023, you possess the following rights regarding your personal data:

Right to Access: You can request details of the personal data we hold about you and the processing activities we carry out.
Right to Correction & Erasure: You can request that we correct inaccurate or incomplete data, or erase your personal data when it is no longer necessary for the purpose it was collected.
Right to Withdraw Consent: You can withdraw your consent for data processing at any time (e.g., unsubscribing from marketing emails). The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right of Grievance Redressal: If you have any concerns regarding how your data is handled, you have the right to file a grievance with us or escalate it to the Data Protection Board of India.
Right to Nominate: You can nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact our Data Protection Officer at grievance@theoutliersstudio.com.

6. Children's Data

We do not target our services to, or knowingly collect personal data from, children under the age of 18 without parental consent. If we learn that we have collected personal data from a child under 18 years without verified parental consent, we will take immediate steps to delete that data.

7. Security Measures

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. Our website uses Secure Sockets Layer (SSL) encryption, and access to customer databases is strictly restricted to authorized personnel.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or changes in law. We will notify you of any material changes by posting the new policy on our Website and updating the "Last Updated" date.

9. Contact Us & Grievance Redressal

If you have any questions, feedback, or complaints regarding this Privacy Policy or your data rights, please contact our designated Grievance Redressal Officer / Data Protection Officer (DPO):

Name: Grievance Officer, The Outliers Studio
Address: Flat No. 402, 4th Floor, Block-A, Streetwear Residency, HSR Layout Sector 2, Bengaluru, Karnataka - 560102, India
Email: grievance@theoutliersstudio.com
Support Contact: +91 73044 06772

We will acknowledge your grievance within 36 hours and resolve it within 30 days of receipt, in accordance with applicable rules.