01What we collect
We collect only what an order needs, plus what the law requires us to keep.
| Data | Why |
|---|---|
| Name, email, mobile number | To process the order and send confirmation, dispatch and delivery updates. |
| Delivery address and pincode | To get the parcel to you and to check serviceability before you pay. |
| Order history | To handle returns, refunds and support, and to meet tax record-keeping rules. |
| Account password | Stored only as a bcrypt hash. It cannot be read back, by us or anyone else. |
| Payment reference IDs | To reconcile a payment with an order. We never receive or store card or UPI credentials. |
| Basic usage analytics | Aggregate page and traffic data, only if analytics is enabled on this store. |
Your wishlist and recently-viewed list are stored in your own browser unless you are signed in, in which case the wishlist is saved to your account.
02How we use it
- To fulfil and deliver your order, and to support you afterwards.
- To process refunds and returns.
- To meet legal, tax and accounting obligations.
- To detect and prevent fraudulent orders.
- To send marketing email only if you explicitly opted in — and every such email carries a working unsubscribe link.
We do not sell your personal data. We do not share it with advertisers.
04How we protect it
The site is served over HTTPS. Passwords are hashed with bcrypt. Database access is restricted, and administrative access is limited to the people who need it.
In line with RBI tokenisation guidance, no card data is stored on our servers at any point.
No system is perfect. If a breach affecting your data ever occurs, we will notify you and the relevant authority as required by law.
05How long we keep it
Order and invoice records are retained for the period Indian tax law requires. Account details are kept while your account is open. Marketing consent records are kept until you withdraw consent, and then for a short period to prove the withdrawal was honoured.
06Your rights
Under the Digital Personal Data Protection Act you may:
- Ask what personal data we hold about you.
- Have inaccurate data corrected.
- Ask for your data to be erased, where we are not legally required to keep it.
- Withdraw consent for marketing at any time.
- Nominate someone to exercise these rights on your behalf.
Write to grievance@firstindia.store and we will respond within 30 days. If you are not satisfied, you may escalate to the Data Protection Board of India.
08Children
We sell boys’ clothing, but we do not sell to children. Accounts and orders are for adults. We do not knowingly collect personal data from anyone under 18; if you believe we have, tell us and we will delete it.
09Changes to this policy
We will post any changes on this page and update the date in the sidebar. Material changes will also be emailed to account holders. This policy is governed by the laws of India, with disputes subject to the competent courts in India.
10Contact us about this
Questions about this document, or anything else, go to a person who can actually answer them.
- Email: support@firstindia.store
- Phone: 9211513914
- Registered office: second floor, 214 G-BLOCK, Capital Banquets BUILDING, vikaspuri, Capital Banquets Complex, Vikaspuri, New Delhi, South West Delhi, Delhi, 110018.
- Grievance officer: Aryan Rokaya and Rakesh — grievance@firstindia.store (see the grievance page)