Privacy Policy

1. About Studio Tokri

Studio Tokri is a fashion-technology platform operated by Studio Tokri Designers Hub Pvt Ltd. The Platform enables independent designers, tailors, boutiques, artisans, and creators to showcase and sell their designer clothing, handmade products, customised garments, and fashion accessories to a broader audience across India and internationally. The Platform also enables customers to discover designers, browse products and portfolios, communicate with designers, and place orders for ready-made or customised fashion products.

Studio Tokri acts as an intermediary platform. We facilitate connections between customers and independent designers but do not ourselves manufacture, sell, or deliver products unless expressly stated.

For enquiries, you may contact us at:

2. Information We Collect

We collect the following categories of information depending on how you interact with the Platform. All information collected is for operational purposes necessary to provide, maintain, and improve the Platform and its services.

A. Account Information

When you register, log in, or use your account, we may collect:

• Full name
• Email address
• Mobile number
• Password or login credentials (stored in encrypted form)
• OTP verification details
• Account preferences and settings
• Authentication and session information

B. Customer and Customisation Information

When you browse designer profiles, submit a custom request, contact a designer, or place an order or enquiry, we may collect:

• Design ideas, product requirements, and style preferences
• Size, fit, and measurement details
• Fabric, colour, budget, and delivery preferences
• Reference images, sketches, or inspiration images you upload
• Communications with designers conducted through the Platform
• Order-related details shared through the Platform

Note: Please refrain from sharing sensitive personal information (such as health data, religious beliefs, or financial details beyond what is necessary for payment) unless strictly required for your design or customisation request.

C. Designer, Artisan, and Boutique Information

When a designer, tailor, boutique owner, artisan, or seller registers, applies to join, or maintains a profile on the Platform, we may collect:

• Name, brand name, or boutique name
• Email address and mobile number
• City, state, and business location
• Portfolio images, product photographs, and design samples
• Product descriptions, pricing, and category details
• Social media or website links (where voluntarily provided)
• Business registration details, GST number, PAN, bank account, or payment details (where required for identity verification, onboarding, payouts, invoicing, or regulatory compliance)

D. Communication Information

When you contact us or use Platform communication features, we may collect:

• Your name and contact details
• Message content exchanged through Platform messaging features
• Complaint, feedback, or enquiry details
• Support interaction history

E. Payment and Transaction Information

At present, where designers handle payments and shipping independently, customers and designers may directly exchange information required to complete transactions outside the Platform. Studio Tokri may collect or process limited order-status or delivery-related information where such information is shared through the Platform. If Studio Tokri subsequently enables integrated payments, checkout, logistics, or delivery tracking, we may collect payment, billing, shipping, and transaction details through third-party payment gateways or logistics partners. In such event, this Privacy Policy will be updated accordingly, and appropriate notice will be provided.

F. Technical and Usage Information

When you visit or use the Platform, we may automatically collect:

• IP address
• Device type and identifiers
• Browser type and version
• Operating system
• Pages viewed and navigation paths
• Date and time of access
• Referring URLs
• Search queries within the Platform
• Clicks and interactions
• Information collected through cookies and similar technologies (see Section 8)

G. Information from Third Parties

We may receive information about you from third-party sources, including:

• Social login providers (such as Google or Facebook) if you choose to register or log in using these services, which may include your name, email address, and profile information
• Payment gateways or financial service providers, where integrated, for transaction verification and fraud prevention
• Logistics and delivery partners, where applicable, for order tracking and delivery status
• Publicly available sources for designer verification and due diligence purposes
• Referrals from other designers or users on the Platform

Information received from third parties is used only in accordance with this Privacy Policy and for the purposes described herein.

3. Purpose Limitation

All personal information collected through the Platform is used solely for operational purposes necessary to provide, maintain, secure, and improve the Platform and its services. We do not collect or process personal information beyond what is reasonably required for the purposes described in this Privacy Policy.

4. Legal Basis for Processing

We process personal information on the following legal bases, as applicable under relevant data protection laws:

• Contractual necessity: To perform our obligations under our Terms and Conditions and to facilitate transactions and communications between customers and designers through the Platform
• Legitimate interests: To operate, improve, and secure the Platform; to prevent fraud and misuse; to maintain Platform quality; and to communicate with users about their accounts and activities
• Legal compliance: To comply with applicable laws, regulations, and legal processes, including tax, accounting, and regulatory requirements
• Consent: Where required by law, we obtain your consent before processing certain categories of personal information or for specific purposes such as marketing communications

5. How We Use Your Information

We use personal information for the following operational purposes:

• To create, manage, and secure user accounts
• To enable customers to discover designers, browse profiles, view portfolios and product listings, and make informed decisions
• To enable customers to submit customisation requests and communicate with designers before and during the order process
• To enable designers to understand and respond to customer requirements
• To facilitate communication between customers and designers through the Platform
• To verify designer profiles, product listings, and credentials, and to maintain Platform quality and trust
• To display designer profiles, portfolios, products, and listings to customers across the Platform
• To provide customer and designer support and respond to enquiries
• To send OTPs, account updates, and service-related notifications
• To detect, prevent, and address fraud, misuse, fake profiles, unauthorised access, and security incidents
• To analyse and improve Platform performance, functionality, and user experience
• To comply with legal, regulatory, tax, and security requirements, and to resolve disputes
• To send promotional communications, offers, or Platform announcements (where permitted by law or with your consent)

6. Sharing of Information

We may share your information with the following categories of recipients, solely for the purposes described in this Privacy Policy:

A. With Designers and Sellers

If you submit a custom request, browse a designer’s profile and initiate contact, or place an order, we share relevant details (such as your name, request details, preferences, measurements, reference images, and contact information) with the relevant designer to enable them to respond to your enquiry and fulfil your order.

B. With Customers

If you are a designer, artisan, boutique, or seller, we display your public profile details, portfolio, product listings, pricing, category, location, and communication options to customers on the Platform to enable discovery and engagement.

C. With Service Providers

We engage trusted third-party service providers who assist us in operating the Platform, including hosting providers, cloud infrastructure providers, analytics providers, email and OTP service providers, security tools, payment processors (if applicable), logistics partners (if applicable), customer support tools, and IT service providers. These service providers are contractually obligated to protect your information, maintain confidentiality, and use it only for the purposes for which it was disclosed to them.

D. For Legal and Safety Purposes

We may disclose information where we reasonably believe in good faith that such disclosure is necessary to:

• Comply with applicable law, regulation, or legal process
• Respond to lawful requests from governmental, regulatory, or judicial authorities
• Protect the rights, safety, or property of Studio Tokri Designers Hub Pvt Ltd, our users, or the public
• Investigate or address fraud, security incidents, or violations of our policies
• Enforce our Terms and Conditions or other Platform policies

E. Business Transfers

In the event of a merger, acquisition, reorganisation, sale of assets, or insolvency, your information may be transferred to the successor entity as part of the transaction, subject to applicable data protection requirements. We will provide notice of any such transfer where required by law.

F. With Your Consent

We may share your information with other third parties where you have provided your explicit consent for such sharing.

7. Do Not Sell or Share

Studio Tokri does not sell your personal information for monetary consideration. We do not share your personal information for cross-context behavioural advertising purposes.

Any sharing of personal information is limited to the purposes described in Section 6 of this Privacy Policy, including sharing with designers to fulfil orders, with service providers to operate the Platform, and as otherwise required by law or with your consent.

8. Cookies and Tracking Technologies

Studio Tokri uses cookies and similar technologies for the following purposes:

• To maintain user sessions and authentication
• To remember user preferences and settings
• To analyse Platform usage and improve performance
• To understand user interactions and enhance product and designer discovery
• To support security measures and fraud prevention

Your Choices: You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of Platform features. For more information, refer to your browser’s help documentation.

9. Do Not Track Signals

There is currently no universally accepted standard for how websites should respond to “Do Not Track” (DNT) browser signals. As a result, the Platform does not currently respond differently to DNT signals transmitted by web browsers.

You may control cookies and tracking technologies through your browser settings as described in Section 8. If a uniform standard for responding to DNT signals is established in the future, we will update this Privacy Policy and our practices accordingly.

10. Responsibilities of Designers and Customers

Studio Tokri serves as an intermediary platform connecting customers with independent designers, artisans, tailors, boutiques, and sellers. The following responsibilities apply:

Designer Responsibilities:

• Designers who receive customer information through the Platform are responsible for handling such information in accordance with applicable data protection laws.
• Customer information shall be used solely for the purpose of fulfilling the agreed order or customisation request.
• Designers shall implement appropriate security measures to protect customer information in their possession.
• Designers shall not misuse, sell, or share customer contact details, measurements, images, design references, or order information for any purpose unrelated to the transaction.
• Designers are independently responsible for their own compliance with applicable privacy and data protection laws in respect of information they collect or process outside the Platform.

Customer Responsibilities:

• Customers are advised to exercise discretion and share only information that is necessary for the order or customisation request.
• Customers should avoid sharing unnecessary sensitive information with designers or other users.
• Customers are encouraged to review designer profiles and ratings on the Platform before sharing personal information.

Studio Tokri is not responsible for the data handling practices of independent designers or sellers in respect of information exchanged or processed outside the Platform.

11. Marketing Communications

We may send you communications about Studio Tokri, including information about new designers, product categories, offers, Platform features, or content related to handmade and custom fashion.

Opt-Out: You may opt out of marketing communications at any time by:

• Following the unsubscribe instructions included in our messages
• Contacting us at riya.singh@nakkashii.com

Opting out of marketing communications will not affect service-related communications (such as account notifications, security alerts, OTPs, order updates, dispute notifications, or policy changes) that are necessary for the operation of your account and the Platform.

12. Platform Communication Monitoring

Communications conducted through the Platform’s messaging features may be monitored, reviewed, or analysed for the following purposes:

• Ensuring user safety and preventing harassment or abuse
• Detecting and preventing fraud, scams, or deceptive practices
• Resolving disputes between customers and designers
• Quality assurance and improving Platform services
• Enforcing Platform policies and Terms and Conditions
• Complying with legal obligations and responding to lawful requests

By using the Platform’s communication features, you acknowledge and consent to such monitoring. We recommend exercising discretion in the information you share through Platform messaging and avoiding the inclusion of unnecessary sensitive personal information.

13. Data Security

We implement reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction. These measures include, as appropriate:

• Access controls and role-based permissions
• Authentication protocols and encrypted credential storage
• Secure hosting and cloud infrastructure
• Encryption of data in transit and at rest, where appropriate
• Monitoring and logging of access
• Periodic security assessments and reviews

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their login credentials, using strong passwords, and promptly notifying us of any suspected unauthorised access to their account.

14. Account Termination and Data Deletion

Account Deactivation: If you deactivate your account, your profile will be hidden from other users, but your data may be retained temporarily to allow for account reactivation or to address any pending matters.

Account Deletion: If you request deletion of your account, we will delete or anonymise your personal information from our active systems, subject to the exceptions below.

Retention of Legally Required Records: Certain information may be retained as required by applicable law for tax, accounting, regulatory, or legal compliance purposes, or to resolve disputes, enforce agreements, or protect our legal rights.

Anonymisation: Where complete deletion is not feasible, we will anonymise your personal information so that it can no longer be used to identify you.

Third-Party Data: Please note that information you have shared with designers, sellers, or other third parties through the Platform may remain in their possession and is subject to their own data handling practices.

To request account deletion, contact us at: riya.singh@nakkashii.com. We will process deletion requests within the timeframes prescribed by applicable law.

15. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, including:

• Providing our services and maintaining user accounts
• Completing customisation or order-related interactions
• Resolving disputes and addressing complaints
• Preventing fraud or misuse
• Complying with legal, tax, accounting, or regulatory obligations

When personal information is no longer required for any of the above purposes, we will delete, anonymise, or securely archive it in accordance with our internal data retention policies and applicable law. Anonymised or aggregated data that can no longer identify you may be retained indefinitely for analytical purposes.

16. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we are committed to:

• Notifying the Data Protection Board of India (once constituted) and any other relevant regulatory authority within the timeframes prescribed under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and applicable rules
• Notifying affected users without undue delay where required by law, providing information about the nature of the breach and recommended protective measures
• Taking immediate steps to contain the breach and implement remediation measures
• Maintaining records of data breaches and our response actions

If you believe your personal information has been compromised or you suspect a security incident involving the Platform, please contact us immediately at: riya.singh@nakkashii.com

17. Your Privacy Rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Right of Access: Request confirmation of whether we process your personal data and obtain a copy of such data
• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Deletion: Request deletion or erasure of your personal information, subject to legal retention requirements
• Right to Withdraw Consent: Withdraw consent where processing is based on consent, without affecting the lawfulness of processing prior to withdrawal
• Right to Data Portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format (where applicable under law)
• Right to Object: Object to certain processing activities based on legitimate interests (where applicable under law)
• Right to Grievance: Raise a complaint regarding how your personal data is handled
• Right to Nominate: Nominate another person to exercise your rights on your behalf in accordance with applicable law

To exercise any of these rights, contact us at: riya.singh@nakkashii.com. We may require verification of your identity before processing your request. We will respond to valid requests within the timeframes prescribed by applicable law.

18. Automated Decision-Making

The Platform may use automated processes for the following purposes:

• Fraud detection and prevention
• Security monitoring and threat detection
• Content moderation and policy enforcement
• Search ranking, recommendations, and personalisation of designer and product discovery

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects on you without human involvement, except where such processing is:

• Necessary for entering into or performing a contract with you
• Authorised by applicable law
• Based on your explicit consent

Where automated decision-making is used, you have the right to request human review of the decision, express your views, and contest the decision by contacting us at: riya.singh@nakkashii.com

19. Consent and Withdrawal

Where we rely on your consent to process personal information, you may withdraw your consent at any time by contacting us at the details provided in this Privacy Policy.

Please note that:

• Withdrawal of consent may affect your ability to use certain features of the Platform, such as account access, custom request submission, designer communication, or order-related support
• Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal
• Certain processing activities may continue on other legal bases (such as contractual necessity, legitimate interests, or legal compliance) notwithstanding withdrawal of consent

20. Children’s Privacy

The Platform is intended for users who are 18 years of age or older and who are legally capable of entering into binding contracts under applicable law. Users under 18 years of age should use the Platform only with the active involvement and verifiable consent of a parent or legal guardian.

We do not knowingly collect personal information from children under 18 years of age without appropriate parental or guardian consent. If we become aware that we have collected personal information from a child without the required consent, we will take prompt steps to delete or restrict such information.

If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us at the details provided in this Privacy Policy.

21. User-Generated Reviews and Ratings

The Platform may allow customers to submit reviews and ratings of designers, products, or services. Please note the following:

• Reviews and ratings may be publicly visible on the Platform along with your display name
• Do not include personal information of third parties in your reviews without their consent
• Do not include your own sensitive personal information in reviews
• Studio Tokri reserves the right to moderate, edit, or remove reviews that violate Platform policies, contain inappropriate content, or infringe third-party rights
• Designers should not include customer personal information in their responses to reviews

By submitting a review or rating, you grant Studio Tokri a non-exclusive, royalty-free licence to display, reproduce, and distribute such content on the Platform.

22. Confidentiality of Design Information

Studio Tokri recognises the importance of protecting proprietary design information shared through the Platform. We commit to the following:

• We will not use proprietary design information, custom design requests, or creative concepts shared by users for our own commercial purposes beyond what is necessary for Platform operations
• We will not disclose such information to third parties except as necessary to provide Platform services, comply with legal obligations, or with your consent
• We implement reasonable security measures to protect design information in our possession
• Access to design information is limited to personnel with a legitimate need for such access

Designers and customers are independently responsible for maintaining the confidentiality of design information exchanged between them and for any agreements they may enter into regarding intellectual property and confidentiality.

23. Uploaded Content and Intellectual Property

Users may upload or share images, sketches, inspiration references, measurements, design ideas, product photographs, portfolio images, or other content through the Platform (“User Content”). By uploading User Content, you represent and warrant that:

• You have the necessary rights, licences, or permissions to share such content
• The content does not infringe any third-party intellectual property rights, privacy rights, or other proprietary rights
• You grant Studio Tokri Designers Hub Pvt Ltd a non-exclusive, royalty-free, worldwide, sublicensable licence to use, display, reproduce, and distribute such content solely as necessary to operate, provide, and improve the Platform and its services

Studio Tokri does not claim ownership of your original designs, creative works, or User Content. The licence granted above is limited to what is necessary for Platform operations and does not transfer ownership of any intellectual property.

Public designer profiles and product content will be displayed on the Platform and may be visible to all users and visitors.

24. Third-Party Links and Services

The Platform may contain links to third-party websites, designer pages, payment services, courier services, social media pages, or external tools. These links are provided for convenience only.

Studio Tokri is not responsible for the privacy practices, content, security, or data handling of third-party websites or services. We encourage you to review the privacy policies of any third parties before sharing personal information with them. Any interaction with third-party services is governed by the terms and privacy policies of those third parties.

25. International Data Transfers

Certain service providers used by Studio Tokri (such as hosting, cloud infrastructure, analytics, communication, or security providers) may process information in India or in other jurisdictions. Where personal data is transferred or processed outside India, we will implement appropriate safeguards as required under applicable data protection laws (including the Digital Personal Data Protection Act, 2023, and any rules framed thereunder, as applicable) to ensure adequate protection of your information.

26. Indemnification

You agree to indemnify and hold harmless Studio Tokri Designers Hub Pvt Ltd, its directors, officers, employees, and agents from and against any claims, liabilities, damages, losses, or expenses (including reasonable legal fees) arising out of or in connection with:

• Your violation of this Privacy Policy
• Your misuse of the Platform or another user's personal information
• Your breach of any applicable law relating to data protection or privacy
• Any content you upload or share through the Platform that infringes third-party rights

27. Limitation of Liability

To the maximum extent permitted by applicable law, Studio Tokri Designers Hub Pvt Ltd shall not be liable for any indirect, incidental, consequential, special, or punitive damages arising out of or in connection with:

• Unauthorised access to or alteration of your personal information resulting from circumstances beyond our reasonable control
• Data handling practices of independent designers, sellers, or third parties
• Your failure to maintain the confidentiality of your account credentials
• Any third-party websites, services, or content linked from the Platform

Nothing in this Privacy Policy excludes or limits liability that cannot be excluded or limited under applicable law.

28. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (to the extent in force), and any other applicable data protection legislation.

Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Delhi, India.

29. Severability

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving its original intent.

30. Grievance Redressal

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the details of the Grievance Officer are as follows:

We will acknowledge receipt of your complaint or request within 48 hours and endeavour to resolve it within 30 days from the date of receipt, or within such other timeframe as prescribed by applicable law.

If you are not satisfied with our resolution, you have the right to escalate your complaint to the appropriate data protection authority or regulatory body, including the Data Protection Board of India (once constituted under the Digital Personal Data Protection Act, 2023) or any other competent authority under applicable law.

31. Entire Agreement

This Privacy Policy, together with our Terms and Conditions and any other policies referenced herein, constitutes the entire agreement between you and Studio Tokri Designers Hub Pvt Ltd regarding the collection, use, storage, sharing, and protection of your personal information through the Platform.

This Privacy Policy supersedes all prior understandings, agreements, representations, and warranties, whether written or oral, regarding the subject matter hereof.

32. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, legal requirements, or business practices.

When we make changes, we will:

• Revise the "Last Updated" date at the top of this Policy
• Provide notice through the Platform, by email, or through other appropriate means where the changes are material or where required by law

Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the Platform and contact us to request deletion of your account and personal information. We encourage you to review this Privacy Policy periodically.