Privacy policy

Last updated: September 28, 2026

Privacy Policy

At Scuffo, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights available to you when you use our website, purchase our products, or communicate with us.

By using www.scuffo.in placing an order, creating an account, or otherwise providing information to us, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

This Privacy Policy applies to Scuffo,  with its principal place of business at:

Trichy

For questions or concerns regarding your personal data or this Privacy Policy, you can contact us at:

Email: hathimjahir@gmail.com
Phone: 8825762019

For the purposes of applicable Indian data-protection law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"), [STORE NAME] may act as the entity determining the purposes and means of processing your personal data.

2. Information We Collect

We collect only information that is reasonably necessary for operating our business, providing our products and services, processing orders, communicating with customers, and improving your experience.

Information You Provide Directly

When you purchase a product, create an account, contact us, subscribe to communications, or otherwise interact with us, we may collect:

  • Full name
  • Email address
  • Mobile/telephone number
  • Billing address
  • Shipping/delivery address
  • Payment and transaction-related information
  • Order history and details of products purchased
  • Information you provide when contacting customer support
  • Reviews, feedback, or other content you voluntarily submit
  • Any other information you choose to provide to us

We do not generally need to receive or store your complete payment-card details. Payments may be processed directly by third-party payment service providers, which process payment information according to their own privacy policies and security practices.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Pages viewed and interactions with our website
  • Approximate location derived from technical information
  • Referring website or source
  • Date and time of visits
  • Website performance and diagnostic information

Some of this information may be collected through cookies and similar technologies.

3. How We Use Your Information

We may use personal information for purposes including:

Processing and Delivering Orders

We use your information to:

  • Process and confirm purchases
  • Process payments
  • Pack and ship your orders
  • Provide delivery updates
  • Handle returns, refunds, replacements, and exchanges
  • Provide customer support

Operating and Improving Our Website

We may use information to:

  • Operate and maintain our website
  • Improve website functionality and user experience
  • Understand how customers interact with our website
  • Detect technical problems
  • Prevent fraudulent or unauthorized activity
  • Maintain website security

Communications

We may use your contact information to communicate with you about:

  • Your orders
  • Shipping and delivery
  • Returns or refunds
  • Customer-service requests
  • Important changes to our services or policies

Where required by applicable law, we will obtain your consent before sending promotional communications. You may unsubscribe from marketing communications at any time.

Marketing and Advertising

Where permitted by applicable law and subject to any required consent, we may use certain information to understand customer interests, measure advertising performance, and provide more relevant advertising.

This may involve advertising and analytics providers such as Meta, Google, Shopify, or other services that we use from time to time.

We do not sell your personal information as a standalone product to third parties.

Legal and Business Purposes

We may process information when necessary to:

  • Comply with applicable laws and legal obligations
  • Respond to lawful requests from authorities
  • Establish, exercise, or defend legal claims
  • Prevent fraud, abuse, or other unlawful activity
  • Protect our rights, customers, employees, and business
  • Maintain appropriate business and financial records

4. Legal Basis and Consent

We process personal data only for lawful purposes and in accordance with applicable law.

Depending on the circumstances, processing may be necessary to provide goods or services you have requested, comply with legal obligations, pursue certain legitimate uses permitted by applicable law, or be based on your consent.

Where consent is required, we will request it in a clear and understandable manner. Under the DPDP Act, consent is intended to be free, specific, informed, unconditional, and unambiguous, and a person may withdraw consent where consent is the basis for processing.

Withdrawing consent does not affect the legality of processing that occurred before withdrawal. In certain circumstances, we may continue processing information where processing is otherwise permitted or required by applicable law.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies to provide functionality, remember preferences, understand website usage, and improve our services.

Cookies may be used for purposes such as:

  • Keeping items in your shopping cart
  • Remembering preferences
  • Maintaining login or account sessions
  • Understanding website traffic
  • Measuring advertising effectiveness
  • Improving website performance
  • Providing relevant marketing or advertising

Some cookies are necessary for the website to function and may not be disabled through our website settings.

You may be able to control or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

6. Third-Party Services

We may use trusted third-party service providers to operate our business. These providers may process personal information on our behalf or independently according to their own terms and privacy policies.

Depending on the services we use, these may include:

  • Shopify — website and e-commerce infrastructure
  • Payment providers — payment processing
  • Shipping and logistics providers — order delivery and tracking
  • Google — analytics, advertising, or related services
  • Meta — advertising and measurement services
  • Customer-support or communication platforms
  • Email and SMS providers
  • Fraud prevention and security providers

We share information with third parties only when reasonably necessary for the relevant business purpose, to provide requested services, to comply with legal obligations, or as otherwise permitted by applicable law.

Third-party providers may have their own privacy policies and terms. We encourage you to review the privacy policies of third-party services you interact with.

7. Payment Information

Payments made through our website may be processed by third-party payment gateways.

We generally do not directly store complete debit-card or credit-card numbers, CVV numbers, PINs, or other sensitive payment credentials on our own systems unless expressly stated otherwise.

Payment information is handled by the relevant payment service provider in accordance with its applicable security practices and privacy policy.

8. Sharing of Personal Information

We may share personal information with:

  • Payment processors
  • Shipping and logistics partners
  • Website and hosting providers
  • Technology and analytics providers
  • Advertising and marketing providers
  • Customer-support providers
  • Professional advisers where necessary
  • Government authorities, regulators, courts, or law-enforcement agencies where legally required

We may also disclose information as part of a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, subject to applicable law.

We do not intend to sell or commercially trade your personal information as a standalone asset.

9. Data Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, authentication procedures, secure technology platforms, encryption or secure transmission where appropriate, and limiting access to personal information to people and service providers who reasonably need it.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Therefore, while we take reasonable precautions, we cannot guarantee absolute security.

If we become aware of a personal data breach that is required to be reported or communicated under applicable law, we will take the steps required by law.

The DPDP framework requires appropriate security safeguards and addresses personal-data breach obligations.

10. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business and transaction records, resolving disputes, preventing fraud, and complying with legal, tax, accounting, or regulatory obligations.

When personal information is no longer required, we will take reasonable steps to delete it or otherwise dispose of it in accordance with applicable law.

Different types of information may therefore be retained for different periods.

11. Your Rights

Subject to applicable law and any applicable conditions or exceptions, you may have rights relating to your personal data, including rights to:

  • Request information about the personal data we process about you
  • Request correction or updating of inaccurate personal data
  • Request deletion of personal data where applicable
  • Withdraw consent where processing is based on consent
  • Exercise applicable rights concerning your personal data
  • Raise a grievance regarding our processing of your personal data
  • Nominate another individual to exercise certain rights in accordance with applicable law

The DPDP Act provides Data Principals with rights concerning access to information about processing, correction and erasure, grievance redressal, and nomination, subject to the Act and applicable rules.

To exercise an applicable right, contact us using the details provided below. We may need to verify your identity before completing certain requests.

12. Children's Privacy

Our website is not intended to knowingly collect personal data from children without the permissions or safeguards required by applicable law.

Under the DPDP Act, a "child" means an individual who has not completed eighteen years of age, and additional requirements may apply to processing children's personal data.

If you believe that a child has provided us with personal information in circumstances where the required authorization was not obtained, please contact us at [EMAIL ADDRESS].

13. International Data Transfers

Some of our service providers or technology partners may process or store information outside India.

Where personal data is transferred or made available outside India, we will do so in accordance with applicable Indian law and any requirements imposed by applicable authorities.

14. Links to Other Websites

Our website may contain links to third-party websites, applications, social-media platforms, or services.

We are not responsible for the privacy practices, content, or security of third-party websites. We recommend reviewing the privacy policy of any third-party service before providing personal information to it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, services, or applicable laws.

When we make changes, we will update the "Last Updated" date at the top of this policy. Where required by applicable law, we will provide additional notice or obtain consent for material changes.

We encourage you to review this page periodically.

16. Grievance Redressal and Contact

If you have a question, concern, complaint, or request relating to your personal information or this Privacy Policy, please contact us:

SCUFFO
Trichy
Email: hathimjahir@gmail.com
Phone: 8825762019

Grievance Contact / Data Protection 

Hathim
hathimjahir@gmail.com

We will review and respond to privacy-related requests in accordance with applicable law.

17. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, to the extent applicable.

Any disputes relating to this Privacy Policy or our processing of personal information shall be subject to the applicable laws and jurisdiction of India, subject to any mandatory consumer-protection or other legal rights available to you.

By using scuffo.in, you acknowledge that you have read this Privacy Policy and understand how Scuffo may collect, use, disclose, and protect your personal information as described above.