Privacy Policy

This policy explains what personal information this website collects, why it collects it, and what you can ask us to do with it.

Version 1.0 · Last updated 28 September 2026

This is a development draft

This page describes what the website actually does today, based on its code. It is not a legal document and it has not been reviewed by a lawyer. Items marked Client/legal review required are deliberate placeholders for information that is not in the project, and must be completed and checked by the business before the site goes live.

Who is responsible for your data

This website is operated by Giri Lal Prem Chand Sarees Pvt. Ltd., which is the entity responsible for deciding why and how your personal information is used when you use this site.

You can reach us at Gali Jutte Wali, 1st Floor, Nai Sarak, Chandni Chowk, Delhi, 110006, or by email on info@girilalpremchand.com.

Client/legal review required — registered legal entity and registered address

The site displays a trading name and a store address. Please confirm the exact registered legal entity name and its registered address, and replace this section with the registered details.

What we collect

We only collect information through this website when you choose to give it to us by filling in a form. The table below is the complete list.

Personal information collected by this website
InformationWhere you give itWhyRequired?
NameEnquiry, contact and product enquiry formsTo address you and reply to your enquiry.Yes
Email addressEnquiry, contact and product enquiry formsTo reply to you, and to send you a short confirmation that we received your enquiry. Also used as the reply-to address on the studio notification.Yes
Phone numberEnquiry, contact and product enquiry formsTo reach you by phone or WhatsApp about your enquiry, if you ask us to.Yes
Subject lineContact form onlyA short summary you type to describe what your contact is about. It is validated as required.Yes
CityEnquiry and product enquiry formsTo judge logistics and shipping, and to invite you to a relevant store.No
Your messageEnquiry, contact and product enquiry formsTo understand and answer what you asked.Yes
Occasion, wedding date, budget range and collection of interestEnquiry and product enquiry formsTo recommend relevant pieces and prepare for your consultation.No
Product you enquired aboutProduct enquiry formTo answer the enquiry about that product.No
Page URL, referring page and campaign parametersAttached automatically to every enquiryTo understand which pages and campaigns bring enquiries.No
Browser and screen informationAttached automatically to every enquiryTo spot layout problems that stop people from enquiring.No
Newsletter subscriptionThe GLPC Journal newsletter form — see the note belowTo send you the journal and style updates you asked for.No

Collected automatically

When you send an enquiry, the website also attaches some technical context to it: the page you were on, the site you came from, any campaign parameters in the link, your browser and screen information, and the time. This helps us answer you and understand which pages people find useful.

Newsletter

A newsletter sign-up form is included in this website's code and would collect your name and email address to send you the GLPC Journal. It is not currently shown on any page, so no newsletter information is being collected at the moment. If it is switched on, it will ask for your permission separately, because subscribing to a newsletter is a different decision from making an enquiry.

What we do not collect

  • We do not ask for a password, and there is no account or login on this website.
  • We do not ask for your Aadhaar, PAN, payment card or bank details. This site has no checkout or payment processing.
  • We do not set advertising cookies and we do not run advertising pixels.

Why we collect it

We process the information above for three purposes, and nothing beyond them:

  1. To answer your enquiry, including contacting you by phone, email or WhatsApp if you have asked us to.
  2. To prepare for a consultation, store visit or order by suggesting relevant pieces.
  3. To send you the GLPC Journal, but only if you have separately asked to receive it. This form is not currently active on the site, so nothing is being sent today.

We do not use your information for advertising, and we do not sell or rent it to anyone.

When your information is necessary

For the enquiry forms, the name, email address, phone number, your message and the consent tick are needed for us to be able to reply at all, so those fields must be filled in. Everything else on the enquiry forms is optional.

On the product enquiry form the city and the occasion are also currently required fields. Those are not strictly needed in order to reply to you, and we have flagged that below.

Client/legal review required — confirm the fields that should be mandatory

  • Phone number: Every enquiry form marks the phone number as required, so a visitor cannot currently leave it out. Confirm whether it really is necessary to answer an enquiry, because if it is not, it should be optional.
  • Subject line: The field is collected and validated, but it is NOT included in the enquiry payload, the API request, the database or the email. It is currently typed by the visitor and then discarded. Either carry it through to the studio or remove the field — asking someone to type a required field and then throwing it away is a data-minimisation problem, and it means the policy cannot claim it is processed.
  • City: Not required to answer an enquiry. Confirm whether it is genuinely needed for the delivery and store-invitation purposes before it stays mandatory.
  • Occasion, wedding date, budget range and collection of interest: Wedding date in particular identifies a specific individual event. Confirm it is needed for the stated purpose.
  • Page URL, referring page and campaign parameters: The full referring URL is captured rather than just the referring domain, and it is emailed to the studio inbox. Consider whether the referring domain alone is sufficient.
  • Browser and screen information: The full user-agent string is captured. A coarser device category would very likely serve the same purpose.
  • Newsletter subscription: The NewsletterSignup component exists in the codebase and collects a name and email address, but it is NOT currently rendered on any page, so the live site does not collect newsletter data today. Either wire it up behind the consent control that has been added, or delete it. Do not describe the site as sending a newsletter while it is unused.

At the moment every enquiry form requires a phone number, so there is no way to leave it out on screen. If you would rather not give a phone number, you can still reach us by email using the address at the end of this policy, or by visiting the studio. We would welcome your decision on whether phone should become optional, because requiring it is more data than answering an enquiry strictly needs.

How enquiries are processed

  1. You fill in an enquiry, contact or product enquiry form and tick the consent box.
  2. Your browser sends the form to this website's own server. It is not sent anywhere else first.
  3. The server checks the form, including that the consent box was ticked. If it was not, the enquiry is rejected and nothing is sent. This check happens on the server as well as in your browser, so it cannot be skipped.
  4. The server emails the enquiry to our studio inbox using Resend, our email delivery provider. The email is sent from us to us.
  5. If you left an email address, the server also sends you a short confirmation that we have received your enquiry. It repeats back only what you typed and contains no price, no internal reference and nothing about how you found the site. It is an acknowledgement of your enquiry, not a marketing email, and you will not receive anything else unless you ask us to.
  6. A member of the team reads it and contacts you using the details you gave.

No copy of the enquiry is stored in a database by this website, and your enquiry is not visible on any public page.

Client/legal review required — what happens after an enquiry is answered

Once an enquiry has been dealt with, the studio decides what to do with the email. Confirm the intended procedure, including whether the message is deleted from the studio mailbox and any backups, and add the answer to this section.

Cookies and browser storage

This website does not set any cookies. It uses your browser's local storage and session storage for a small number of things, which are listed in our Cookie Policy. None of it contains your name, contact details or message.

The one thing that is optional is the Google map on the contact page. Until you agree to it, the map is not requested from Google at all, so nothing is sent to Google when you load that page.

Who else receives your data

Three external services are involved. This is the complete list.

Third-party services that receive data from this website
ServiceRoleWhat they receive
ResendTransactional email delivery — sends your enquiry to our studio inbox.Your name, email address, phone number, city, the product or occasion you asked about, your message, and the page and referrer the enquiry came from.
Google LLCEmbedded Google map on the Contact page, only after you consent to the optional map category.Your IP address, browser information and the referring page, as normally disclosed to any website you load content from.

Client/legal review required — Resend: verify before launch

Resend's own data processing terms, hosting locations and international transfer arrangements. These are not asserted anywhere in the policy and should be confirmed before launch.

Client/legal review required — Google LLC: verify before launch

Which Google products the embed actually contacts, and what storage those products set once you have allowed the map. No claim about specific Google cookies is made in the policy, because the embed's behaviour has not been inspected in a live browser session.

Social media links in the footer take you to Instagram, Facebook, YouTube and Pinterest. Those are ordinary outbound links: opening one takes you to that platform, which has its own privacy policy, and nothing is loaded from them while you are on this site. The share buttons in the journal open WhatsApp or X in a new tab only when you use them.

Who we share your data with

We share personal information only with the service providers needed to make the website work, and only to the extent needed for them to do their job:

  • Resend, which delivers our enquiry emails.
  • Google, for the map on the contact page, and only if you have agreed to it.
  • Our hosting provider, which serves the website and necessarily sees the technical request data involved in loading a page.

We would also disclose information where the law requires it, or where we need to do so to establish or defend a legal claim.

How long we keep it

We have not yet set a retention period for enquiry emails or newsletter subscriptions, and we are not going to invent one in this policy. Until that decision is made and written down, the practical position is that an enquiry is kept for as long as the studio mailbox keeps it.

Client/legal review required — retention periods are not yet set

Please confirm how long enquiry records and newsletter subscriptions should be kept, what triggers deletion, and whether a shorter period applies to different kinds of enquiry. This section must be completed before launch — an absent retention period is itself a compliance problem, so this is the most urgent gap on the page.

How we protect it

The technical measures actually in place on this website are:

  • Enquiries travel over an encrypted connection.
  • The email provider API key is held on the server only. It is never part of the code sent to your browser, and it cannot be read from the page.
  • Every enquiry is checked on the server before it is forwarded, so an incomplete or malformed submission is rejected rather than emailed.
  • The server refuses to send anything if the consent box was not ticked, and it never reports internal errors back to the page in a way that would expose configuration.
  • Contact details are not written into the page address bar or into any link, so they are not leaked through the browser history or to other sites through the address.

These are baseline measures for a small website, not a certified security programme. Access to the studio mailbox is what actually protects the enquiry data, and that sits outside this codebase.

Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

  • Ask what personal information we hold about you, and get a copy of it.
  • Ask us to correct information that is wrong or incomplete.
  • Ask us to erase information we no longer have a reason to keep.
  • Ask us to stop processing your information, or to withdraw consent where consent was the basis for processing.
  • Ask us to stop direct marketing to you.
  • Nominate someone to exercise your rights on your behalf.
  • Ask for a summary of the complaints you have raised about your data.

To use any of these, email info@girilalpremchand.com or call +918750032358. Tell us which right you want to exercise and how we can identify you. We will not ask you for anything you have not already sent us.

Client/legal review required — privacy contact and response times

This site only has a general enquiry address, and no response timeframe is defined anywhere. Confirm which address should be used for data-protection requests, who handles them, and the response period to commit to, then update this section.

Client/legal review required — erasure may need more than deleting an email

Enquiry details are held in a mailbox provided by an email provider. Deleting the message locally may not remove provider-side copies or backups. Confirm the real procedure for honouring an erasure request, including what can and cannot be deleted, and be transparent about any limits.

Asking us to reply to your enquiry is what we use your details for. That is why the enquiry forms have a consent box which is never pre-ticked: we will not record your consent unless you tick it yourself.

Separately, the small privacy notice in the corner of the screen lets you decide whether to allow the Google map. Choosing Essential only is a complete answer, not a rejection: everything else on the website keeps working, and the map simply shows a placeholder instead.

Your choice is remembered in your own browser, and never sent to us. Nothing about it is linked to you.

To change your mind at any time, use the Privacy control in the bottom-left corner of any page, or the Manage Privacy Settings link in the footer. That reopens the same choices, and withdrawing removes the map immediately.

Withdrawing consent does not affect processing that already happened before you withdrew it.

Raising a grievance

If you are unhappy with how we have handled your information, contact us on info@girilalpremchand.com or call +918750032358, and we will look into it. Please include enough detail for us to find the relevant enquiry.

Client/legal review required — grievance officer

No Grievance Officer is identified anywhere in this project. If one has been appointed, add their name, role and contact details here. If not, confirm who is accountable for handling grievances before launch.

Use by children

This website is a fashion showcase and enquiry site, and we have not designed it for children.

Client/legal review required — intended age of users

The forms ask for a phone number, an occasion and a wedding date, which identify a specific person. Please confirm whether the site is intended for anyone under 18, and if so what the position is on parental consent. This cannot be determined from the code.

Changes to this policy

We will update this page when our processing changes. Every update carries a version number and a date at the top. If a change alters what we ask you to agree to, the privacy notice will ask you again rather than carrying your old answer forward.

How to contact us

Write to us at Gali Jutte Wali, 1st Floor, Nai Sarak, Chandni Chowk, Delhi, 110006, email info@girilalpremchand.com, or call +918750032358. Business hours are Mon–Sat: 11:00 AM – 07:30 PM | Sun: Closed.

This site is developed and maintained by Techverzing Technologies. They build the website and are not the party responsible for your personal information.

Open items awaiting client input

The following could not be answered from the codebase and have been left explicitly unanswered above rather than guessed at.

Business and legal information still required
What we needWhy it matters
Confirm the exact registered legal entity name and its registered address.A Data Fiduciary must be identifiable. The site displays a trading name and a store address, which is not the same as a registered entity and address.
Confirm which email address should receive data-protection requests.The site only has a general enquiry address. A privacy-specific address is expected under the DPDP framework and the two should not be assumed to be the same.
Confirm whether a Grievance Officer has been appointed, their name, and their contact details.A grievance contact is a specific requirement. No such role appears anywhere in the project.
Confirm how long enquiry records and newsletter subscriptions are kept, and what happens to them afterwards.No retention period is implemented in code and none has been supplied. The policy states this gap rather than inventing a figure.
Decide whether to publish the newsletter. The sign-up form exists in the code but is not shown on any page.The component collects a name and email address but is never rendered, and the service behind it is a stub that does not transmit anything. Either publish it with the consent control now in place, or remove it. Until then the policy says no newsletter data is collected, which is the accurate position.
Confirm Resend's hosting locations, retention and international transfer arrangements against their current published terms.The policy deliberately does not assert these. They must come from the vendor, not from this codebase.
Confirm the hosting region and any log-retention configuration for the deployment platform.Not configured in this repository, so the policy does not state it.
Confirm the practical process and expected turnaround for honouring an erasure or correction request, and who operates it.Enquiry emails are handed to a third-party mail provider. Deleting them from the studio mailbox may not be sufficient on its own, and the client should confirm the real procedure.
Confirm whether the site is intended to be used by anyone under 18.Verifying parental consent for a user below 18 is a distinct obligation, and the site collects phone numbers and event dates. Nothing in the code indicates the intended age policy.

Questions

For anything about this policy or your data, write to info@girilalpremchand.com or call +918750032358.

See also our Cookie Policy and Terms of Service.