Privacy Policy
This policy explains what personal information this website collects, why it collects it, and what you can ask us to do with it.
Version 1.0 · Last updated 28 September 2026
This is a development draft
This page describes what the website actually does today, based on its code. It is not a legal document and it has not been reviewed by a lawyer. Items marked Client/legal review required are deliberate placeholders for information that is not in the project, and must be completed and checked by the business before the site goes live.
Who is responsible for your data
This website is operated by Giri Lal Prem Chand Sarees Pvt. Ltd., which is the entity responsible for deciding why and how your personal information is used when you use this site.
You can reach us at Gali Jutte Wali, 1st Floor, Nai Sarak, Chandni Chowk, Delhi, 110006, or by email on info@girilalpremchand.com.
Client/legal review required — registered legal entity and registered address
The site displays a trading name and a store address. Please confirm the exact registered legal entity name and its registered address, and replace this section with the registered details.
What we collect
We only collect information through this website when you choose to give it to us by filling in a form. The table below is the complete list.
| Information | Where you give it | Why | Required? |
|---|---|---|---|
| Name | Enquiry, contact and product enquiry forms | To address you and reply to your enquiry. | Yes |
| Email address | Enquiry, contact and product enquiry forms | To reply to you, and to send you a short confirmation that we received your enquiry. Also used as the reply-to address on the studio notification. | Yes |
| Phone number | Enquiry, contact and product enquiry forms | To reach you by phone or WhatsApp about your enquiry, if you ask us to. | Yes |
| Subject line | Contact form only | A short summary you type to describe what your contact is about. It is validated as required. | Yes |
| City | Enquiry and product enquiry forms | To judge logistics and shipping, and to invite you to a relevant store. | No |
| Your message | Enquiry, contact and product enquiry forms | To understand and answer what you asked. | Yes |
| Occasion, wedding date, budget range and collection of interest | Enquiry and product enquiry forms | To recommend relevant pieces and prepare for your consultation. | No |
| Product you enquired about | Product enquiry form | To answer the enquiry about that product. | No |
| Page URL, referring page and campaign parameters | Attached automatically to every enquiry | To understand which pages and campaigns bring enquiries. | No |
| Browser and screen information | Attached automatically to every enquiry | To spot layout problems that stop people from enquiring. | No |
| Newsletter subscription | The GLPC Journal newsletter form — see the note below | To send you the journal and style updates you asked for. | No |
Collected automatically
When you send an enquiry, the website also attaches some technical context to it: the page you were on, the site you came from, any campaign parameters in the link, your browser and screen information, and the time. This helps us answer you and understand which pages people find useful.
Newsletter
A newsletter sign-up form is included in this website's code and would collect your name and email address to send you the GLPC Journal. It is not currently shown on any page, so no newsletter information is being collected at the moment. If it is switched on, it will ask for your permission separately, because subscribing to a newsletter is a different decision from making an enquiry.
What we do not collect
- We do not ask for a password, and there is no account or login on this website.
- We do not ask for your Aadhaar, PAN, payment card or bank details. This site has no checkout or payment processing.
- We do not set advertising cookies and we do not run advertising pixels.
Why we collect it
We process the information above for three purposes, and nothing beyond them:
- To answer your enquiry, including contacting you by phone, email or WhatsApp if you have asked us to.
- To prepare for a consultation, store visit or order by suggesting relevant pieces.
- To send you the GLPC Journal, but only if you have separately asked to receive it. This form is not currently active on the site, so nothing is being sent today.
We do not use your information for advertising, and we do not sell or rent it to anyone.
When your information is necessary
For the enquiry forms, the name, email address, phone number, your message and the consent tick are needed for us to be able to reply at all, so those fields must be filled in. Everything else on the enquiry forms is optional.
On the product enquiry form the city and the occasion are also currently required fields. Those are not strictly needed in order to reply to you, and we have flagged that below.
Client/legal review required — confirm the fields that should be mandatory
- Phone number: Every enquiry form marks the phone number as required, so a visitor cannot currently leave it out. Confirm whether it really is necessary to answer an enquiry, because if it is not, it should be optional.
- Subject line: The field is collected and validated, but it is NOT included in the enquiry payload, the API request, the database or the email. It is currently typed by the visitor and then discarded. Either carry it through to the studio or remove the field — asking someone to type a required field and then throwing it away is a data-minimisation problem, and it means the policy cannot claim it is processed.
- City: Not required to answer an enquiry. Confirm whether it is genuinely needed for the delivery and store-invitation purposes before it stays mandatory.
- Occasion, wedding date, budget range and collection of interest: Wedding date in particular identifies a specific individual event. Confirm it is needed for the stated purpose.
- Page URL, referring page and campaign parameters: The full referring URL is captured rather than just the referring domain, and it is emailed to the studio inbox. Consider whether the referring domain alone is sufficient.
- Browser and screen information: The full user-agent string is captured. A coarser device category would very likely serve the same purpose.
- Newsletter subscription: The NewsletterSignup component exists in the codebase and collects a name and email address, but it is NOT currently rendered on any page, so the live site does not collect newsletter data today. Either wire it up behind the consent control that has been added, or delete it. Do not describe the site as sending a newsletter while it is unused.
At the moment every enquiry form requires a phone number, so there is no way to leave it out on screen. If you would rather not give a phone number, you can still reach us by email using the address at the end of this policy, or by visiting the studio. We would welcome your decision on whether phone should become optional, because requiring it is more data than answering an enquiry strictly needs.
How enquiries are processed
- You fill in an enquiry, contact or product enquiry form and tick the consent box.
- Your browser sends the form to this website's own server. It is not sent anywhere else first.
- The server checks the form, including that the consent box was ticked. If it was not, the enquiry is rejected and nothing is sent. This check happens on the server as well as in your browser, so it cannot be skipped.
- The server emails the enquiry to our studio inbox using Resend, our email delivery provider. The email is sent from us to us.
- If you left an email address, the server also sends you a short confirmation that we have received your enquiry. It repeats back only what you typed and contains no price, no internal reference and nothing about how you found the site. It is an acknowledgement of your enquiry, not a marketing email, and you will not receive anything else unless you ask us to.
- A member of the team reads it and contacts you using the details you gave.
No copy of the enquiry is stored in a database by this website, and your enquiry is not visible on any public page.
Client/legal review required — what happens after an enquiry is answered
Once an enquiry has been dealt with, the studio decides what to do with the email. Confirm the intended procedure, including whether the message is deleted from the studio mailbox and any backups, and add the answer to this section.
Cookies and browser storage
This website does not set any cookies. It uses your browser's local storage and session storage for a small number of things, which are listed in our Cookie Policy. None of it contains your name, contact details or message.
The one thing that is optional is the Google map on the contact page. Until you agree to it, the map is not requested from Google at all, so nothing is sent to Google when you load that page.
Who else receives your data
Three external services are involved. This is the complete list.
| Service | Role | What they receive |
|---|---|---|
| Resend | Transactional email delivery — sends your enquiry to our studio inbox. | Your name, email address, phone number, city, the product or occasion you asked about, your message, and the page and referrer the enquiry came from. |
| Google LLC | Embedded Google map on the Contact page, only after you consent to the optional map category. | Your IP address, browser information and the referring page, as normally disclosed to any website you load content from. |
Client/legal review required — Resend: verify before launch
Resend's own data processing terms, hosting locations and international transfer arrangements. These are not asserted anywhere in the policy and should be confirmed before launch.
Client/legal review required — Google LLC: verify before launch
Which Google products the embed actually contacts, and what storage those products set once you have allowed the map. No claim about specific Google cookies is made in the policy, because the embed's behaviour has not been inspected in a live browser session.
Social media links in the footer take you to Instagram, Facebook, YouTube and Pinterest. Those are ordinary outbound links: opening one takes you to that platform, which has its own privacy policy, and nothing is loaded from them while you are on this site. The share buttons in the journal open WhatsApp or X in a new tab only when you use them.
Who we share your data with
We share personal information only with the service providers needed to make the website work, and only to the extent needed for them to do their job:
- Resend, which delivers our enquiry emails.
- Google, for the map on the contact page, and only if you have agreed to it.
- Our hosting provider, which serves the website and necessarily sees the technical request data involved in loading a page.
We would also disclose information where the law requires it, or where we need to do so to establish or defend a legal claim.
How long we keep it
We have not yet set a retention period for enquiry emails or newsletter subscriptions, and we are not going to invent one in this policy. Until that decision is made and written down, the practical position is that an enquiry is kept for as long as the studio mailbox keeps it.
Client/legal review required — retention periods are not yet set
Please confirm how long enquiry records and newsletter subscriptions should be kept, what triggers deletion, and whether a shorter period applies to different kinds of enquiry. This section must be completed before launch — an absent retention period is itself a compliance problem, so this is the most urgent gap on the page.
How we protect it
The technical measures actually in place on this website are:
- Enquiries travel over an encrypted connection.
- The email provider API key is held on the server only. It is never part of the code sent to your browser, and it cannot be read from the page.
- Every enquiry is checked on the server before it is forwarded, so an incomplete or malformed submission is rejected rather than emailed.
- The server refuses to send anything if the consent box was not ticked, and it never reports internal errors back to the page in a way that would expose configuration.
- Contact details are not written into the page address bar or into any link, so they are not leaked through the browser history or to other sites through the address.
These are baseline measures for a small website, not a certified security programme. Access to the studio mailbox is what actually protects the enquiry data, and that sits outside this codebase.
Your rights
Under the Digital Personal Data Protection Act, 2023 you have the right to:
- Ask what personal information we hold about you, and get a copy of it.
- Ask us to correct information that is wrong or incomplete.
- Ask us to erase information we no longer have a reason to keep.
- Ask us to stop processing your information, or to withdraw consent where consent was the basis for processing.
- Ask us to stop direct marketing to you.
- Nominate someone to exercise your rights on your behalf.
- Ask for a summary of the complaints you have raised about your data.
To use any of these, email info@girilalpremchand.com or call +918750032358. Tell us which right you want to exercise and how we can identify you. We will not ask you for anything you have not already sent us.
Client/legal review required — privacy contact and response times
This site only has a general enquiry address, and no response timeframe is defined anywhere. Confirm which address should be used for data-protection requests, who handles them, and the response period to commit to, then update this section.
Client/legal review required — erasure may need more than deleting an email
Enquiry details are held in a mailbox provided by an email provider. Deleting the message locally may not remove provider-side copies or backups. Confirm the real procedure for honouring an erasure request, including what can and cannot be deleted, and be transparent about any limits.
Consent and withdrawing it
Asking us to reply to your enquiry is what we use your details for. That is why the enquiry forms have a consent box which is never pre-ticked: we will not record your consent unless you tick it yourself.
Separately, the small privacy notice in the corner of the screen lets you decide whether to allow the Google map. Choosing Essential only is a complete answer, not a rejection: everything else on the website keeps working, and the map simply shows a placeholder instead.
Your choice is remembered in your own browser, and never sent to us. Nothing about it is linked to you.
To change your mind at any time, use the Privacy control in the bottom-left corner of any page, or the Manage Privacy Settings link in the footer. That reopens the same choices, and withdrawing removes the map immediately.
Withdrawing consent does not affect processing that already happened before you withdrew it.
Raising a grievance
If you are unhappy with how we have handled your information, contact us on info@girilalpremchand.com or call +918750032358, and we will look into it. Please include enough detail for us to find the relevant enquiry.
Client/legal review required — grievance officer
No Grievance Officer is identified anywhere in this project. If one has been appointed, add their name, role and contact details here. If not, confirm who is accountable for handling grievances before launch.
Use by children
This website is a fashion showcase and enquiry site, and we have not designed it for children.
Client/legal review required — intended age of users
The forms ask for a phone number, an occasion and a wedding date, which identify a specific person. Please confirm whether the site is intended for anyone under 18, and if so what the position is on parental consent. This cannot be determined from the code.
Changes to this policy
We will update this page when our processing changes. Every update carries a version number and a date at the top. If a change alters what we ask you to agree to, the privacy notice will ask you again rather than carrying your old answer forward.
How to contact us
Write to us at Gali Jutte Wali, 1st Floor, Nai Sarak, Chandni Chowk, Delhi, 110006, email info@girilalpremchand.com, or call +918750032358. Business hours are Mon–Sat: 11:00 AM – 07:30 PM | Sun: Closed.
This site is developed and maintained by Techverzing Technologies. They build the website and are not the party responsible for your personal information.
Open items awaiting client input
The following could not be answered from the codebase and have been left explicitly unanswered above rather than guessed at.
| What we need | Why it matters |
|---|---|
| Confirm the exact registered legal entity name and its registered address. | A Data Fiduciary must be identifiable. The site displays a trading name and a store address, which is not the same as a registered entity and address. |
| Confirm which email address should receive data-protection requests. | The site only has a general enquiry address. A privacy-specific address is expected under the DPDP framework and the two should not be assumed to be the same. |
| Confirm whether a Grievance Officer has been appointed, their name, and their contact details. | A grievance contact is a specific requirement. No such role appears anywhere in the project. |
| Confirm how long enquiry records and newsletter subscriptions are kept, and what happens to them afterwards. | No retention period is implemented in code and none has been supplied. The policy states this gap rather than inventing a figure. |
| Decide whether to publish the newsletter. The sign-up form exists in the code but is not shown on any page. | The component collects a name and email address but is never rendered, and the service behind it is a stub that does not transmit anything. Either publish it with the consent control now in place, or remove it. Until then the policy says no newsletter data is collected, which is the accurate position. |
| Confirm Resend's hosting locations, retention and international transfer arrangements against their current published terms. | The policy deliberately does not assert these. They must come from the vendor, not from this codebase. |
| Confirm the hosting region and any log-retention configuration for the deployment platform. | Not configured in this repository, so the policy does not state it. |
| Confirm the practical process and expected turnaround for honouring an erasure or correction request, and who operates it. | Enquiry emails are handed to a third-party mail provider. Deleting them from the studio mailbox may not be sufficient on its own, and the client should confirm the real procedure. |
| Confirm whether the site is intended to be used by anyone under 18. | Verifying parental consent for a user below 18 is a distinct obligation, and the site collects phone numbers and event dates. Nothing in the code indicates the intended age policy. |
Questions
For anything about this policy or your data, write to info@girilalpremchand.com or call +918750032358.
See also our Cookie Policy and Terms of Service.