Privacy Policy

1. Introduction Welcome to wilddragon.in. This Privacy Policy explains how WILD DRAGON collects, uses, protects, and shares your personal information when you visit our website or purchase our T-shirts. We respect your privacy and process your data in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Who we are This website is operated by WILD DRAGON, registered at E-95 Paramount Tulip Delhi Road Saharanpur, Uttar Pradesh, India. For official business and tax purposes, our GSTIN is 09GBLPS1270L1ZZ. For the purposes of data protection laws, WILD DRAGON is the "Data Fiduciary" deciding how and why your personal data is processed.

3. What information we collect We collect information that you give us directly to fulfil your orders, as well as information collected automatically by our website tools to improve our services and marketing.

4. Information users provide directly When you create an account, place an order, or contact us, you provide us with:

• Your name, shipping address, and billing address.
• Your email address and phone/WhatsApp number (+91).
• Account login credentials (if you create an account).
• Customer support messages or grievances.

5. Information collected automatically When you browse wilddragon.in, our Node.js platform and tracking tools automatically collect:

• Your IP address and general location.
• Device type, operating system, and browser type.
• Pages viewed, time spent on the site, and products clicked or added to your cart.

6. Cookies and similar technologies We use cookies (small text files saved on your device) to keep your account logged in, remember items in your shopping cart, and track website performance. You can control or delete cookies through your web browser settings.

7. How we use information We use your information to:

• Process your T-shirt orders and deliver them to your address.
• Send you order confirmations, tracking updates, and return/refund approvals.
• Respond to your customer support questions.
• Prevent fraud and secure our website.
• Analyze website traffic and run personalized advertising.

8. Payments and fraud prevention We use Razorpay to process all online payments (UPI, cards). To comply with Reserve Bank of India (RBI) Card-on-File Tokenization guidelines, we do not collect, process, or store your raw credit or debit card numbers on our servers. Razorpay securely tokenizes your payment details, and all payment data is localized and stored on servers within India.

9. Orders, shipping, and customer support To deliver your order within India, we must share your name, phone number, and delivery address with our trusted third-party courier and shipping partners.

10. Analytics and website performance We use Google Analytics to understand how visitors use our website so we can improve the shopping experience. This tool tracks how you arrived at our site and which T-shirts are most popular.

11. Advertising and remarketing We use third-party advertising tools to show you relevant WILD DRAGON advertisements on other websites or social media platforms based on the products you viewed on our site.

12. Google Analytics / Google services disclosure As required by Google's Terms of Service: We have implemented Google Analytics Advertising Features (including Remarketing). We and third-party vendors use first-party cookies (such as the Google Analytics cookie) and third-party cookies (such as Google advertising cookies) together to inform, optimize, and serve ads based on your past visits to our website. We do not upload any data to Google that personally identifies you (like your exact name or email). You can opt out of Google Analytics Advertising Features through Google Ads Settings, or by installing the Google Analytics Opt-out Browser Add-on.

13. AdSense / advertising cookies disclosure We do not currently use Google AdSense to display third-party advertisements on our website.

14. Meta Pixel / Conversions API disclosure We use the Meta Pixel and Meta Conversions API (CAPI) to track ad performance and reach users on Facebook and Instagram. Through CAPI, we share certain server-side purchase data securely with Meta to measure ad conversions. To protect your privacy, any personally identifiable information (such as your email address or phone number) is securely converted to lowercase and hashed using the SHA-256 algorithm before it is transmitted to Meta. By using our website, you consent to this tracking. You can manage your ad preferences directly within your Meta/Facebook account settings.

15. Newsletter and marketing emails If you opt in, we may send you promotional emails or WhatsApp messages about new T-shirt drops or discounts. We use Mailcow to send these messages. You can stop receiving marketing messages at any time by clicking the "unsubscribe" link in the email or contacting us directly.

16. When we share information We do not sell your personal data to anyone. We only share your data with:

• Service Providers: Like Razorpay (payments), couriers (shipping), Mailcow (email), and our marketing platforms (Google, Meta).
• Legal Authorities: If required by Indian law, a court order, or to protect our business from fraud or illegal activity.

17. Data retention We keep your personal data for a maximum period of 2 years to fulfill our data minimization obligations. After 2 years, your personal data will be permanently deleted or erased from our systems. We may erase your data sooner if you withdraw your consent. However, please note that we may retain specific transactional data (such as order invoices) beyond 2 years if strictly required to comply with mandatory tax, accounting, or legal record-keeping obligations under Indian law.

18. Security We take reasonable security safeguards to protect your personal data from unauthorized access, loss, or alteration. However, please note that no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

19. User privacy rights Under the Indian DPDP Act, you have the right to:

• Access: Request a summary of the personal data we process about you.
• Correction & Erasure: Ask us to correct inaccurate data or delete your personal data (unless we must keep it for legal reasons).
• Withdraw Consent: Withdraw your consent for non-essential data processing (like marketing) at any time.
• Nominate: Nominate another person to exercise your privacy rights in the event of your death or incapacity.

20. How to make a privacy request To exercise any of your privacy rights, or to lodge a grievance, please contact our designated Grievance Officer. We will acknowledge your request and respond in accordance with Indian law.

21. Children's privacy Our website is designed for adults. We do not knowingly collect personal data from children under the age of 18 without verifiable parental consent. If you are a minor, please use this site under the supervision of a parent or guardian.

22. Third-party links Our website may contain links to external sites. We are not responsible for the privacy practices or content of these third-party websites.

23. Changes to this policy We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the "Effective Date" will be updated.

24. Contact us If you have questions, privacy requests, or complaints regarding this Privacy Policy, please contact our Grievance Officer:

• Grievance Officer Name: Bharat Sharma
• Email: mellmonbrand@gmail.com
• Phone/WhatsApp: +919760666886
• Address: E-95 Paramount Tulip Delhi Road Saharanpur, Uttar Pradesh, India