Festive Flash Sale — up to 40% OFF
FREE Delivery — Zero Minimum
Cash on Delivery — Available on All Orders
Festive Flash Sale — up to 40% OFF
FREE Delivery — Zero Minimum
Cash on Delivery — Available on All Orders
Herdrape

Privacy Policy

Herdrape (herdrape.in) — Woven for her

Effective date: 4 October 2026
Last updated: 4 October 2026

This Privacy Policy explains how Herdrape ("Herdrape", "we", "us", "our") collects, uses, shares and protects your personal data when you visit herdrape.in, use the Herdrape mobile app, place an order, sell on our marketplace, or interact with us on Facebook, Instagram, WhatsApp or other channels (together, the "Services").

Herdrape is operated by Venkatesh Ganesan, as a sole proprietorship, with its principal place of business at Manathal, Salem District, Tamil Nadu, India. For the purposes of applicable Indian data protection law, Herdrape is the data fiduciary for the personal data described here.

By using our Services, you agree to this policy. If you do not agree, please do not use the Services.

1. Information we collect

Information you give us

  • Account details: name, email address, mobile number, and password (stored in hashed form, never in plain text).
  • Order details: delivery and billing addresses, products ordered, order history, and communications about your orders.
  • Payment information: payments are processed by third-party payment partners. We do not store your card number, CVV, UPI PIN or net-banking credentials. We receive only a payment confirmation, transaction ID and status.
  • Refund details: bank account or UPI details if you ask for a refund on a Cash on Delivery order.
  • Support communications: messages, emails, photos and videos you send us (for example, unboxing videos for return requests).
  • Reviews and content: ratings, reviews and any photos you submit.

Information from sellers (seller accounts only)

  • Business or trade name, contact details, GSTIN, PAN, address, bank account details for payouts, product listings and images.

Information collected automatically

  • Device and browser type, operating system, IP address, pages viewed, referring pages, approximate location (from IP), and app usage data.
  • Cookies and similar technologies (see Section 7).

Information from Meta platforms (Facebook, Instagram, WhatsApp)

  • When you message, comment on, tag or otherwise interact with Herdrape's Facebook Page, Instagram account or WhatsApp number, we receive the information Meta makes available to us for that interaction, such as your public profile name, user ID, and the content of your message or comment. See Section 5.

2. How we use your information

We use personal data to:

  • Create and manage your account and process, ship and deliver your orders
  • Process payments, refunds, returns and cancellations
  • Send order confirmations, shipping updates and delivery notifications by SMS, email, WhatsApp or app notifications
  • Respond to your questions, complaints and support requests
  • Pay sellers and meet tax and accounting requirements (including GST, TCS and TDS)
  • Detect, prevent and investigate fraud, misuse and security incidents
  • Improve our website, app, product listings and customer experience
  • Send marketing messages about new arrivals and offers, only where you have agreed; you can opt out at any time
  • Comply with legal obligations and enforce our Terms and Conditions

We do not sell your personal data.

3. Legal basis

We process your data based on your consent, to perform our contract with you (for example, delivering your order), to comply with legal obligations, and for legitimate purposes such as fraud prevention and service improvement, as permitted by the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and related rules.

4. WhatsApp and messaging

If you provide your mobile number, we may send transactional messages (order, payment, shipping and delivery updates) through the WhatsApp Business Platform, SMS or email. Promotional messages are sent only with your consent. You can opt out by replying STOP or by writing to support@herdrape.in. WhatsApp messages are also subject to WhatsApp's own terms and privacy policy.

5. Facebook, Instagram and other Meta platforms

Herdrape uses Meta platforms to share our products and communicate with customers.

  • Content publishing: Herdrape publishes product posts to Facebook, Instagram and similar channels only through accounts owned and operated by Herdrape. We do not connect, access or collect data from the personal or business social media accounts of our sellers or customers for this purpose.
  • Interactions with you: if you message or comment on our Page or account, we use that information only to respond to you, provide customer support, and manage our community.
  • How we handle Meta data: Data we receive through Meta's APIs is used only for the purposes described in this policy. We do not sell it, do not share it with data brokers or advertising networks, and do not use it to make decisions about eligibility for credit, employment or insurance. We comply with the Meta Platform Terms and Developer Policies.
  • Your control: You can delete your comments and messages through the platform itself, and you can ask us to delete the data we hold about you (see Section 11).

Meta's own handling of your data is governed by Meta's privacy policies.

6. Who we share your information with

We share personal data only as needed to provide the Services:

  • Sellers: the seller of your order receives your name, delivery address and phone number to fulfil it.
  • Logistics partners: Shiprocket and courier companies receive your name, address, phone number and order details to ship, deliver and manage returns.
  • Payment partners: to process payments and refunds.
  • Service providers: cloud hosting, data storage, content delivery, security (for example, Cloudflare and MongoDB Atlas), email/SMS/WhatsApp messaging providers, and analytics tools, who process data on our behalf under confidentiality obligations.
  • Authorities: where required by law, court order or government request, or to protect rights, safety and property.
  • Business transfers: if our business is merged, sold or restructured, data may be transferred to the successor, who must honour this policy.

7. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your cart, understand how the site is used, and improve performance and security. You can control or delete cookies through your browser settings. Disabling some cookies may affect features such as checkout.

8. Data retention

We keep personal data only as long as needed for the purposes in this policy, and as required by law. For example, order and invoice records are kept for the period required by tax and accounting law. Account data is kept while your account is active and deleted or anonymised after you request deletion, subject to legal retention requirements.

9. Data security

We use reasonable technical and organisational safeguards, including encryption in transit (HTTPS), hashed passwords, access controls and secure infrastructure. No system is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected users and authorities as required by law.

10. Where your data is stored

Our service providers may store or process data on servers in India or in other countries. Where data is transferred outside India, we take steps to ensure it is protected as required by applicable law.

11. Your rights and data deletion

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Erase your data, subject to legal retention requirements
  • Withdraw consent at any time (this does not affect past processing)
  • Opt out of marketing communications
  • Nominate another person to exercise your rights in the event of death or incapacity
  • Raise a grievance (see Section 14)

How to request deletion of your data

You can ask us to delete your data, including any data received through Facebook, Instagram or WhatsApp interactions, in either way:

  1. Sign in to your Herdrape account and use the delete account option in your profile settings, or
  2. Send an email to support@herdrape.in with the subject "Data Deletion Request", from the email address or mobile number linked to your account (or tell us your Facebook/Instagram username if your interaction was through social media).

We will verify your identity, confirm receipt within 48 hours, and complete the deletion within 30 days, except for records we must keep by law (for example, tax invoices). We will confirm to you once it is done.

12. Children's privacy

Our Services are intended for adults aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

13. Links to other sites

Our Services may link to third-party websites or services. We are not responsible for their privacy practices. Please read their policies before sharing data.

14. Grievance Officer and contact

For privacy questions, requests or complaints:

Grievance Officer: Venkatesh Ganesan
Herdrape, Manathal, Salem District, Tamil Nadu, India
Email: support@herdrape.in
Website: https://herdrape.in

We acknowledge complaints within 48 hours and aim to resolve them within one month.

15. Changes to this policy

We may update this policy from time to time. The updated version will be posted on this page with a new "Last updated" date. Significant changes will be communicated through the website, app or email. Continued use of the Services after changes means you accept the updated policy.