Data Protection & Your Rights

1. Overview

At suuperstitch, we believe you should have meaningful control over your personal information. This page provides a clear summary of your data protection rights under applicable laws and explains how you can exercise them.

This page should be read alongside our Privacy Policy, which provides full details about the data we collect, how we use it, and how we protect it.

2. Your Rights Under Indian Law

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000, you have the following rights as a data principal:

Right to Access

You have the right to obtain a summary of your personal data that we process and information about our processing activities.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal data that we hold about you.

Right to Erasure

You have the right to request the erasure of your personal data, subject to certain legal obligations that may require us to retain specific information.

Right to Nominate

You have the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

Right to Grievance Redressal

You have the right to file a grievance with our Grievance Officer and, if unsatisfied, to escalate to the Data Protection Board of India.

3. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR):

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data ("right to be forgotten")
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: request your data in a structured, machine-readable format
• Right to object: object to certain types of processing, including direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint: file a complaint with your local data protection supervisory authority

We do not currently appoint a Data Protection Officer (DPO) or EU Representative. As an early-stage India-based startup, these roles are not currently required based on our operations. We will appoint them in the future if our legal obligations change.

4. Exercising Your Rights

To exercise any of the rights described above, please contact us at:

• Email: hello@suuperstitch.com
• Subject line: Data Protection Request

When contacting us, please include:

• Your full name and the email address associated with your suuperstitch account
• A clear description of the right you wish to exercise
• Any relevant details to help us locate your data

We will acknowledge your request within 24 hours and respond substantively within 30 days (or sooner where required by applicable law). If we need additional time, we will inform you of the reason and the expected timeline.

We may need to verify your identity before processing your request to protect the security of your data. We will not charge a fee for processing reasonable requests.

5. What Data We Hold About You

For a detailed breakdown of the types of data we collect and how we use it, please refer to our Privacy Policy. In summary, we may hold:

• Account information (name, email, authentication data)
• Wishlist and saved product preferences
• Usage data and analytics (anonymised or pseudonymised)
• Brand submission data (if you submitted a brand)

We do not hold payment information, phone numbers, government IDs, precise location data, or biometric data.

6. Account Deletion

You may request the deletion of your suuperstitch account at any time by emailing us at hello@suuperstitch.com with the subject line "Delete My Account."

When you delete your account:

• Your personal information (name, email) will be permanently deleted within 30 days
• Your wishlist and saved product data will be permanently removed
• Anonymised analytics data that cannot identify you may be retained
• Certain records may be retained if required by law (e.g., legal compliance, dispute resolution)

Account deletion is irreversible.

7. Data Portability

You may request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format (such as JSON or CSV). To make this request, email us with the subject line "Data Export Request."

8. Filing a Complaint

If you are unsatisfied with how we handle your data protection request, you have the right to:

• Contact our Grievance Officer (details below) to escalate your concern
• File a complaint with the Data Protection Board of India (once established under the DPDP Act)
• File a complaint with your local data protection authority if you are located in the EEA, UK, or another jurisdiction with a supervisory authority

9. Contact & Grievance Officer

For all data protection enquiries and requests:

• Email: hello@suuperstitch.com

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023:

• Name: Prashant Indurkar
• Designation: Founder & Grievance Officer
• Email: hello@suuperstitch.com

The Grievance Officer will acknowledge your complaint within 24 hours and work to resolve it within 15 days of receipt.