ASAGA — GLOBAL PRIVACY POLICY

Effective Date: 30 October 2026
Last Updated: 30 October 2026
Website: https://www.asaga.in
Mobile Applications: ASAGA for iOS and Android, where available
Privacy Contact: connect@asaga.in
Primary Jurisdiction: India

1. Introduction

At ASAGA, luxury is an expression of individuality, craftsmanship, and trust. We respect the personal information entrusted to us and are committed to protecting it with the same attention to detail that defines our creations.

This Privacy Policy explains how ASAGA (“ASAGA,” “we,” “us,” or “our”) collects, uses, processes, stores, shares, transfers, retains, and protects personal information when customers visit our website, use our mobile applications, purchase our products, request customised garments, or communicate with us.

This Policy applies to ASAGA's website at www.asaga.in, its iOS and Android applications where available, ecommerce and checkout services, made-to-order couture services, customer-support communications, and related digital experiences.

ASAGA operates from India and serves customers in India and international markets. We respect applicable Indian privacy legislation and the mandatory privacy rights of customers in other jurisdictions where those laws apply to our activities.

2. Identity and Contact Details

ASAGA determines the purposes and means of processing personal information in connection with its business and acts as a data fiduciary or data controller, as applicable.

Business: ASAGA
Email: connect@asaga.in
Website: www.asaga.in

Correspondence Address:
ASAGA
Room No. 66/534, Motilal Nagar No. 1,
Goregaon West, Near Nakoda Hardware,
Mumbai, Maharashtra – 400062, India.

Privacy requests, grievances, and questions may be directed to connect@asaga.in.

Where applicable law requires a designated officer or local representative, the relevant contact details will be provided as required.

3. Personal Information We Collect

We collect information necessary to operate our services, fulfil purchases, provide personalised couture, and maintain a secure shopping experience.

This may include:

• Identity and contact information: Name, email address, telephone number, billing address, delivery address, and country of residence.

• Order information: Products purchased, order numbers, transaction references, payment status, shipping details, returns, refunds, and purchase history.

• Couture information: Clothing measurements, sizing preferences, fit instructions, colour selections, embroidery preferences, and customisation requests.

• Technical information: IP addresses, browser details, device type, operating system, app version, connection information, and technical logs.

• Shopping information: Product views, cart selections, Wishlist preferences, browsing activity, and country or currency preferences.

• Communication information: Emails, WhatsApp messages, support enquiries, voluntarily submitted photographs, and customer-service correspondence.

• Marketing information: Newsletter subscriptions, communication preferences, and engagement with promotional content where permitted.

Information may be provided directly by customers, collected automatically through digital services, or received from authorised third-party providers.

4. How We Use Personal Information

ASAGA processes personal information to provide and improve its services, including:

1. Processing purchases, payments, deliveries, refunds, and returns.

2. Producing made-to-order and customised garments.

3. Managing customer enquiries and after-sales support.

4. Maintaining secure website and mobile-app operations.

5. Supporting checkout, shipping, and international transactions.

6. Remembering shopping preferences where applicable.

7. Detecting fraud, preventing misuse, and protecting our systems.

8. Improving service quality and technical performance.

9. Meeting accounting, taxation, regulatory, and legal obligations.

10. Sending permitted marketing communications and collection updates.

We seek to limit personal-data processing to appropriate and specified purposes.

5. Legal Bases, Consent, and Customer Choice

Where applicable law requires a legal basis for processing, ASAGA relies on the appropriate lawful ground.

Under the EU GDPR and UK GDPR, these may include contractual necessity, compliance with legal obligations, legitimate interests subject to applicable safeguards, and consent.

Under applicable Indian legislation, processing will be conducted on legally permitted grounds, including consent and recognised legitimate uses where relevant provisions are in force.

Where consent is required, ASAGA will seek an informed and affirmative indication of the customer's choice.

Customers may withdraw consent where legally permitted. Withdrawal does not invalidate earlier lawful processing or remove information that must be retained under applicable law.

Consent for optional marketing will be managed separately from information necessary to complete an order.

6. Shopify, Checkout, and Payment Processing

ASAGA uses Shopify-supported ecommerce infrastructure to operate its online shopping services.

Shopify and associated providers may process information necessary for product browsing, checkout, order management, customer communications, fraud prevention, and transaction administration.

Payments may be facilitated through Razorpay and other authorised payment methods made available at checkout.

Payment providers may collect billing details, payment credentials, authentication information, transaction identifiers, and other information necessary to process payments securely.

ASAGA does not independently store complete payment-card numbers or card verification codes in its own mobile-app databases.

Limited payment records, including order references, amounts, payment status, and refund details, may be retained for accounting, customer support, dispute resolution, and legal compliance.

Payment providers maintain their own security obligations, including applicable PCI DSS requirements.

Payment methods, accepted currencies, and authentication requirements may vary by country.

7. Mobile Application Data and Local Shopping Preferences

The ASAGA mobile applications extend our shopping experience to supported devices.

In the current iOS app configuration, Wishlist selections, Bag selections, and buyer-country preferences are stored locally on the customer's device.

These local shopping selections are not synchronised across devices through a native ASAGA customer account.

Clearing locally stored shopping selections does not delete Shopify checkout records, completed orders, payment records, or customer-support conversations.

The current application does not independently maintain a native customer account with synchronised order history.

If future application versions introduce additional account, synchronisation, or personalisation functionality, the relevant data-processing disclosures will be updated before or when those features become available.

8. Guest-Support Chat and Conversation Storage

The ASAGA application provides an optional guest-support chat experience.

Customers may submit a support message without entering their name, email address, or telephone number into mandatory chat fields.

Information voluntarily entered into a message may nevertheless contain personal information.

Messages, conversation identifiers, timestamps, and related service metadata are stored in ASAGA's support-service infrastructure and may be accessed by authorised support personnel.

The application uses a locally stored access credential to allow customers to return to an existing conversation.

In the current app configuration, chat access expires 30 days after the conversation is created.

The application's Help section also provides a Delete Conversation function intended to remove the active conversation and its messages when the deletion process completes successfully.

System interruptions or technical failures may delay automated cleanup. Deletion from backups, operational logs, or service-provider systems cannot be guaranteed within the same period.

Customers should avoid including passwords, payment-card security codes, or unnecessary sensitive information in support messages.

9. Mobile Device Permissions, Diagnostics, and Tracking

ASAGA may process device and technical information necessary to operate, protect, troubleshoot, and maintain its mobile applications.

This may include IP addresses, device and connection information, app versions, operational logs, and diagnostic information.

Where optional app features require device permissions, appropriate permission requests will be presented through the operating system.

Permissions may include notifications or photo-library access if supported features require them.

Access to sensitive device features will be subject to applicable permission and disclosure requirements.

Where analytics, crash reporting, advertising, or third-party SDK technologies are enabled, their processing will be assessed and disclosed in accordance with applicable law and app-store requirements.

Where Apple's App Tracking Transparency framework applies, the relevant permission will be requested before covered tracking occurs.

The presence or absence of a particular tracking technology may change as the application develops. This Policy does not represent a guarantee that no technical, diagnostic, or tracking-related information is processed by third-party services.

10. Cookies and Similar Technologies

Our website, checkout services, and associated providers may use cookies, pixels, local storage, and similar technologies.

These technologies may support shopping sessions, cart functionality, security, country and currency preferences, analytics, website performance, and advertising where enabled.

Essential technologies may be required to operate the store.

Optional cookies and tracking technologies will be subject to applicable consent and opt-out requirements.

Where legally required, customers will be offered appropriate controls to accept, reject, or manage optional tracking.

Customers may also manage browser cookies through their browser settings.

Mobile applications may use local device storage and comparable technologies rather than traditional browser cookies.

11. International Orders and Cross-Border Data Transfers

ASAGA serves customers in India and international markets.

International purchases may require sharing relevant information with payment processors, logistics providers, customs authorities, and other parties involved in order fulfilment.

This information may include customer names, delivery addresses, telephone numbers, order details, transaction references, and customs-related information.

Personal information may be processed in India or other countries where our authorised service providers operate.

Where legally required, international transfers will be subject to appropriate safeguards, contractual arrangements, adequacy mechanisms, or other lawful transfer methods.

Transfers involving information governed by Indian law will comply with applicable Indian restrictions and requirements.

Transfers from the European Economic Area or United Kingdom will comply with applicable GDPR transfer obligations.

12. Third-Party Services and Information Sharing

ASAGA may use authorised service providers for ecommerce operations, payment processing, shipping, technical infrastructure, customer support, analytics, communications, and other legitimate business functions.

These may include Shopify, Razorpay, logistics providers, hosting services, and other service providers used in operating our website and mobile applications.

We seek to limit disclosures to information reasonably necessary for the relevant service and to apply appropriate contractual or legal safeguards.

We may also disclose information where required by law, to respond to lawful regulatory requests, investigate suspected fraud, protect rights, or facilitate a lawful business restructuring.

ASAGA does not sell customer lists or personal information for monetary consideration.

However, certain advertising-related disclosures may qualify as regulated sharing, targeted advertising, or a sale under applicable privacy laws, even without monetary consideration. Where such activities occur and the relevant law applies, we will provide required disclosures and opt-out mechanisms.

Third-party websites, payment platforms, and social-media services may independently process information under their own privacy policies.

13. WhatsApp, Email, and Social-Media Communications

Customers may contact ASAGA through official email, WhatsApp, Instagram, or other communication channels.

Information voluntarily shared through these channels may be used to respond to enquiries, recommend garments, assist with measurements, coordinate orders, and provide after-sales support.

Third-party messaging and social-media platforms may independently process information under their own terms and privacy policies.

Customers should avoid sharing unnecessary sensitive information through these channels.

14. Information Security and Data Breaches

ASAGA takes reasonable technical, organisational, and administrative precautions designed to protect personal information against unauthorised access, loss, alteration, disclosure, or misuse.

These measures may include encrypted communications, access controls, secure service integrations, authentication mechanisms, and appropriate vendor-security practices.

No electronic system or internet transmission can be guaranteed to be completely secure.

Where a personal-data breach occurs, ASAGA will assess the incident, take appropriate mitigation steps, and provide notifications to affected individuals or competent authorities where required by applicable law.

15. Data Retention and Deletion

Personal information is retained for as long as reasonably necessary for its original purpose or another lawful purpose.

Retention periods depend on the type of information, customer interactions, operational requirements, and applicable legal obligations.

Order and payment records may be retained for taxation, accounting, consumer-protection, fraud-prevention, and dispute-resolution purposes.

Measurements and customisation information may be retained to fulfil orders and provide permitted follow-up services.

Marketing information is retained only while an appropriate lawful basis and business purpose remain.

Guest-support conversations follow the access and deletion arrangements described in Section 8.

Technical logs, backups, and service-provider records may follow separate retention schedules, subject to applicable legal requirements.

Where information is no longer necessary and no lawful retention obligation applies, ASAGA will take appropriate steps to delete, anonymise, or securely dispose of it.

16. Account and Personal-Data Deletion Requests

Customers may request access to, correction of, or deletion of eligible personal information by contacting connect@asaga.in.

Where an ASAGA mobile application supports customer account creation, ASAGA will provide account-deletion mechanisms required by the applicable app-store policies.

For the current guest-based mobile shopping experience, deleting locally stored Wishlist or Bag selections does not delete Shopify checkout records or information maintained by payment processors.

Similarly, deleting an app-support conversation does not automatically delete order records or independent third-party records.

Certain information may remain subject to statutory retention requirements or other legally permitted processing.

We may request reasonable identity verification before fulfilling a request.

17. Children's Privacy

ASAGA's ecommerce services are intended primarily for adults.

We do not knowingly solicit personal information directly from children contrary to applicable law.

Where a parent or guardian purchases garments for a child, necessary measurements and order information may be processed for fulfilment.

Where applicable law requires parental consent or additional safeguards for children's information, those requirements will be followed.

ASAGA will not knowingly undertake prohibited behavioural tracking or targeted advertising involving children.

Parents or guardians may contact connect@asaga.in regarding relevant concerns.

18. Automated Processing and Profiling

ASAGA and its authorised service providers may use automated technologies for ordinary ecommerce operations, including security monitoring, fraud prevention, product recommendations, and technical analytics.

We do not intend to make solely automated decisions producing legal or similarly significant effects on individuals without meeting applicable legal requirements.

Where required, customers will be informed of relevant automated processing and available rights.

19. Privacy Rights in India

ASAGA operates from India and will comply with applicable Indian privacy and data-protection legislation.

This includes relevant provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, in accordance with their respective commencement dates.

As applicable provisions come into force, ASAGA will implement relevant requirements concerning notices, consent, lawful processing, security safeguards, children's information, grievance redressal, data breaches, retention, deletion, and international transfers.

Eligible individuals may exercise applicable rights concerning access to information, correction, completion, updating, erasure, withdrawal of consent, grievance redressal, and nomination where legally available.

Privacy requests and grievances may be submitted to connect@asaga.in.

Eligible individuals may approach the competent Indian authority in accordance with applicable statutory procedures.

20. European Economic Area and United Kingdom Privacy Rights

Where the EU GDPR or UK GDPR applies to ASAGA's activities, eligible individuals may exercise rights including access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and rights concerning qualifying automated decisions.

Individuals may also lodge complaints with a competent supervisory authority.

Where required, ASAGA will provide information about lawful processing grounds, international-transfer safeguards, retention periods, and other mandatory disclosures.

If an EU or UK representative is legally required, the relevant details will be made available.

Mandatory local rights are not restricted by this Policy.

21. United States Privacy Rights

Where applicable US state privacy legislation governs ASAGA's activities, eligible residents may have additional rights.

These may include rights to know or access personal information, request correction or deletion, obtain copies of eligible data, opt out of qualifying sales or sharing, targeted advertising, or certain profiling, and appeal certain privacy decisions where required.

Where applicable, ASAGA will respect relevant opt-out preference signals and provide required privacy controls.

Customers may submit privacy requests through connect@asaga.in.

ASAGA will not unlawfully discriminate against individuals for exercising their privacy rights.

22. Canada, Australia, New Zealand, UAE, and Other International Markets

Where applicable privacy legislation in Canada, Australia, New Zealand, the United Arab Emirates, other Gulf jurisdictions, or additional international markets governs ASAGA's activities, ASAGA will respect the mandatory requirements of those laws.

Depending on the jurisdiction, these may include rights relating to transparency, access, correction, consent, deletion, complaints, information security, and cross-border processing.

Customers may submit requests through connect@asaga.in.

Where a jurisdiction requires additional notices, local representatives, specific rights mechanisms, or other safeguards, these will be implemented as legally required.

Nothing in this Policy is intended to limit mandatory rights available under applicable local legislation.

23. Privacy Requests and Grievance Redressal

Customers may contact ASAGA regarding access, correction, deletion, consent withdrawal, marketing preferences, or concerns about personal-data processing.

Privacy and Grievance Contact:
connect@asaga.in

We may request reasonable identity verification to prevent unauthorised disclosure.

Requests and complaints will be handled within applicable legal timelines.

Where a complaint remains unresolved, eligible individuals may pursue available remedies before the relevant competent authority.

24. Changes to This Policy

ASAGA may update this Privacy Policy to reflect changes in its services, technology, processing activities, or legal obligations.

The latest version will be published on www.asaga.in with an updated effective date.

Where legally required, material changes will be communicated through appropriate channels, and additional consent will be obtained where necessary.

25. Governing Law and Mandatory International Protections

ASAGA operates from India, and Indian law applies to its business operations to the extent legally relevant.

Nothing in this Policy limits mandatory consumer or privacy rights available under laws applicable to an individual, transaction, or processing activity.

Where international data-protection legislation imposes additional mandatory requirements, those requirements will apply.

26. Contact Information and Third-Party Records

For privacy-related enquiries, personal-data requests, deletion requests, complaints, or further information, please contact:

ASAGA
Privacy and Customer Support
Email: connect@asaga.in
Website: https://www.asaga.in

Correspondence Address:
Room No. 66/534, Motilal Nagar No. 1,
Goregaon West, Near Nakoda Hardware,
Mumbai, Maharashtra – 400062, India.

Requests concerning information maintained by Shopify, payment processors, logistics partners, or other independent third-party service providers may require coordination with, or separate processing by, those providers.