TOMORROW LAND APPARELS PVT. LTD. is the owner and the service provider of an internet-based apparel retailer called Bombay Shirt Company, that provides customization of shirts.
Effective Date: 25th May 2018
Legal Basis for collecting information
We process certain Information because it is necessary for us to be able to provide and administer the Service and its features. We also process certain Information to comply with certain statutory requirements.
Such data is processed based on your consent. To the extent that processing is carried out on the basis of consent, it is for you to give such a consent and you may at any time, wholly or partly, withdraw your consent. If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place.
Please note that certain Services requires us to access certain Information and if you refuse to provide us the consent, it may result in a suspension of your account.
Types of Information We Collect
We collect the following information as and when you access and use the Services as set out below:
- Information you provide when you sign up for our Services: Registration information you provide when you create an account, including your first name and surname, country of residence, gender, age, email address, username and password;
- Information you provide when you purchase from products our Services: Transaction information you provide when you request information or purchase products from our Services, including your postal address, telephone number and payment information;
- Information you provide when you use our Services: Location information (either provided by a mobile device through which you utilize our Services or associated with your IP address) when you use our Services, usage, viewing and technical data, including your device identifier or IP address, when you use our Services on third-party sites or platforms or open emails we send. The information you provide in public forums while using our Services;
- Information you provide when you contact us for support: Information sent either one-to-one or within a limited group using our message, chat, post or similar functionality, where we are permitted by law to collect this information.
How and Why We Collect Your Information
We collect information through technology, such as cookies and web beacons when you use our Services. The information we learn from customers helps us personalize and continually improve your experience of the Services as set out below:
- Complete a purchase or provide the services you have requested;
- Respond to your request for information and provide you with more effective and efficient customer service;
- Provide you with product updates and information about the products you have purchased from us;
- Provide you with service notifications via email and within the Services based on your notification selections;
- Contact you by email, postal mail, or phone regarding services, surveys, research studies, promotions, special events and other subjects that we think may be of interest to you;
- Help us better understand your interests and needs, and improve the Services;
- process payments, communicate with you about orders, products, services and promotional offers, update our records and generally maintain your accounts with us, display content such as customer reviews and recommend services that might be of interest to you. We also use this information to improve our platform, prevent or detect fraud or abuses of our website, for market research purposes and enable third parties to carry out technical, logistical or other functions on our behalf.
- The information we learn may also provide the basis for market and customer analysis, market research, statistics, business monitoring and business and methodological development for Bombay Shirt Company.
- Synthesize and derive insights from your use of different products and services provided by us;
- Engage in analysis, research, and reports regarding use of our Services;
- Provide, manage, and improve the Services;
- Protect our Services and our users;
- Understand and resolve app crashes and other issues being reported.
- We acquire information from other trusted sources to update or supplement the information you have provided to us or which are collected automatically.
- We also use this information to improve our platform, prevent or detect fraud or abuses of our Services, for market research purposes and enable third parties to carry out technical, logistical or other functions on our behalf.
Sharing with Third-Party
- We share non-personally identifiable information with Google Analytics to improve our website’s load time, conversion rate and to check browser type, language preference, referring site and time of visit.
- When you subscribe for the Services, we share personal identifiable information (Name, email, account name, IP address) with Google, Authorize.net, network online/ni so that we can learn how you use the Services, provide you support and communicate with you. We use Intercom as our helpdesk and customer relationship and messaging system.
- System Communication & Transactional Emails- We use Mailchimp, Intercom, sendgrid, share a sale, hotjar. facebook, outbrain, clevertrap as our transactional email provider. The emails we send from the Services uses such third party infrastructure and we share your name and email address with them to send out the emails. Payment - We use PayU, PayTM, EBS, paypal as our payment processor and pass on your Personal Information to them when you decide to upgrade your Services account so that this information can be used to prepare invoices.
Information that cannot be uploaded
While using the Services, You shall not host, display, upload, modify, publish, transmit, update or share any information on to the Services that:
- belongs to another person and to which you do not have any right to;
- is grossly harmful, harassing, blasphemous defamatory, obscene, pornographic, pedophilic, libelous, invasive of another's privacy, hateful, or racially, ethnically objectionable, disparaging, relating or encouraging money laundering or gambling, or otherwise unlawful in any manner whatever;
- harms minors in any way;
- infringes any patent, trademark, copyright or other proprietary rights;
- violates any law for the time being in force;
- deceives or misleads the addressee about the origin of such messages or communicates any information which is grossly offensive or menacing in nature;
- impersonates another person;
- contains software viruses or any other computer code, files or programs designed to interrupt, destroy or limit the functionality of any computer resource;
- threatens the unity, integrity, defense, security or sovereignty of India, friendly relations with foreign states, or public order or causes incitement to the commission of any cognizable offence or prevents investigation of any offence or is insulting any other nation.
Your Controls and Choices
You can control your choices regarding our collection, use and sharing of your information. In accordance with local law, your controls and choices may include:
- You may correct, update and delete your Bombay Shirt Company account;
- You may change your choices for subscriptions, newsletters, product emails and alerts;
- You may request access to the personal information we hold about you and that we shall amend or delete it and we shall request third parties with whom we have shared the information do the same. Once you place a request to delete the personal information, we shall take all reasonable steps taking into account available technology and the means available to us, including technical measures to erase the personal information.
- You may choose whether we share your personal information with other companies so they can send you offers and promotions about their products and services;
- You may choose whether to receive targeted advertising from many ad networks, data exchanges, marketing analytics and other service providers;
Further, you may exercise your right to data portability, which means that you have the right to receive the Personal Information processed about you in a structured, commonly used and machine-readable i.e. HTML format. Please note that some of the rights above only may be exercised in certain situations, e.g. the right to data portability, which only applies when the processing is carried out on the basis of an agreement or a consent and if the processing is carried out by automated means. In case you have any questions regarding how we process your Personal Information, want to exercise any of your rights or want to know more about the rights, You may contact us as indicated below.
E-mail address: [email protected]
If you do not want us to process your Personal Information for direct marketing, you can give written notice thereof to us. In each newsletter, you will also be informed that You can opt out of receiving further newsletters.
You may exercise your controls and choices, or request access to your personal information, by contacting [email protected], or following instructions provided in communications sent to you. You may request access to the personal information we hold about you and that we amend or delete it and we request third parties with whom we have shared the information do the same. Once you place a request to delete the personal information, we shall take all reasonable steps taking into account available technology and the means available to us, including technical measures to erase the personal information. Please be aware that, if you do not allow us to collect personal information from you, we may not be able to deliver products and services to you, and our services may not be able to take account of your interests and preferences. If you have questions regarding the specific personal information about you that we process or retain, please contact our grievance office mentioned in clause 12.
You agree to receiving marketing information from us. If You do not want Bombay Shirt Company to process Your Personal Information for direct marketing, You can give written notice thereof to Bombay Shirt Company. In each newsletter, You will also be informed that You can opt out of receiving further newsletters.
Use of the Services is available only to persons who can form a legally binding contract under the Indian Contract Act, 1872. Our Services are not meant for minors and users below 18 (eighteen) years of age. We do not intentionally collect data from users who are below 18 (years) of age.
How long is the data kept?
We will keep Personal Information regarding you only as long as it is necessary, having regard to the purpose of the processing. This means that Personal Information collected and processed will be stored for as long as you have an account.
We will also, during the same period, keep your account information, to facilitate your easy return. We may store data for longer if required by law or if required in our legal interests, for example if there are ongoing legal proceedings.
Data security and integrity
The security, integrity and confidentiality of your Personal Information are extremely important to us. We have implemented technical, administrative and physical security measures that are designed to protect guest information from unauthorized access, disclosure, use and modification. From time to time, we review our security procedures to consider appropriate new technology and methods. Please be aware though that, despite our best efforts, no security measures are perfect or impenetrable. We limit access to personal information about you to employees who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs.
However, we may be required to share the aforesaid Personal Information with government authorities and agencies for the purposes of verification of identity or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences. You agree and consent for us to disclose your information, if so required under the applicable law.
All interactions with our Services use the Transport Layer Security/Secure Sockets Layer (TLS/SSL) protocol. We use a third-party Payment Gateway to securely process credit card transactions.
All data is encrypted via SSL/TLS when transmitted from our servers to your browser. The database backups are also encrypted. Except for your password, data isn’t encrypted while it’s live in our database (since it needs to be ready to send to you when you need it).
All data that we store in our log files or send to third party softwares that we use to analyze errors with the Software is anonymized and no personal identifiable information is sent to them.
Data Transfers, Storage and Processing Globally
Contact in case of grievances
[email protected] is the data controller for the processing of your Personal Information handled by us. If you have any concerns about privacy or grievances regarding the Services, please contact us with a thorough description and we will try to resolve the issue for you.
Name: IT Head
Email: [email protected]
Comments and Questions
What are cookies?
We and certain service providers operating on our behalf collect information about your activity on our Services using tracking technologies such as cookies, flash cookies and web beacons. We use two types: persistent cookies and session cookies. A persistent cookie helps us recognize you as an existing user, so it’s easier to return to the Services or interact with our Services without signing in again. After you sign in, a persistent cookie stays in your browser and will be read by us when you return to one of our products. Session cookies only last for as long as the session (usually the current visit to a website or a browser session). This tracking data is used for many purposes including, for example, to:
- Authentication: If you’re signed in to the Services, cookies help us show you the right information and personalize your experience.
- Preferences, features and services: Cookies can tell us what your communications and product preferences are.
While you may block and/or limit our access to cookies, if you limit the ability of websites to set cookies, if may affect your overall user experience, since it will no longer be personalized to you. It may also stop you from saving customized settings like login information.
Anonymous information means information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual guest.
IP address: An IP address is associated with the access point through which you enter the Internet, and is typically controlled by your Internet Service Provider (ISP), your company, or your university. We may use IP addresses to collect information regarding the frequency with which our guests visit various parts of our products hosting our Services, and we may combine IP addresses with personal information.
Notice may be by email to you at the last email address you provided us, by posting notice of such changes in our Services, or by other means, consistent with applicable law.
Personal information means and includes information that identifies (whether directly or indirectly) and Sensitive Personal Information of a person by reference to an identifier such as a name, an identification number, location data including postal address or an online identifier to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of such person. When anonymous information is directly or indirectly associated with personal information, this anonymous information also is treated as personal information.
Our Services may offer message boards, conversation pages, blogs, chat rooms, social community environments, profile pages, and other forums that do not have a restricted audience. If you provide personal information when you use any of these features, that personal information may be publicly posted and otherwise disclosed without limitation as to its use by us or by a third party.
Sensitive Personal Information:
Sensitive Personal Information shall have the meaning ascribed to it under the applicable law and is presently defined to mean such personal information which consists of information relating to (i) passwords; (ii) financial information such as bank accounts or credit card or debit card or other payment instrument details; (iii) physical, physiological and mental health conditions; (iv) sexual orientation; (v) medical records and history; (vi) Biometric information; (vii) any detail relating to the above clauses as provided to body corporate for providing service; and (viii) any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise; provided that any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2000 or any other law for the time being in force shall not be regarded as sensitive personal information.