Footwell – Privacy Policy

Last Updated: 10-Mar-2025

Footwell is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and protect your personal data. By using our website, you consent to the practices described in this policy.

1. Data Collection

We collect personal data to process orders, improve our services, and enhance your experience on our website. The types of personal data we collect may include:

• Personal Identification Information: Name, email address, postal address, phone number, and other contact details.
• Transaction Information: Details about purchases you make and payment information (processed securely by our payment gateway and not stored by us).
• Account Information: Username, password, order history, preferences, and communication logs if you create an account.
• Website Usage Data: IP address, browser type, device information, pages visited, and Browse behavior, collected through cookies and similar technologies.

2. Use of Data

Your data is used for the following purposes:

• Order Processing and Fulfillment: To process your orders, manage payments, arrange shipping, and handle returns and replacements.
• Customer Communication: To communicate with you about your orders, provide customer support, and respond to your inquiries.
• Service Improvement: To analyze website usage and customer behavior to improve our website, products, and services.
• Marketing Communications: With your consent, to send you promotional emails and newsletters about new products, offers, and updates. You can opt-out of these communications at any time.
• Legal Compliance: To comply with applicable legal obligations, regulations, and legal processes.

3. Data Sharing and Disclosure

We are committed to protecting your personal data and do not share it with third parties except as described below:  

• Service Providers: We may share your data with third-party service providers who assist us in operating our website, conducting our business, or servicing you, such as payment processors, shipping carriers, and marketing service providers. These parties are contractually obligated to protect your data and use it only for the purposes we specify.  
• Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).  
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of the transaction, subject to applicable law.
• With Your Consent: We may share your data with third parties if we have obtained your explicit consent to do so.

We do not sell, trade, or otherwise transfer your personal data to outside parties for marketing or advertising purposes without your explicit consent.  

4. Data Protection

We implement robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Utilizing encryption technologies to protect sensitive data during transmission and storage.
• Secure Payment Processing: All payment transactions are processed through secure payment gateways compliant with PCI DSS standards.
• Access Controls: Limiting access to personal data to authorized personnel only.
• Regular Security Assessments: Conducting regular security audits and vulnerability assessments to ensure our security measures remain effective.
• Compliance with DPDP Act 2023: We comply with the Digital Personal Data Protection Act, 2023, and other applicable data protection laws in India.  

5. Your Rights

Under the Digital Personal Data Protection Act, 2023, you have certain rights regarding your personal data:

• Right to Access: You have the right to request access to the personal data we hold about you.  
• Right to Correction: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data.  
• Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data in certain situations.  
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
• Right to Grievance Redressal: You have the right to register your grievance to us and to the Data Protection Board of India.  

To exercise any of these rights, please contact us using the contact information provided in the Contact Information section.

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.  

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and the applicable legal requirements.  

7. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside India and choose to provide information to us, please note that we transfer the data, including Personal Data, to India and process it there.  

8. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post any changes on our website and update the “Last Updated” date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.  

9. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information provided in the Contact Information section.