Darziware — Privacy Policy

1. Scope and Acceptance

This Privacy Policy applies to personal data collected through our website darziware.com, mobile/desktop/web applications, APIs and other services provided by Liza Technologies (collectively, the “Services”). By using our Services, you consent to the collection and use of information as described here.

2. Data Controller & Contact

Data Controller: Liza Technologies

Address: B B Complex, Near Masjid, Shivaji Chowk, Mahal, Nagpur, India

Email: privacy@darziware.com | Support: support@darziware.com

If you are a resident of the European Union or India and have data protection questions, use the contact above to exercise your rights or raise a complaint (details below).

3. Personal Data We Collect

We collect different types of personal data depending on your use of the Services. Typical categories include:

Notes: Sensitive personal data (e.g., racial/ethnic origin, health data) is not required by Darziware; do not upload such sensitive information unless absolutely necessary for your business and lawful to do so in your jurisdiction.

4. How We Collect Data

• Directly from you: when you sign up, use the product, contact support, or provide data via forms and uploads.
• From your customers: through the use of Darziware features (e.g., order information, measurement records).
• Automatically: via cookies and tracking technologies when you visit our sites.
• From third parties: e.g., payment processors, identity verification providers, analytics services (only as required and with your authorization where applicable).

5. Purposes & Legal Bases for Processing (GDPR)

Under GDPR, we process personal data on one or more of the following lawful bases:

• Performance of contract: to provide the Service, billing, and support.
• Legal compliance: to comply with laws, tax and accounting obligations.
• Legitimate interests: to maintain and improve the Service, prevent fraud, and secure our systems (we balance our interests with user privacy).
• Consent: where we ask for optional consents (marketing, cookies).

For users in India, we process personal data in accordance with the applicable provisions of the Indian data protection framework (including the future DPDP Act guidance). We act as a data controller for the personal data we collect and process.

6. Cookies & Tracking

We use cookies and similar technologies for essential functionality, analytics, and performance. Typical categories:

• Essential cookies: required to operate the site and product.
• Functional cookies: remember preferences and session states.
• Analytics cookies: to aggregate usage statistics (we use aggregated data to improve the product).
• Marketing cookies: used only with your consent for advertising personalization.

You can manage cookie preferences in your browser. For detailed cookie list and durations, visit our Cookie Policy (or contact us for the exact cookie inventory).

7. Sharing & Third-Party Processors

We share personal data with third parties only as necessary to deliver and operate the Service, and under appropriate data protection controls. Typical processors include:

• Cloud hosting providers (e.g., DigitalOcean / AWS) for servers and storage.
• Payment processors for billing (e.g., Razorpay, PayPal) — they handle payment data and provide tokens/receipts.
• Messaging / notification providers (e.g., Twilio / WhatsApp Business API) if enabled.
• Analytics providers (e.g., Google Analytics) for aggregated usage insights.

We enter into written data processing agreements with our processors and require that they implement reasonable security measures.

8. International Transfers

Data may be stored and processed in locations outside your country (including India or other jurisdictions where our cloud providers operate). Where transfers occur, we ensure appropriate safeguards such as standard contractual clauses or equivalent protections required by applicable law.

9. Data Retention

We store personal data for as long as your account exists and as required to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:

• Account & billing records: retained for at least 15 years for tax/compliance.
• Customer data (orders, invoices): retained for the duration of the active subscription and for 25 days after cancellation unless otherwise requested or required by law.
• Analytics and logs: retained in aggregated or anonymized form for product improvements; raw logs retained for 48 months.

You may request deletion of your account and data — see “Your Rights” below.

10. Security

We implement reasonable technical and organizational measures to protect personal data (encryption in transit with TLS, secure access controls, regular backups, vulnerability scanning). However, no internet service is completely secure; we cannot guarantee absolute security. If we learn of a breach impacting personal data, we will notify affected users and authorities as required by law.

11. Your Rights (GDPR & India DPDP style)

Depending on your jurisdiction, you may have rights including:

• Access — request a copy of personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data (subject to retention obligations).
• Restriction — request restriction of processing in some circumstances.
• Data portability — receive your data in a commonly used machine-readable format.
• Object — object to processing where we rely on legitimate interests.
• Withdraw consent — where we process based on consent, you can withdraw it (does not affect processing prior to withdrawal).

To exercise any of the above rights, contact us at privacy@darziware.com. We will verify your identity before fulfilling requests and respond within the timeframes required by law (e.g., GDPR: 30 days except in limited circumstances).

12. Children’s Privacy

Our Services are not intended for children under 18. We do not knowingly collect personal data from children. If you believe we have collected such data, contact us to request deletion.

13. Changes to this Policy

We may update this policy from time to time. When changes are material, we will provide notice via the Service or email before they take effect. Continued use after changes means you accept the updated policy.

14. Complaints & Supervisory Authority

If you are a data subject in the EU, you have the right to lodge a complaint with your local supervisory authority. If you are in India, you may contact the relevant authority once the DPDP Act mechanisms are operational. Contact us first — we aim to resolve issues quickly.

15. Contact & Data Protection Officer

For privacy queries, data subject requests, or complaints:

16. Legal Disclaimer & Governing Law

This policy is provided for information only and does not constitute legal advice. It is governed by the laws of India and any disputes will be subject to the courts of Nagpur, Maharashtra, unless otherwise required by law.