INK LANE TEES — Raw Streetwear

INK LANE TEES PRIVACY POLICY Last reviewed: 14 June 2026 This Privacy Policy describes how INK LANE TEES ("we", "us", "our") collects, uses, and shares your personal data when you visit, browse, or shop at https://inklanetees.com or interact with us on connected platforms (collectively, the "Services"). We are headquartered in India and operate under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. 1. INFORMATION WE COLLECT a) Information you give us directly - Name, email, phone, and shipping/billing address (when you create an account, place an order, or contact support) - Login credentials and authentication tokens (we hash passwords; we never store plain-text passwords) - Payment details — handled exclusively by our PCI-DSS compliant payment processors (Razorpay, Stripe); we never store full card numbers on our servers - Custom design files, uploaded photos for our AI Try-On feature, and product preferences - Communications you send us (support emails, reviews, WhatsApp messages) b) Information collected automatically - Device, browser, OS, IP address, and approximate geolocation - Pages viewed, time on page, click paths, referring URLs, search terms - Cookies and similar local-storage identifiers (see Section 6) c) Information from third parties - Authentication providers: Google OAuth (when you sign in with Google) - Payment status and refund events from Razorpay/Stripe - Shipping events from our logistics partner (Shipway) - Marketing analytics from Meta Pixel (Facebook), Google Analytics 4, and Google Ads conversion tracking 2. HOW WE USE YOUR INFORMATION We use your personal data only for the purposes listed below and only to the extent necessary: - To process and fulfil orders, generate GST invoices, and arrange delivery - To operate your account, wishlist, wallet (Ink Coin programme), and loyalty tier - To run our AI Try-On, AI stylist, and AI mockup features (uploaded photos are processed by our LLM providers — OpenAI, Anthropic, Google, fal.ai — and are NOT used to train their public models when invoked via business APIs) - To send transactional WhatsApp/SMS/email about orders, shipping, refunds, and product drops - To run marketing campaigns on Meta (Facebook + Instagram) and Google Ads, with your consent. You may opt out at any time (see Section 7) - To detect, prevent, and prosecute fraud or abuse - To comply with Indian tax, customs, and consumer protection laws 3. LEGAL BASES We process personal data on one or more of the following legal bases: - Performance of a contract (to fulfil your order) - Your consent (for marketing communications, AI Try-On photo processing, etc.) - Legitimate interest (fraud prevention, basic analytics, securing our website) - Legal obligation (tax, accounting, mandatory record-keeping) 4. SHARING YOUR INFORMATION We share your personal data ONLY with the following categories of recipients and ONLY for the purposes stated: - Payment processors: Razorpay, Stripe (only what's needed to capture payments and process refunds) - Logistics partner: Shipway (name, phone, full shipping address, order details) - Communications: WhatChimp + Meta WhatsApp Business (name, phone, order status messages) - Email marketing: Mailchimp (email + first name, only if you opted in) - Cloud storage: Cloudflare R2 (encrypted product images, order documents) - Advertising platforms: Meta (Facebook + Instagram) and Google Ads — hashed email/phone for Custom Audience matching, only if you opted in - Analytics: Google Analytics 4, Meta Pixel — anonymized event data - AI providers: OpenAI, Anthropic, Google AI, fal.ai — processed at request time, NOT retained for model training - Government or law-enforcement authorities when legally compelled We do NOT sell or rent your personal data to any third party. 5. INTERNATIONAL TRANSFERS Some of our service providers (OpenAI, Anthropic, Google, Stripe, Mailchimp, Meta) process data outside India, primarily in the United States and European Union. These transfers are protected by Standard Contractual Clauses or equivalent safeguards as required by Indian law. 6. COOKIES AND TRACKING We use the following cookies and storage identifiers: - Essential cookies: session token, cart contents, CSRF token (you cannot disable these — they are necessary for the site to work) - Analytics cookies: Google Analytics 4 (anonymized), Meta Pixel - Advertising cookies: Meta Pixel, Google Ads conversion tracking You can decline non-essential cookies via your browser settings. We honour the Global Privacy Control (GPC) signal where supported. 7. YOUR RIGHTS Under the Digital Personal Data Protection Act, 2023, you have the right to: - Access the personal data we hold about you - Correct inaccurate or outdated data - Erase your account and associated personal data (subject to legal retention obligations such as GST records) - Withdraw consent for marketing communications at any time - Lodge a grievance with our Grievance Officer (contact below) or with the Data Protection Board of India To exercise any right, email us at hello@inklanetees.io with the subject line "DPDP Request — [your request type]". We respond within 30 calendar days. 8. DATA RETENTION - Account data: retained while your account is active; deleted 24 months after your last login (subject to legal hold) - Order and invoice data: retained for 8 years to comply with GST and Income Tax record-keeping - AI Try-On uploads: deleted from our servers within 7 days; never used for model training - Marketing consents and audit logs: retained for 3 years 9. CHILDREN Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it immediately. 10. SECURITY We protect your data with industry-standard safeguards: TLS 1.3 encryption in transit, encrypted-at-rest cloud storage, bcrypt password hashing, JWT session tokens, brute-force lockouts, IP rate-limiting, and quarterly security audits. No system is 100% secure — if you suspect a security incident, contact our Grievance Officer immediately. 11. CHANGES TO THIS POLICY We may update this policy from time to time. Material changes will be notified via banner on the website and email to registered users at least 7 days before they take effect. 12. GRIEVANCE OFFICER Per Rule 5(9) of the Information Technology (Reasonable Security Practices) Rules, 2011: Name: INK LANE TEES — Customer Privacy Office Email: hello@inklanetees.io Response time: We acknowledge grievances within 48 hours and resolve them within 15 calendar days. By using inklanetees.com you confirm that you have read and understood this Privacy Policy.

PRIVACY POLICY.