Privacy Policy

Who we are

AAS Leathers (“we”, “us”, the workshop) operates this store from Chennai, India, and is the Data Fiduciary responsible for the personal data described here. You can reach us at workshop@aasleathers.in or The Workshop, 14 Leather Lane, Chennai 600 004.

What we collect

We collect only what an order or an account genuinely needs:

• Identity and contact — your name, email, phone number and delivery address.
• Order details — the pieces you bought, order history and invoices, kept to honour our lifetime repair promise.
• Account credentials — your email and a securely hashed password (we never store passwords in readable form).
• Payment confirmations — the status and reference of a payment. Your full card, UPI or bank details go to Razorpay and are never seen or stored by us.
• Technical basics — device type, browser and pages visited, used to keep the site working and secure.

Why we use it, and on what basis

We process your data to fulfil and deliver your order, to provide your account and order tracking, to answer you when you write in, to send transactional emails (order and shipping confirmations, invoices), and — only if you asked — to send our monthly letter.

Our lawful bases are the performance of your order, our legitimate interest in running the workshop securely, our legal obligations (tax and accounting), and your consent for anything optional such as the newsletter.

We do not buy data about you, sell your data, track you across other websites, or build advertising profiles.

Who we share it with

We share the minimum necessary with the partners who help fulfil your order, each under contract to protect it:

• Razorpay — to process payments securely (PCI-DSS certified).
• Courier and logistics partners — your name, address and phone, to deliver.
• Email and cloud infrastructure providers — to store data and send transactional email.
• Government authorities — only where the law requires it.

How long we keep it

Order and invoice records are retained for the period required by Indian tax law (currently eight years) and, for the pieces themselves, for as long as the lifetime repair promise may be called upon. Account data is kept until you close your account. Newsletter data is kept until you unsubscribe.

How we protect it

We use encryption in transit (HTTPS), hashed passwords, short-lived access tokens, rate limiting, and role-based access so staff see only what their work requires. No system is perfectly secure, but we apply reasonable security practices as required under the IT Act, 2000 and review them regularly.

Your rights

Under the Digital Personal Data Protection Act, 2023, you may:

• Access the personal data we hold about you.
• Ask us to correct or complete anything inaccurate.
• Ask us to erase data we no longer need to keep.
• Withdraw consent for optional processing, such as the newsletter, at any time.
• Nominate another person to exercise these rights on your behalf.
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.

Cookies

We use only the essential storage needed to keep you signed in and to remember your cart and wishlist on your own device. We do not use advertising or third-party tracking cookies. You can clear this storage from your browser at any time; the store will simply forget your cart.

Children

This store is intended for adults. We do not knowingly collect data from anyone under 18, and we will delete such data if we learn we have it.

Grievance Officer

In line with the IT Act, 2000 and the DPDP Act, 2023, you can contact our Grievance Officer with any privacy concern. We acknowledge every grievance within 48 hours and resolve it within 30 days.

Grievance Officer — [Name to be appointed], AAS Leathers, 14 Leather Lane, Chennai 600 004. Email: grievance@aasleathers.in.