سياسة الخصوصية

Last updated: 7 August 2026

1. Who We Are

This website, faisalabdulrehman.com, is owned and operated by Blazon Digital Media, a sole proprietorship registered in Mumbai, Maharashtra, India, under proprietor Faisal Abdul Rehman Radiowala, GSTIN 27AEFPR6162R1ZN, trading as Faisal Abdul Rehman.

For the purposes of the EU and UK General Data Protection Regulation, Blazon Digital Media is the data controller of the personal data described in this policy.

Registered address: 406, Besto Chamber, Simlim Square, Near Bhadkamkar Marg Police Station, Dr. Dadasaheb Bhadkamkar Marg, Grant Road East, Mumbai, Maharashtra 400007, India

Email: abdulrehmanfaisal201@gmail.com  
Phone: +91 99300 94009

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to this website and to any order you place with us.

2. What We Collect

Information you give us directly

Category

Examples

Identity

Name

Contact

Email address, phone number, billing address, shipping address

Order

Products ordered, order value, order history, currency

Account

Login credentials, saved addresses, order history (if you create an account)

Communications

Messages sent through our contact form, email, or WhatsApp

Marketing

Email address, if you subscribe to our newsletter


Information collected automatically

Category 

Examples

Device

IP address, browser type and version, operating system, device type, screen resolution

Usage

Pages viewed, time on page, referring URL, search terms used on our site, products viewed, cart activity

Cookies

Session identifiers, preference settings, analytics and advertising identifiers


Information we do not collect or store

We do not collect or store your full payment card number, CVV, or expiry date. Card details are entered directly into our payment processor's secure, PCI-DSS-compliant environment and are never transmitted to or held on our systems. We receive only a transaction confirmation and the last four digits of the card.

We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us at faisal@asrehexports.com and we will delete it.

We do not collect special category data such as health, biometric, racial or ethnic origin, religious belief, political opinion, sexual orientation, or trade union membership.

3. Why We Use Your Data, and Our Legal Basis

Purpose

Data used

Legal basis

Processing and fulfilling your order

Identity, contact, order, payment confirmation

Contract — necessary to perform our contract with you

Sending order confirmations, dispatch and tracking notifications

Identity, contact, order

Contract

Handling returns, refunds and complaints

Identity, contact, order, communications

Contract and legal obligation

Customer support

Identity, contact, communications

Contract / legitimate interests

Fraud prevention and order verification

Identity, contact, device, order

Legitimate interests — protecting our business and customers from fraudulent transactions

Complying with tax and accounting law

Identity, contact, order, invoice records

Legal obligation — Indian GST law and applicable tax law

Marketing emails and newsletters

Contact

Consent — you may withdraw at any time

Analytics and site improvement

Device, usage, cookies

Consent (EU/UK) / legitimate interests (elsewhere)

Advertising and remarketing

Device, usage, cookies

Consent

Where we rely on legitimate interests, we have assessed that our interest does not override your rights and freedoms. You may object to this processing at any time — see Section 8.

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

4. Who We Share Your Data With

We do not sell your personal data. We do not trade, rent, or exchange customer lists.

We share data only with the following categories of recipient, and only to the extent necessary:

Recipient

Purpose

Location

Shopify Inc.

E-commerce platform hosting our store, order processing, customer accounts

Canada / USA / EU

Payment processors, including PayPal and our card acquiring bank

Processing your payment, fraud screening

USA / EU / India

DHL Express

Delivering your order, providing tracking

Global

Google LLC (Analytics, Tag Manager, Ads, Merchant Center)

Website analytics, advertising measurement, product listings

USA

Meta Platforms

Advertising measurement and remarketing, where advertising pixels are active

USA

Our email service provider

Sending transactional and marketing emails

USA / EU

Simprosys

Product feed management for Google Shopping

India

Customs and border authorities

Statutory customs declarations for international shipments

Destination country

Professional advisers and tax authorities

Accounting, audit, legal and statutory compliance

India

Each of these parties is bound to process your data only on our instructions or under their own lawful basis, and to apply appropriate security measures.

We may also disclose data where we are legally required to do so by a court order, regulator, or law enforcement authority.

5. International Data Transfers

Please read this section carefully if you are in the EU, EEA or United Kingdom.

Our business is based in India. When you place an order with us, your personal data is transferred to and processed in India. India has not received an adequacy decision from the European Commission or the UK Government.

Where we transfer personal data from the EEA or UK to India, or to any other country without an adequacy decision, we rely on Standard Contractual Clauses approved by the European Commission, and the UK International Data Transfer Addendum where applicable, as the legal safeguard under Article 46 GDPR. We apply additional technical and organisational measures including encryption in transit, access controls, and data minimisation.

You may request a copy of the safeguards we rely on by emailing faisal@asrehexports.com.

Data may also be transferred to the United States and other jurisdictions through the service providers named in Section 4, each under their own transfer mechanisms.

6. How Long We Keep Your Data

Data

Retention period

Order and invoice records

8 years from the end of the relevant financial year, as required under Indian tax and GST law

Customer account data

For as long as your account remains active, plus 12 months after your last order or login

Marketing subscriber data

Until you unsubscribe, plus 30 days to process the removal

Customer support correspondence

24 months from the date of last contact

Website analytics data

14 months

Fraud prevention records

6 years

Where we are required to retain records by law, we will retain them for the statutory period even if you request deletion. We will restrict processing to storage only in that case, and we will tell you when this applies.

7. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

  • Strictly necessary — cart functionality, checkout, login sessions, and security. These cannot be disabled.
  • Analytics — understanding how visitors use our site so we can improve it.
  • Advertising — measuring the performance of our advertising and showing relevant products.

If you are visiting from the EU, EEA or UK, non-essential cookies are set only after you give consent through our cookie banner. You can change or withdraw your cookie preferences at any time using the cookie settings link in our footer.

You can also block or delete cookies through your browser settings. Doing so may prevent parts of our site, including checkout, from working correctly.

8. Your Rights

Depending on where you live, you have some or all of the following rights:

Access — obtain a copy of the personal data we hold about you.
Rectification — have inaccurate or incomplete data corrected.
Erasure — have your data deleted, subject to our legal retention obligations.
Restriction — ask us to limit how we use your data.
Portability — receive your data in a structured, machine-readable format, or have it transferred to another controller.
Objection — object to processing based on legitimate interests, and to direct marketing at any time.
Withdraw consent — where processing is based on consent.
Automated decision-making — we do not make decisions producing legal or similarly significant effects about you by automated means alone.

How to exercise your rights: email faisal@asrehexports.com with your request. We will respond within 30 days. We may ask you to verify your identity before acting on a request, to protect your data from unauthorised disclosure. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

If you are in the EU or EEA: you have the right to lodge a complaint with your national data protection supervisory authority.

If you are in the UK: you may complain to the Information Commissioner's Office at ico.org.uk.

If you are in California: you additionally have the right to know what personal information is collected, used, shared or sold; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; and the right to non-discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA and CPRA. To exercise any California right, email faisal@asrehexports.com.

If you are in India: you have rights under the Digital Personal Data Protection Act, 2023, including the right to access, correction, erasure, and grievance redressal. Our Grievance Officer is contactable at faisal@asrehexports.com.

If you are in Australia: you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

9. Marketing Communications

We send marketing emails only to people who have opted in. Every marketing email contains an unsubscribe link that works immediately. You can also unsubscribe by emailing faisal@asrehexports.com.

Transactional messages such as order confirmations, dispatch notifications, tracking updates, and responses to your enquiries are not marketing and will continue to be sent while you have an active order with us.

10. Security

We protect your data using SSL/TLS encryption across the entire site, PCI-DSS-compliant payment processing, restricted staff access on a need-to-know basis, and secure hosting through Shopify's infrastructure.

No method of transmission or storage is completely secure. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and notify affected individuals without undue delay where required.

11. Third-Party Links

Our website may link to third-party sites, including social media platforms and video hosting services. We are not responsible for their privacy practices. We encourage you to read the privacy policy of any site you visit.

12. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by email to registered customers or by a prominent notice on this website. Continued use of the site after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

Email: abdulrehmanfaisal201@gmail.com  
Phone / WhatsApp: +91 99300 94009
Hours: Monday to Saturday, 11:00 AM – 7:30 PM IST (GMT+5:30)
Response time: Within one business day

Postal address:
Blazon Digital Media
406, Besto Chamber, Simlim Square
Near Bhadkamkar Marg Police Station
Dr. Dadasaheb Bhadkamkar Marg, Grant Road East
 Mumbai, Maharashtra 400007, India