Privacy Policy

Last updated: 12 July 2026 · Effective from: 12 July 2026

Unigrow Company ("we", "us", "our") owns and operates the website https://seoulstreet.in ("Seoul Street", "Platform"). We respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains what data we collect, why we collect it, how we use and share it, how long we keep it, how we secure it, and what rights you have.

This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as applicable.

1. Data We Collect

1.1 Data you give us

• Account data: name, email address, mobile number, password (stored only in hashed form), date of birth (if you choose to provide it).
• Order and delivery data: billing address, shipping address, PIN code, recipient name and phone number, order history.
• Communications: the content of emails, contact-form messages, chat messages and support calls, including any photographs or videos you send us in support of a return or damage claim.
• Refund data: where a refund cannot be made to the original payment instrument, the bank account number, account holder name and IFSC code you provide for an NEFT/IMPS transfer.
• User-generated content: product reviews, ratings and photographs you choose to publish.

1.2 Data collected automatically

• IP address, browser type and version, operating system, device type and identifiers.
• Pages viewed, products browsed, time spent, referring URL, and clickstream data.
• Cookies and similar technologies (see Section 6).

1.3 Payment data — what we do not collect

2. Why We Collect It, and on What Basis

We do not use your personal data for any purpose that is incompatible with the purpose for which it was collected, and we collect only what is necessary for the purposes stated above.

3. Who We Share It With

We do not sell, rent or trade your personal data. We share it only as follows, and only to the extent necessary:

• Payment gateways and payment aggregators — to process payments and refunds securely.
• Logistics and courier partners — your name, delivery address and phone number are shared so that your order can be delivered and so that the delivery agent can contact you.
• Technology service providers — website hosting, cloud storage, email delivery, SMS and analytics providers, engaged under contract and permitted to use the data only to provide services to us.
• Professional advisers — accountants, auditors and lawyers, where necessary.
• Government and law-enforcement authorities — where we are required to do so by law, by a court order, or by a lawful request from a competent authority, or where disclosure is necessary to enforce our Terms or to protect the rights, safety or property of Unigrow Company, our customers, or the public.
• A successor entity — in the event of a merger, acquisition, restructuring or sale of assets, in which case you will be notified of any change in the handling of your data.

4. Data Storage and International Transfer

Your data is stored on servers operated by our hosting and cloud providers. Some of these providers, and some of our analytics and communication tools, may store or process data on servers located outside India. Where data is transferred outside India, we take reasonable steps to ensure that it is protected to a standard consistent with this Policy and with applicable Indian law, including through contractual safeguards with the provider.

5. Data Retention

• Account data is retained for as long as your account is active.
• Order, invoice and transaction records are retained for at least 8 years, to comply with tax, GST, accounting and audit obligations under Indian law. This retention continues even if you delete your account.
• Support correspondence is retained for up to 3 years for quality and dispute-resolution purposes.
• Marketing data is retained until you withdraw your consent, after which you are added to a suppression list solely to ensure we do not contact you again.
• Server and access logs are retained for up to 12 months for security purposes.

When data is no longer required for any lawful purpose, it is deleted or irreversibly anonymised.

6. Cookies and Tracking

We use cookies and similar technologies to make the Platform work and to understand how it is used:

• Strictly necessary cookies — to keep you logged in, to maintain your shopping cart, and to protect against fraud and CSRF attacks. The Platform cannot function without these.
• Preference cookies — to remember your settings, such as language or region.
• Analytics cookies — to measure traffic and understand which pages and products are of interest, so we can improve the Platform.
• Marketing cookies — where enabled, to measure the effectiveness of our advertising and to show you relevant offers.

You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the Platform, including checkout, from working correctly.

7. Security

We implement reasonable security practices and procedures proportionate to the nature of the data we hold, including:

• Encryption in transit — the entire Platform is served over HTTPS using TLS.
• Password protection — passwords are stored using a one-way salted hash and are never stored or transmitted in plain text.
• Access control — personal data is accessible only to authorised personnel who need it to perform their role.
• Payment isolation — payment credentials never touch our servers; they are handled entirely by PCI-DSS compliant gateways.
• Ongoing maintenance — regular patching, backups, and monitoring for unauthorised access.

No method of transmission or storage is entirely secure. While we take our obligations seriously, we cannot guarantee absolute security. You are responsible for keeping your account password confidential. If we become aware of a personal data breach that is likely to affect you, we will notify you and the competent authority as required by law.

8. Your Rights

Subject to applicable law, you have the right to:

• Access — obtain a summary of the personal data we hold about you and how it is processed.
• Correction — have inaccurate or incomplete data corrected or completed.
• Erasure — request deletion of your personal data and your account, except where we are required by law to retain it (for example, invoices and transaction records).
• Withdraw consent — withdraw consent for any processing based on it, including marketing, at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Grievance redressal — raise a complaint with our Grievance Officer (Section 12).
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email support@seoulstreet.in from your registered email address. We may ask for information to verify your identity before we act on a request. We will respond within 30 days.

9. Marketing Communications

We send promotional emails or messages only where you have opted in. Every marketing email contains an unsubscribe link, and you can also opt out at any time by writing to support@seoulstreet.in. Transactional messages relating to an order you have placed — such as order confirmation, dispatch and refund notifications — are not marketing messages and will continue to be sent while an order is in progress.

10. Children's Data

The Platform is not directed at children. We do not knowingly collect personal data from any person under the age of 18 without the verifiable consent of a parent or legal guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-Party Websites

The Platform may link to third-party websites, including those of our payment gateway and logistics partners. This Policy does not apply to those websites. We encourage you to read the privacy policy of any third-party site you visit.

12. Grievance Officer

If you have any question, concern or complaint about this Policy or about how your personal data is handled, please contact:

Your complaint will be acknowledged within 48 hours and resolved within 30 days of receipt.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The updated version takes effect when it is published on this page, with a revised "Last updated" date. Where the change is material, we will make reasonable efforts to notify you. Please review this page periodically.

14. Consent

By using the Platform, creating an account, or placing an order, you consent to the collection, use, storage, sharing and processing of your personal data as described in this Privacy Policy.