Privacy Policy

Bacstory is a lifestyle and apparel brand built around the idea that every person has a story worth wearing.

Our products may include unique QR codes or digital identifiers that allow a purchaser or wearer to activate a garment and create or access a personal Bacstory profile.

This Privacy Policy applies to information collected through our website, online store, garment activation system, customer support channels, marketing communications, and other Bacstory digital services.

Depending on how you interact with Bacstory, we may collect the following categories of information.

Certain Bacstory garments may contain a unique QR code or digital identifier.

When you scan or activate a garment, we may process information such as:

• QR code or garment identifier
• Order ID
• Registered email address or mobile number
• OTP verification information
• Product or garment information
• Activation status
• Information you choose to associate with the garment

We use this information to verify ownership or eligibility, activate the garment, prevent unauthorised claims, provide the associated digital experience, and maintain the integrity of the Bacstory platform.

We may use your personal information for purposes including:

We will not use your personal information for purposes materially unrelated to the purposes communicated to you without an appropriate legal basis or notice where required by applicable law.

Bacstory may allow users to create a profile connected to a garment.

If you choose to make your profile public, information such as your display name, bio, profile photograph, profession, interests, social links, portfolio links, or other content you voluntarily publish may be visible to other people.

You may be able to edit, update, or request removal of profile information through the mechanisms provided by Bacstory.

We may use cookies, pixels, local storage, analytics tools, and similar technologies to:

• Keep our website functioning
• Remember preferences
• Understand website usage
• Improve performance
• Detect security issues
• Measure marketing effectiveness
• Provide relevant communications or advertising where applicable

You may be able to control cookies through your browser or device settings. Disabling certain cookies may affect some website functionality.

Payments may be processed through third-party payment service providers.

Bacstory generally does not need to store your complete payment card details when the payment is processed by a third-party payment provider.

Your payment information may be subject to the privacy policies and terms of the relevant payment service provider.

We may share personal information with trusted third parties where reasonably necessary to operate Bacstory and provide our services.

These parties may process information on our behalf and, where applicable, are expected to maintain appropriate safeguards for personal information.

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Depending on the nature of the information and service, these measures may include access controls, authentication mechanisms, encryption or secure transmission, monitoring, and other security practices.

However, no method of transmitting or storing information over the internet can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide our services
• Maintain customer and transaction records
• Maintain garment activation records
• Resolve disputes
• Prevent fraud and misuse
• Comply with legal, accounting, tax, or regulatory requirements
• Enforce our agreements

When personal information is no longer reasonably required, we may delete, anonymise, or otherwise dispose of it in accordance with applicable law and our internal retention practices.

Subject to applicable law, you may have rights relating to your personal information, including the right to:

• Request information about the personal data we process
• Request correction or updating of inaccurate information
• Request deletion of personal information where legally permissible
• Withdraw consent where processing is based on consent
• Request information about the processing of your personal data
• Raise a grievance or complaint regarding our processing of personal information
• Exercise other rights available to you under applicable data-protection law

Where processing is based on consent, you may withdraw that consent. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. Some information may need to be retained where required or permitted by law.

To request access, correction, deletion, withdrawal of consent, or other privacy-related assistance, please contact us using the details below:

We may need to verify your identity before acting on certain requests in order to protect your account and personal information. We will handle valid requests within the period required under applicable law.

Bacstory's services are not intended to knowingly collect personal information from children in circumstances where parental or lawful guardian consent is required without obtaining such consent.

If you believe that a child has provided personal information to us in circumstances where such collection was not appropriate, please contact us so that we can review and take appropriate action.

Our website or Bacstory profiles may contain links to third-party websites, applications, social media platforms, portfolios, or other services.

Once you leave Bacstory's website or interact directly with a third-party service, that third party's privacy policy and terms may apply.

Bacstory is not responsible for the privacy practices, security, or content of third-party services.

Some of our technology, hosting, analytics, payment, communication, or other service providers may process information outside India.

Where personal information is transferred or processed outside India, Bacstory will take steps required by applicable law and applicable contractual or organisational safeguards.

Where permitted by applicable law, Bacstory may send you promotional communications about products, collections, events, offers, collaborations, or other Bacstory activities.

You may opt out of promotional communications by using the unsubscribe mechanism provided in the communication or by contacting us.

Even if you opt out of marketing communications, we may continue sending essential transactional or service-related communications, such as order confirmations, delivery updates, OTPs, security notifications, or important account information.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

When we make material changes, we may provide an appropriate notice through our website, email, account interface, or other reasonable means.

The updated Privacy Policy will become effective from the date stated at the beginning of the revised policy.

This Privacy Policy shall be governed by the laws applicable in India.

Any disputes relating to this Privacy Policy shall be subject to the applicable jurisdiction and dispute-resolution mechanisms provided under Indian law.

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the way Bacstory handles personal information, please contact: