Privacy Policy

Effective Date: August 31, 2026

Welcome to Heavenkaya. We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our online store, where we showcase and sell our premium Embroidery T-Shirts, Direct-to-Film (DTF) T-Shirts, and Women's Casual, Daily, Party, and Occasion Wear (including Kurtis, Kurtas, Co-ord Sets, Pairs, and Suits).

SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?

When you purchase clothing items or accessories from our store, as part of the buying and selling process, we collect the personal information you give us, such as your:

  • Full name

  • Shipping and billing address

  • Contact telephone number

  • Email address

This information is used strictly to process orders, fulfill shipments, communicate delivery milestones, and manage returns/exchanges.

When you browse our store, we also automatically receive your computer’s Internet Protocol (IP) address, operating system, and browser version to help us understand technical performance and optimize user browsing experiences across devices.

Email & SMS Marketing (if applicable): With your explicit permission, we may send you notifications regarding newly launched ethnic collections, seasonal sales, festive offers, and store updates.

SECTION 2 – CONSENT

How do you get my consent?

When you provide us with personal details to complete a transaction, verify your card, place an order, arrange for a delivery, or initiate a return, we imply that you consent to our collecting and using that information for that specific transaction only.

If we ask for your personal information for a secondary purpose, such as marketing campaigns, we will either ask you directly for expressed consent or provide you with an immediate opt-out opportunity.

How do I withdraw my consent?

If you change your mind after opting in, you may withdraw your consent for us to contact you, or for the continued collection, use, or disclosure of your information at any time by reaching out to us:

SECTION 3 – DISCLOSURE

We do not sell, lease, or trade your personal data. We may disclose your personal information only if required to do so by law, in compliance with statutory legal processes, or if you violate our Terms of Service.

SECTION 4 – SHOPIFY & PAYMENT SECURITY

Our store is hosted on Shopify Inc. They provide us with the secure e-commerce platform that allows us to sell our apparel and services to you.

Your data is stored securely through Shopify’s encrypted data storage, databases, and core application infrastructure behind enterprise-grade firewalls.

Payment Processing & PCI-DSS Compliance:

If you select a direct payment gateway to complete your purchase, Shopify encrypts your credit/debit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only as long as is necessary to complete your transaction and meet financial record-keeping obligations, after which it is deleted.

All direct payment gateways adhere to standards set by PCI-DSS as managed by the PCI Security Standards Council (a joint initiative of brands like Visa, MasterCard, American Express, and Discover).

For further insight, you may review Shopify’s Terms of Service or Privacy Statement.

SECTION 5 – THIRD-PARTY SERVICES

In general, third-party logistics partners, payment aggregators, and technical integrations utilized by Heavenkaya will collect, use, and disclose your information strictly to the extent necessary to perform their respective services (e.g., dispatch couriers, SMS status alerts, payment gateways).

However, certain third-party providers have their own independent privacy policies regarding purchase-related transactions. We recommend reading their privacy statements to understand how your information is handled.

International Jurisdictions: If you elect to proceed with a transaction that involves a provider located in another jurisdiction, your information may become subject to the laws of the jurisdiction in which that service provider or its facilities are located.

External Links: Clicking on external links on our website may direct you away from our store. We are not responsible for the privacy practices of other sites.

SECTION 6 – SECURITY

To protect your personal information, we follow industry best practices to prevent unauthorized loss, misuse, access, disclosure, alteration, or destruction. Sensitive payment details provided on our site are transmitted via Secure Socket Layer (SSL/TLS) technology and encrypted with AES-256 standards.

SECTION 7 – COOKIES

Here is a list of common cookies used by our Shopify platform to ensure proper shopping cart persistence and store analytics:

  • _session_id: Unique token, sessional (Shopify stores details on user session).

  • _shopify_visit: No data held, persistent for 30 minutes from last visit (used for internal stats).

  • _shopify_uniq: No data held, expires midnight (relative to visitor) of the next day (counts visits).

  • cart: Unique token, persistent for 2 weeks (stores shopping cart contents).

  • _secure_session_id: Unique token, sessional (protects customer account and checkout flow).

You can configure your browser to decline or delete cookies if you prefer, though some shopping functionalities may become restricted.

SECTION 8 – AGE OF CONSENT

By using this site, you represent that you are at least the age of majority in your state, province, or country of residence, or that you are the age of majority and have given us your consent to allow any of your minor dependents to use this site.

SECTION 9 – CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time, so please review it periodically. Changes and clarifications will take effect immediately upon their posting on the website. In the event of a merger, acquisition, or restructuring, customer records may be transferred to the new management to maintain continuous service.

SECTION 10 – CONTACT INFORMATION & GRIEVANCES

If you would like to access, correct, amend, or delete any personal information we hold about you, register a query, or simply need more information, please contact our Privacy Compliance Officer: