This policy explains what personal data Jay Patel, trading as Thread’s Lab collects when you use this website, why we collect it, who we share it with and what rights you have over it.
It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Who is responsible for your data
Jay Patel
Shop no. 222, Sharan Business Centre, Green City, Sector 26, near DMart, Gandhinagar, Gujarat 382421
Email: threadslabin@gmail.com
Phone: +91 97734 76085
We are the Data Fiduciary for the personal data described here.
2. What we collect
You give us directly
| Data | When |
|---|---|
| Name, email, phone | Account, checkout, enquiries |
| Delivery and billing address | Checkout |
| Order history | When you buy |
| GSTIN and company name | B2B orders |
| Artwork and brand files | Custom orders |
| Reviews and messages | When you submit them |
Collected automatically
- IP address, browser and device type
- Pages viewed, time on site, referring website
- Cookie identifiers (see section 7)
What we never collect or store: your card number, CVV or UPI PIN. Payment details go straight from your browser to Razorpay. We only see whether a payment succeeded, the amount, and a transaction reference.
3. Why we use it
| Purpose | What it covers |
|---|---|
| Fulfilling your order | Payment, packing, shipping, delivery updates |
| Customer support | Questions, returns, complaints |
| Legal compliance | GST invoicing, tax records |
| Site improvement | Which pages and products work |
| Marketing | Only if you opt in |
| Fraud prevention | Detecting abusive orders |
We do not use your data for any purpose beyond these without asking you first.
4. Legal basis
We process your data on these grounds:
- Your consent — marketing emails and non-essential cookies. Withdrawable at any time.
- Performance of a contract — everything needed to fulfil an order you placed.
- Legal obligation — tax and accounting records we must keep.
- Legitimate use — fraud prevention and securing the site.
5. Who we share it with
We share the minimum necessary, with:
| Recipient | What they get | Why |
|---|---|---|
| Razorpay | Name, email, phone, amount | Payment processing |
| Shiprocket and couriers | Name, address, phone | Delivering your parcel |
| Email and SMS providers | Name, email, phone | Order updates, opted-in marketing |
| Analytics providers | Anonymised usage data | Site performance |
| Our hosting provider | Data stored on the site | Running the website |
| Government authorities | As legally required | Tax, or a valid legal order |
We do not sell your personal data. Not to advertisers, not to data brokers, not to anyone. Our partners are bound to use your data only for the service they provide us.
6. Where your data is stored
Data is stored on servers in India where possible. Some service providers may process data outside India; where they do, we require appropriate safeguards and comply with any government restrictions on cross-border transfer under the DPDP Act.
7. Cookies
We use:
- Essential cookies — cart contents, login session, checkout security. The site can’t function without them, so they don’t require consent.
- Analytics cookies — how visitors use the site, in aggregate.
- Marketing cookies — only if you consent, to show relevant ads.
You can block or delete cookies in your browser settings. Blocking essential cookies will break the cart and checkout.
8. How long we keep it
| Data | Retention |
|---|---|
| Order and invoice records | 8 years, tax law |
| Account details | Until you delete the account |
| Marketing consent records | Until withdrawn, plus 1 year |
| Support conversations | 2 years |
| Analytics data | 26 months |
| Custom order artwork | 2 years after the order |
After these periods, data is deleted or irreversibly anonymised. If you want your custom order artwork removed sooner, just ask.
9. Your rights
Under the DPDP Act, 2023 you have the right to:
- Access — a summary of the data we hold and who we’ve shared it with
- Correction — fix inaccurate or incomplete data
- Erasure — ask us to delete data we no longer need
- Withdraw consent — as easily as you gave it
- Nominate — appoint someone to exercise these rights if you can’t
- Grievance redressal — a clear route to complain
To exercise any of these, email threadslabin@gmail.com. We respond within 30 days. We may need to verify your identity first.
Some data we must keep despite a deletion request. Invoices, for example, are required by tax law for 8 years.
10. Marketing emails
We only send marketing if you opted in. Every email has an unsubscribe link, and unsubscribing takes effect within 48 hours.
Order confirmations, shipping updates and support replies are transactional, not marketing. You’ll receive those for any order you place.
11. Security
We use HTTPS across the site, restrict staff access to order data, and use PCI-DSS compliant payment infrastructure.
Being straight with you: no system is completely secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required by the DPDP Act.
12. Children
This site is not intended for anyone under 18, and we don’t knowingly collect data from children. If you believe a child has given us personal data, email threadslabin@gmail.com and we’ll delete it.
13. Changes to this policy
We may update this policy. The “last updated” date at the foot of this page shows when it last changed. Significant changes affecting how we use your data will be notified by email or a site notice.
14. Grievance Officer
For any concern about your personal data:
| Name | Jay Patel |
| threadslabin@gmail.com | |
| Phone | +91 97734 76085 |
| Address | Shop no. 222, Sharan Business Centre, Green City, Sector 26, near DMart, Gandhinagar, Gujarat 382421 |
We acknowledge every grievance within 48 hours and aim to resolve it within one month.
Want to see or delete your data?
Send us a request and we’ll come back to you within 30 days.
Last updated: 16 September 2026