Off-White is a trademark owned by Off-White LLC. This website is independently operated by Brand Concepts Ltd, which is the seller of record for all products and services offered through this website.
INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA ON THE OFF-WHITE INDIA WEBSITE
Pursuant to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules"), and the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), this page provides information on how we process the personal data we collect when you visit the off-white.in website (the "Site") and enjoy its services. The information is provided only for the Site and possible sub-domains and not for third-party websites that can be visited via hypertextual connections or links. Please read this information carefully before providing your personal details.
1. Data Fiduciary
Brand Concepts Limited, with registered office in Indore, Madhya Pradesh, India ("Brand Concepts" or "we"), is the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023, for activities related to the management of the Site, your registration on the Site (personal account), the sale of products offered on the Site, and the marketing and profiling activities described in greater detail below.
For any queries related to the processing of your personal data, you may contact us at: support@off-white.in
2. Consent Manager / Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023, and the Consumer Protection (E-Commerce) Rules, 2020, Brand Concepts Limited has appointed a Grievance Officer who is also responsible for addressing data-related concerns:
Name: Grievance Officer - Off-White India
Email: support@off-white.in
Address: Brand Concepts Limited, Indore, Madhya Pradesh, India
Working Hours: Monday to Friday, 10:00 AM to 6:00 PM IST (excluding public holidays)
All grievances will be acknowledged within 48 hours and resolved within one (1) month of receipt.
3. Categories of Personal Data Collected
a) Browsing data: browsing the Site and accessing the related services involve the acquisition of some personal data relating to your browsing, such as, for example, the IP addresses or domain names of the devices you use to connect to the Site, the uniform resource identifier (URI) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment you use.
b) Personal and transactional data: the personal data that you voluntarily provide to us when you register on the Site, access its services, purchase a product or interact with the customer support service, such as, for example, personal data, contact details, data relating to purchases and banking data.
c) Marketing and profiling data: personal and contact data processed with your express consent for marketing purposes, i.e. submission of newsletters, e-mails, communications and updates on products, sales, promotional campaigns, events and other initiatives, or to send personalised commercial communications and carry out targeted promotional activities.
d) Cookies: the Site uses cookies. For more information on cookies and their use on the Site, consult the cookie policy.
4. Purpose, Legal Basis and Retention Period
I. Your personal data will be processed by Brand Concepts Limited as follows:
A - Site Registration (Personal Account)
Purpose: Allow you to create your personal account on the Site and access related services.
Legal Basis: Performance of contract or pre-contractual measures you have requested, as recognised under the DPDP Act, 2023 and the Indian Contract Act, 1872.
Data Retention Period: Until your request for cancellation of the account or termination of the service.
B - Assistance with Purchases and General Information Requests
Purpose: Assist with purchases made in stores or on the Site, as well as respond to general product or brand information requests.
Legal Basis: Performance of contract or pre-contractual measures you have requested.
Data Retention Period: For the time needed to respond to your request.
C - Sale of Products
Purpose: To enter into and perform the sales contract for the products offered on the Site, including the management and fulfilment of purchase orders, the delivery of the products, the communication of any facts relating to the order, the management of payments and anti-fraud controls.
Legal Basis: Performance of contract or pre-contractual measures you have requested.
Data Retention Period: For the period necessary to process the purchase order (without prejudice to the further retention of the data where necessary for subsequent purposes).
D - After-Sales Assistance
Purpose: To manage and respond to requests you send us in relation to the products purchased on the Site, for example in relation to returns, refunds or complaints.
Legal Basis: Performance of contract or pre-contractual measures you have requested.
Data Retention Period: For the period necessary to respond to your request (without prejudice to the further retention of the data where necessary for subsequent purposes).
E - Compliance with Legal Obligations
Purpose: To comply with legal obligations under Indian law, in particular under the IT Act 2000, the DPDP Act 2023, the Goods and Services Tax Act 2017, and other applicable civil, tax, and financial legislation.
Legal Basis: Compliance with legal obligations.
Data Retention Period: For the period provided for by applicable Indian legislation. Billing data is kept for 8 years from the invoice issue date, as required under the Income Tax Act, 1961.
F - Disputes and Prevention of Unlawful Acts
Purpose: To defend or assert a right and/or to ascertain and prevent fraud and other unlawful acts.
Legal Basis: Legitimate interest of the Data Fiduciary under the DPDP Act, 2023.
Data Retention Period: For the period necessary for the purpose for which the data are collected, in accordance with applicable Indian limitation periods under the Limitation Act, 1963.
G - Marketing and Commercial Communications
Purpose: Send information and commercial communications, including promotional content, regarding products and services offered on the Site.
Legal Basis: Consent of the Data Principal, as required under the DPDP Act, 2023.
Data Retention Period: Until withdrawal of consent or for a period of 3 years since the last interaction with the Site, whichever is earlier.
H - Profiling
Purpose: Analyse the data subject's tastes, preferences, habits, and behaviours to send personalised commercial communications based on their commercial and behavioural profile.
Legal Basis: Consent of the Data Principal, as required under the DPDP Act, 2023.
Data Retention Period: Until withdrawal of consent or for a period of 3 years since the last interaction with the Site, whichever is earlier.
5. Nature of Data Provision
The provision of data in the fields marked with an asterisk (*) for the purposes referred to in sections A, B, C and D above is necessary to register on the Site, use the related services and purchase products on the Site. Failure to provide these data will make it impossible to obtain the products and services requested. The provision of data in the fields not marked with an asterisk, although useful in facilitating relations with us, is optional and the failure to provide them will not affect your ability to obtain the requested products and services.
Regarding the marketing and profiling purposes referred to in sections G and H above, the provision of data is optional and based on your express consent. Withdrawing or withholding consent means that we will be unable to process your data for marketing and profiling purposes. You may still register on the Site, purchase products and use the related services.
6. Existence of an Automated Decision-Making Process (Profiling)
We may pursue the profiling purposes referred to in section H by analysing information about you (derived, for example, from purchases made), so as to send personalised commercial communications and carry out targeted promotional activities. The processing will be carried out using data and information processing tools and, once the data are cross-checked, a commercial profile will be created. For the same purpose, such data will be associated with data subsequently provided by you or already held by us. This processing is carried out only with your explicit consent, which may be withdrawn at any time.
7. Methods of Processing Data
Your data will be processed by Brand Concepts Limited using mainly information technology and telematics. Specific security measures have been implemented in accordance with the IT Act, 2000, the SPDI Rules, 2011, and the DPDP Act, 2023, to prevent data loss, unlawful or improper use of, and unauthorised access to, data. Your data will be processed in compliance with the technical and organisational rules aimed at preventing the unlawful, improper or unauthorised use of data.
8. Categories of Recipients of Personal Data and Disclosure of Data
To pursue the purposes for which the data are collected, Brand Concepts Limited may communicate the data to the following categories of recipients or data processors:
• information technology service providers, including internet service providers and cloud service providers;
• persons who perform logistics, warehousing, promotional and delivery services;
• entities that perform customer service activities;
• firms and other persons that provide assistance and consultancy services such as legal, fiscal, accounting, economic-financial, technical-organisational, data processing and communications services;
• entities that provide banking, financial, insurance and payment processing services;
• entities that perform fraud control activities with respect to payments;
• subsidiaries, parent companies, associated and affiliated companies;
• public authorities, regulatory bodies and supervisory and control bodies as required under applicable Indian law.
The updated list of data processors is available upon specific request made via the methods indicated in section 12. Exclusively for the purposes indicated above, your personal data may also be communicated to employees, collaborators and staff members of Brand Concepts Limited so as to allow them to perform their functions and duties. No data collected on the Site are disclosed to third parties unless strictly necessary.
9. Transfer of Data Outside India
Your personal data may be transferred, for the purposes for which they are collected, to entities located outside India, including to countries that may not provide the same level of data protection as India. Any such transfer will be carried out in accordance with the provisions of the Digital Personal Data Protection Act, 2023, and any rules or regulations notified thereunder, including any requirements relating to adequacy, safeguards, or approval by the Data Protection Board of India. To obtain more information about such transfers, please contact us at: support@off-white.in
10. Social Buttons and Widgets
The Site also includes social buttons/widgets. These social network icons (such as Facebook, Instagram, YouTube, and others) allow you to access the social network by clicking on the relevant icon. Through these tools, you can share content and recommend products from the Site on social networks. By clicking on the social buttons/widgets, the social network may collect data relating to your visit to the Site. This privacy policy does not concern the processing of your data by the social network and, as such, you should consult the privacy policy provided by such social network for more information.
Aside from the data you voluntarily share with the selected social network by clicking on the social buttons/widgets, Brand Concepts Limited does not disclose or share any personal data with the social network.
11. Minors
The Site and services are intended for the sale of products and services to persons of legal age. Brand Concepts Limited does not intentionally collect the personal data of persons under the age of 18. In accordance with the Digital Personal Data Protection Act, 2023, processing of personal data of children requires verifiable parental consent. By accessing the services of the Site, you declare that you are of legal age. If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete such data promptly.
12. Rights of Data Principals
In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, you have the following rights with respect to the personal data you provide:
• Right to access: to obtain confirmation as to whether or not personal data concerning you are being processed, and if so, to access such personal data and obtain a summary of the processing activities;
• Right to correction: to obtain the correction of inaccurate or incomplete personal data concerning you;
• Right to erasure: to obtain the erasure of personal data concerning you, to the extent permitted under applicable Indian law;
• Right to grievance redressal: to have your grievance relating to the processing of your personal data addressed in accordance with the DPDP Act, 2023;
• Right to nominate: to nominate another individual who shall exercise your rights in the event of your death or incapacity;
• Right to withdraw consent: if you have expressly consented to the processing of your personal data for one or more specific purposes, to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, please send a message to: support@off-white.in. You may also exercise your rights by sending a written request to: Brand Concepts Limited, Indore, Madhya Pradesh, India.
You also have the right to lodge a complaint with the Data Protection Board of India, established under the Digital Personal Data Protection Act, 2023, if you believe that the processing of your personal data is not in accordance with applicable law.
13. Cookies
The Site uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit the Site. We use cookies to improve your browsing experience, analyse Site usage, and support our marketing activities. For detailed information on the types of cookies we use, their purpose, and how you can manage your cookie preferences, please consult our Cookie Policy available on the Site.
14. Changes to This Privacy Policy
Brand Concepts Limited reserves the right to amend or update this Privacy Policy at any time to reflect changes in applicable Indian law, regulatory requirements, or our data processing practices. Any changes will be published on this page with the updated effective date. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after the publication of any changes constitutes your acceptance of the updated Privacy Policy.