EXXUIT Maison de Couture & Atelier

Privacy Policy & Client Data Protection Notice

Discretion, confidentiality, and data security are core pillars of our heritage. This policy is formulated in compliance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

Effective date: January 1, 2026

Data Fiduciary & Contact Details

At Exxuit, discretion, confidentiality, and data security are core pillars of our heritage. We are committed to protecting the personal data entrusted to us across all Exxuit platforms, bespoke atelier appointments, private client consultations, and Client Care interactions in India.

For the purposes of the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for determining the purpose and means of processing your personal information is:

Exxuit Private Limited
Attention: Data Protection & Privacy Officer
Client Care Email: ________________
Client Care Telephone: ________________
Corporate Address: New Delhi, India

Personal Information We Collect

To deliver a personalized luxury experience across India, Exxuit collects data provided directly by you, collected automatically during online browsing, or generated via atelier service touchpoints:

  • Identity & Contact Details: Title, full name, preferred address, delivery locations within India, contact number, email address, and GSTIN (when provided for commercial invoicing).
  • Atelier & Transactional Records: Purchase history, bespoke garment measurements, tailoring preferences, fit archives, tax invoices, repair history, and client service records.
  • Private Client Preferences: Aesthetic choices, curated wishlists, private appointment history, event invitations, and preferences shared with our Client Care Advisors.
  • Account Profile Data: Account credentials, saved delivery locations across India, wishlist items, and communication preferences.
  • Technical & Browsing Data: IP address, device telemetry, operating system, browser type, network credentials, and language settings.
  • Payment & Transaction Security: All financial transactions are executed securely via Reserve Bank of India (RBI)-authorized payment gateways, UPI networks, and merchant banking infrastructure using end-to-end encryption. Exxuit does not store or retain raw payment credentials, debit/credit card CVVs, net banking passcodes, or UPI PINs on its infrastructure.

Purposes & Legal Bases for Processing

Your personal information is processed exclusively under legally valid grounds recognized under Indian data protection law:

  • Contractual Performance & Fulfillment: Fulfilling online orders, white-glove shipping across India, atelier tailoring, and Client Care assistance.
  • Bespoke Private Client Services: Maintaining fitting history, scheduling private appointments, and offering personalized sartorial guidance based on Explicit Consent and Legitimate Interest.
  • Personalized Client Communications: Sharing private collection previews, private event invitations in India, and tailored brand announcements, subject to Explicit Consent.
  • Security & Anti-Fraud Safeguards: Authenticating digital transactions, protecting digital platforms, and preventing unauthorized access under Legitimate Interest and Legal Compliance.
  • Statutory Compliance: Fulfilling tax, GST, accounting, corporate audit, and legal mandates under Indian law.

Client Profiling & Customization

To uphold the bespoke standards associated with Exxuit, we curate refined client profiles using past purchases, sartorial preferences, and client service logs. This enables our Client Care Advisors to offer tailored fitting recommendations, private invitations, and curated sartorial advice.

You maintain full authority over your profile data and may opt out of personalized profiling or update your communication preferences at any time by contacting our Privacy Office.

Confidential Disclosure & Sharing

Exxuit maintains absolute discretion. We never sell, rent, or trade client personal data. Data is shared strictly on a need-to-know basis with trusted partners bound by explicit confidentiality obligations under Indian law:

  • Logistics & Delivery Partners: Courier and fulfillment partners ensuring secure white-glove delivery across India.
  • Financial Infrastructure: RBI-regulated banking partners and payment gateways executing authenticated transactions.
  • Technology Services: Enterprise cloud hosts and CRM infrastructure operating under strict confidentiality mandates.
  • Professional Advisors: Legal counsel, chartered accountants, and auditors bound by professional duties of confidentiality.
  • Statutory Authorities: Law enforcement, regulatory bodies, or judicial authorities where explicitly mandated under Indian statutory process.

Retention & Archival Policy

Personal data is retained only for as long as necessary to fulfill the operational, bespoke, and legal purposes for which it was gathered, including:

  • Maintaining long-term client relations, garment care guarantees, and tailoring records.
  • Satisfying statutory record retention rules under Indian Income Tax, GST, and corporate laws.
  • Resolving legal claims and enforcing agreement terms before Indian courts.

Upon expiry of retention necessity, data is securely erased or permanently anonymized in accordance with Indian standards.

Security Practices & Safeguards

Exxuit deploys technical, administrative, and physical safeguards designed to preserve data integrity and prevent unauthorized access, loss, or disclosure. Measures include end-to-end SSL/TLS encryption, restricted staff access controls, and routine security audits conducted in compliance with Indian statutory standards.

Cookies & Digital Tracking

Our digital platforms use functional, performance, and analytical cookies to improve platform responsiveness and tailor user interactions. Clients may adjust cookie behavior via their browser settings or our platform’s Cookie Preference Center.

Statutory Rights Under the DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you hold enforceable rights regarding your personal information:

  • Right to Access & Summary: Obtain a summary of personal data processed by Exxuit and the identities of data processors involved.
  • Right to Correction & Completion: Request correction, updating, or completion of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data, subject to statutory record-keeping requirements under Indian law.
  • Right to Withdraw Consent: Revoke consent granted for marketing, profiling, or communication at any time.
  • Right to Nominate: Nominate an individual to exercise data rights in the event of death or incapacity, as provided under Indian law.
  • Right to Grievance Redressal: Submit grievances regarding data processing directly to our Grievance Officer.

To exercise any statutory right, please submit a written notice to our Privacy Office.

Statutory Grievance Officer Details

In accordance with the Information Technology Act, 2000, IT Rules, 2011, and the DPDP Act, 2023, the details of the designated Grievance Officer for Exxuit are:

Name: Legal & Compliance Officer
Designation: Statutory Grievance Officer & Legal Counsel
Address: Exxuit Private Limited, Corporate Office, New Delhi, India
Email: ________________
Telephone: ________________

Policy Revisions

Exxuit reserves the right to amend this Privacy Policy to reflect changes in Indian law, statutory guidelines, or operational practices. Revisions will be posted on our digital platforms with an updated effective date.

Client Care Enquiries

For questions or requests regarding this Privacy Policy or your personal data, please reach out to Client Care:

Exxuit Client Care
Attention: Privacy & Compliance Office
Email: ________________
Telephone: ________________