Privacy Policy

01Our commitment to your privacy

Dreams10 Ecommerce Solution ("we", "us", "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, why we collect it, how we store and secure it, who we share it with, and the rights available to you.

This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and applicable Indian data protection law. It applies to https://www.dreams10ecommerce.com and to every order placed through it.

02Information we collect

We collect only what we need to process your order and support you afterwards.

03How we use your information

• To process, fulfil and deliver your orders, and to issue your order invoice.
• To send transactional communication such as order confirmations, dispatch and tracking updates, and refund confirmations.
• To provide customer support and to respond to your enquiries and complaints.
• To detect, prevent and investigate fraudulent transactions and misuse of the Website.
• To comply with tax, accounting and other legal obligations under Indian law.
• To send occasional service updates or offers — only where you have opted in, and with an unsubscribe link in every such message.

We do not sell, rent or trade your personal information to any third party for marketing purposes. Ever.

04Consent and legal basis

We process your data on the basis of your consent, which you provide when you place an order or submit a form, and on the basis of legitimate business need and legal obligation for order fulfilment, taxation and record-keeping. You may withdraw consent for optional processing such as marketing at any time by writing to dreams10ecommerce@gmail.com. Withdrawal does not affect processing that is necessary to complete an order you have already placed or to meet a statutory obligation.

05Payment security and SSL

The entire website is served over HTTPS using a 256-bit SSL/TLS certificate. Every page, form submission and checkout interaction is encrypted in transit, which prevents interception of the information you enter.

Payments are handled exclusively by PCI-DSS Level 1 certified payment gateway partners. When you click the payment button you are handed over to the gateway's secure, tokenised environment. We receive back only the transaction status, a reference number and a masked instrument identifier — never your full credentials.

• 256-bit SSL/TLS encryption sitewide, with HTTP requests automatically upgraded to HTTPS.
• No card, CVV, UPI PIN or banking credential is stored on our servers or in our database.
• Access to order data is restricted to authorised personnel on a need-to-know basis.
• Regular review of access logs and prompt patching of the systems we operate.

06Cookies and similar technologies

Cookies are small text files placed on your device by your browser. We use them sparingly and for clearly defined purposes:

You can view, block or delete cookies through your browser settings at any time. Please note that blocking strictly necessary cookies will prevent the cart and checkout from functioning.

07Who we share your information with

We share the minimum necessary information with a small number of trusted partners, each of whom is contractually required to protect it and use it only for the stated purpose:

• Payment gateways (Razorpay, Paytm, Cashfree or similar) — to process your payment and any refund.
• Courier and logistics partners — name, delivery address and mobile number, only for shipping physical products.
• Email and SMS providers — to deliver order confirmations, invoices and tracking updates.
• Accounting and tax professionals — invoice data required for statutory filings.
• Law enforcement or regulators — only where we are legally compelled to disclose information under a valid order.

08How long we keep your data

Order and invoice records are retained for eight years as required under Indian tax and accounting law. Contact-form enquiries that do not result in an order are retained for 24 months and then deleted. Technical logs are retained for 12 months. Where you ask us to delete your data and we have no legal obligation to retain it, we will do so within 30 days and confirm in writing.

09Your rights

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate or incomplete.
• Deletion — ask us to erase your data where no legal retention obligation applies.
• Withdraw consent — opt out of marketing communication at any time.
• Grievance — escalate any privacy concern to our Grievance Officer, named below.

To exercise any of these rights, email dreams10ecommerce@gmail.com from your registered email address. We respond to every request within 30 days and may ask you to verify your identity before we act.

10Children's privacy

We sell clothing for children, but the customer placing and paying for an order must be an adult. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us information, write to dreams10ecommerce@gmail.com and we will delete it promptly.

11Third-party websites

This Website may link to external sites such as courier tracking pages or our payment partner. Once you leave our Website, this Privacy Policy no longer applies. We encourage you to read the privacy policy of every site you visit.

12Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or in the law. The updated version takes effect from the date shown at the top of this page. Where a change materially affects how we handle your data, we will notify registered customers by email.