Privacy Policy

This Privacy Policy explains how SNKRHOUR (“we”, “us”, “our”) collects, uses, shares, stores and protects your personal data when you visit or make a purchase on snkrhour.com (the “Site” and, together with all related features, tools, products and services, the “Services”). We are committed to handling your personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (“DPDP”), and other applicable Indian law. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Where we rely on your consent, we ask for it clearly and separately, and you may withdraw it at any time (see “How to Withdraw Consent” below).

Who We Are

SNKRHOUR is an authenticated sneaker and streetwear store operated as a sole proprietorship in India. For the purposes of DPDP, we are the “Data Fiduciary” that determines the purpose and means of processing your personal data.

• Business / Proprietor: Suraj Singh Gaur (Proprietor, SNKRHOUR)
• Registered address: Gulmohar Niketan, Basant Vihar, AB Road, Indore, MP 452010, INDIA
• Email: support@snkrhour.com
• GSTIN: 23EFDPG1758D1ZV

Personal Information We Collect or Process

When we use the term “personal information” or “personal data”, we are referring to information that identifies or can reasonably be linked to you. It does not include information that is collected anonymously or that has been de-identified. We collect only what we need to run the store, fulfil your orders, and comply with law. Depending on how you interact with the Services, this may include:

• Contact details including your name, address, billing address, shipping address, phone number, and email address.
• Payment information. Your payment is processed by our payment gateway (Razorpay). We do not store your full card number or CVV on our systems; we receive only a payment reference, transaction details, form of payment, and payment status.
• Account information including your username, password (stored in hashed form), preferences and settings.
• Transaction information including the items you view, put in your cart, purchase, return, exchange or cancel and your past transactions.
• Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry or subscribing to our newsletter.
• Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
• Usage informationincluding information regarding your interaction with the Services, collected via cookies and similar technologies (see “Cookies” below). Analytics and marketing cookies are used only with your consent.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.

How We Use Your Personal Information

DPDP requires us to state the specific purpose for each category of processing. Depending on how you interact with us, we use personal information for the following purposes:

Provide, Tailor, and Improve the Services. To provide you with the Services, including to perform our contract with you, to process your payments, to source, authenticate, fulfil and deliver your orders, to remember your preferences and items you are interested in, to send notifications related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, and to create a customized shopping experience for you.

Marketing and Advertising. With your consent, to send marketing and promotional communications by email and to measure and improve the Site using analytics. You can opt out at any time.

Security and Fraud Prevention. To authenticate your account, to provide a secure payment and shopping experience, to detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, and to secure our Services. If you register an account, you are responsible for keeping your account credentials safe; we recommend you do not share your username or password with anyone else.

Communicating with You. To provide you with customer support, respond to your queries and complaints, and maintain our business relationship with you.

Legal Reasons. To comply with applicable law (including tax, accounting and regulatory obligations), respond to valid legal process, and enforce or investigate potential violations of our terms or policies.

Our Legal Basis for Processing

Under DPDP, we process your personal data on the following bases:

• Your consent — for marketing communications, the newsletter, and analytics/marketing cookies. You may withdraw this consent at any time.
• Necessity to provide a service you have requested — for example, processing an order you place, or the essential (functional) cookies that make the Site work.
• Legal obligation — where we must retain or process data to comply with tax, accounting, or other laws.

Who We Share Your Data With

We do not sell your personal data. We share it only with service providers (“Data Processors”) who help us run the store, and only to the extent necessary. These currently include:

• Payment gateway (Razorpay) — to process payments and refunds.
• Cloud and hosting infrastructure (Amazon Web Services; Cloudflare) — to host the Site and store data securely.
• Email delivery (Amazon SES) — to send transactional and, with consent, marketing emails.
• Analytics providers(PostHog; and, where you have consented, Google Analytics and Meta) — see “Cookies” below.
• Shipping and logistics partners — to deliver your orders.

We may also disclose personal information when you direct or consent to a disclosure, in connection with a business transaction such as a merger, to comply with legal obligations (including responding to subpoenas and similar requests), to enforce applicable terms or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Cookies and Similar Technologies

We use cookies and similar technologies in three categories:

• Strictly necessary cookies — required for the Site to function (e.g. keeping you logged in, remembering your cart). These are always on and do not require consent.
• Analytics cookies — help us understand how the Site is used so we can improve it. Used only with your consent.
• Marketing cookies — used to measure and personalise advertising. Used only with your consent.

When you first visit, our cookie banner lets you accept or reject the non-essential categories. You can change your choice at any time via the “Cookie settings” link in the footer.

Until you make a choice in the banner, a small number of page-interaction events (for example, that a product page was viewed) are held temporarily in your browser’s memory only. Nothing is transmitted to us or to any third party during that time, and no cookie or other storage is written. If you accept, those held events are then sent under the categories you accepted; if you reject, they are immediately discarded and nothing further is held. Closing the page also discards them.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Your Rights

Under DPDP, you have the following rights over your personal data. You can exercise any of them by contacting our Grievance Officer (see below):

• Right to access — obtain a summary of the personal data we hold about you and how we process it.
• Right to correction and erasure — have inaccurate data corrected, and have your data erased where the purpose it was collected for is complete (unless we must keep it by law).
• Right to grievance redressal — raise a complaint with us about how we handle your data.
• Right to nominate — nominate another person to exercise your rights in the event of your death or incapacity.
• Right to withdraw consent — withdraw consent you have given, at any time, as easily as you gave it.
• Managing communication preferences — you may opt out of promotional emails at any time using the unsubscribe option in our emails. If you opt out, we may still send you non-promotional emails, such as those about your account or orders.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests. We will respond to your request within the timelines required by DPDP (and in any case within 90 days for grievances). Withdrawing consent does not affect processing already carried out while your consent was valid.

How to Withdraw Consent

You can withdraw consent at any time by:

• Using the “Cookie settings” link in the footer to change your cookie choices.
• Unsubscribing from marketing emails using the link in any such email.
• Emailing our Grievance Officer (below) to withdraw any other consent.

On withdrawal, we will stop the relevant processing and delete the associated personal data unless we are required to retain it by law.

Grievance Officer / Complaints

For any questions, requests, or complaints about your personal data, contact:

• Grievance Officer: Anjali Singh Gaur
• Address: Gulmohar Niketan, Basant Vihar, AB Road, Indore, MP 452010, INDIA
• Email: support@snkrhour.com
• Phone: +91 78692 47102

We will acknowledge receipt of your complaint within 48 hours and resolve it within 30 days of receipt. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India, in accordance with DPDP.

How Long We Keep Your Data (Retention)

We keep personal data only as long as its purpose requires, unless law requires longer:

• Order, invoice, payment and tax records: 8 years from the end of the relevant financial year, to meet legal and accounting obligations.
• Account data: while your account is active, and for 12 months after it becomes inactive or you request deletion (excluding the order records above).
• Marketing/newsletter data: until you withdraw consent or unsubscribe.
• Analytics data: 14 months, in line with our analytics provider settings.
• Support correspondence: 24 months from resolution.

When a retention period ends, we securely delete or anonymise the data.

Children

Our Site is intended for users aged 18 and over. Under the DPDP Act, anyone under 18 is a child, and we do not knowingly collect or process the personal data of anyone under 18 without the verifiable consent of a parent or lawful guardian. We do not knowingly track or behaviourally monitor users under 18, and we do not target advertising at them. If you believe a minor has provided us personal data, please contact our Grievance Officer and we will delete it.

How We Protect Your Data

We use reasonable technical and organisational security measures appropriate to the nature and volume of data we handle, including encryption in transit, access controls, hashed passwords, and secure, access-controlled infrastructure. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security”. We work to protect your data and to meet our obligations under DPDP, including notifying the Data Protection Board and affected users of a personal data breach where required.

International Transfers

Our core systems are located in India: order and account data is hosted on Amazon Web Services in the Mumbai (ap-south-1) region, and payments are processed by Razorpay in India. Some service providers process limited data outside India — Cloudflare operates a global edge network through which Site traffic may transit, and our analytics provider (PostHog) stores usage analytics in the European Union. Where analytics/marketing tools you have consented to (such as Google Analytics or Meta) process data outside India, they do so under their own privacy policies. For Indian users, we may transfer your personal data outside India in accordance with the DPDP Act, 2023, except to any country to which the Government of India has restricted such transfers.

Language Access

Under the DPDP Act, you have the right to access this Privacy Policy in English or any of the 22 languages specified in the Eighth Schedule to the Constitution of India. Please contact us (details below) to request a translated copy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date and provide notice as required by applicable law.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please call us at 0731-2346953 (landline) or +91 78692 47102 (mobile), or email us at support@snkrhour.com.