Privacy policy.

RS Living is the store of Raheem & Son. We decide how your personal data is used, which makes us the controller under UK and EU GDPR and the data fiduciary under India's Digital Personal Data Protection Act 2023. Contact us about anything in this policy at living@raheemandson.com.

RS Living, a trade name of Raheem and Son (Shah Mohammad), Chauri Road, Bazar Sardar Khan, Bhadohi 221401, India.

Grievance Officer, RS Living: write to living@raheemandson.comwith “Grievance” in the subject. We acknowledge within 48 hours and aim to resolve within one month.

• Account data: your email address and sign-in details if you create an account, and your saved details, saved addresses and order history. You can edit or delete your saved addresses yourself from your account page.
• Order data: name, delivery and billing address, email, phone number, what you ordered, custom size notes, and any note you add.
• Payment data: your payment is handled by Razorpay. Your card or bank details never touch our servers. We receive confirmation of payment, a payment reference and the method used.
• Customs data: the details needed to declare a parcel, such as your address and, where a country requires it, a tax or ID number.
• Communications: emails and photographs you send us, for example about a fault or a sample.
• Website data: pages viewed, device and browser type, approximate location and cookies, as described in section 8.

• To take, make and deliver your order and answer your questions: contract.
• To keep customs, tax and accounting records: legal obligation.
• To prevent fraud and keep the site secure: legitimate interests.
• To send you marketing email, if we ever do: your consent (or the soft opt-in where the law allows).
• Analytics cookies (Google Analytics): consent. They run only if you accept them.

Under India's DPDP Act we process your data with your consent or for the legitimate uses the Act permits, such as fulfilling the order you placed and complying with the law.

We do not sell your data. We use these service providers, who act on our instructions:

• Supabase: stores accounts and orders.
• Razorpay: takes payment.
• Resend: sends our emails, such as order confirmations and invoices.
• Our hosting provider: serves the website.
• Google Analytics: measures how the site is used.
• Couriers, freight and customs partners: deliver your parcel and clear it through customs.
• Telegram: carries internal order alerts to our own phones. These alerts are for our team only and are never sent to customers.
• Our accountants and professional advisers, and public authorities where the law requires.

We are based in India, and our providers may process data in other countries. If you are in the UK or EU, your data goes to India and other countries. Where the law requires it, we rely on approved safeguards such as the UK addendum or the EU Standard Contractual Clauses. India is not covered by a UK or EU adequacy decision.

• Orders and invoices: for as long as tax, accounting and consumer law require us to keep them.
• Account data: until you ask us to delete your account, unless we must keep some of it to meet a legal duty.
• Emails and photographs you send us: for as long as needed to deal with your enquiry or claim, and for any legal duty that follows.
• Marketing: until you unsubscribe or withdraw consent.
• Analytics data: as long as our Google Analytics settings keep it. It is collected only if you accept analytics cookies.

You can ask us to delete your data at any time by writing to living@raheemandson.com. We will do so unless the law requires us to keep it.

UK and EU:you can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable form, and withdraw consent at any time. You can complain to the Information Commissioner's Office (UK) or to your national data protection authority in the EU.

India: you can ask to access, correct and erase your data, use our grievance process, and nominate another person to act for you. If we have not resolved your complaint, you can complain to the Data Protection Board of India.

Write to living@raheemandson.com. We reply within one month.

We sort cookies into two groups. Necessary cookies keep the store working and are always on. Analytics cookies are off until you accept them. When you first visit, a banner asks you to Accept or Reject all, with equal weight, or to Manage your choice. Nothing is requested from Google Analytics until you accept, and nothing on the store is hidden behind the banner. If your browser sends a Global Privacy Control signal, we treat it as a rejection of analytics. You can change your choice at any time with Cookie settings in the footer. Your choice is saved in the rs_consent cookie. If we change the cookies we use, we will ask you again.

Google Analytics collects pages viewed, device and browser type and approximate location. We do not use it for advertising. Delete cookies any time in your browser settings.

To suggest your country, we read it from your request when you arrive. We do not store it.

The store is not meant for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, please tell us and we will delete it.

We use reasonable safeguards to protect your data. If a serious breach affects you, we will tell you and the relevant authorities as the law requires, which can be within 72 hours under GDPR.

We post any update here and change the date at the top.