Privacy Policy

Last Updated: March 3, 2026

Introduction

Welcome to Draft XX ("we," "us," "our"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://thedraftxx.com/ (the "Site") and use our services.

Please read this Privacy Policy carefully. By accessing or using our Site, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

1. Information We Collect

1.1 Personal Information You Provide to Us

We collect information that you voluntarily provide to us when you:

Create an account
Place an order
Subscribe to our newsletter
Contact customer service
Participate in surveys, contests, or promotions
Interact with us on social media

This information may include:

Name
Email address
Phone number
Shipping and billing address
Payment information (processed securely through third-party payment processors)
Date of birth (optional, for birthday promotions)
Size and style preferences
Communication preferences

1.2 Information Automatically Collected

When you visit our Site, we automatically collect certain information about your device and browsing behavior, including:

IP address
Browser type and version
Operating system
Referring website
Pages viewed and time spent on pages
Links clicked
Device identifiers
Location data (with your permission)
Cookies and similar tracking technologies

1.3 Information from Third Parties

We may receive information about you from third parties, including:

Social media platforms (if you connect your account)
Marketing partners
Analytics providers
Payment processors
Delivery partners

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Improve Our Services

Process and fulfill your orders
Send order confirmations and shipping updates
Manage your account and preferences
Provide customer support
Improve our products, services, and Site functionality
Conduct internal research and analytics

2.2 Marketing and Communications

Send promotional emails about new products, special offers, and events (with your consent)
Personalize your shopping experience and show relevant content
Conduct surveys, contests, and promotions
Send you service-related communications (e.g., account updates, policy changes)

2.3 Legal and Security Purposes

Comply with legal obligations and requests from law enforcement
Protect against fraud, unauthorized transactions, and other illegal activities
Enforce our Terms and Conditions
Protect the rights, property, and safety of Draft XX, our customers, and others

2.4 Analytics and Optimization

Analyze Site usage and customer behavior
Conduct A/B testing and optimization
Track marketing campaign performance
Improve user experience and Site performance

3. Legal Basis for Processing (For Users in the EU/EEA)

If you are located in the European Union or European Economic Area, our legal basis for collecting and using your personal information depends on the specific information and context:

Contract Performance: Processing necessary to fulfill our contract with you (e.g., processing orders)
Consent: You have given explicit consent for specific purposes (e.g., marketing emails)
Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, analytics)
Legal Obligation: Processing required to comply with legal requirements

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small data files stored on your device that help us improve your experience.

4.1 Types of Cookies We Use

Essential Cookies:
Necessary for the Site to function properly (e.g., shopping cart, login sessions)

Analytics Cookies:
Help us understand how visitors use our Site (e.g., Google Analytics, Meta Pixel)

Marketing Cookies:
Used to deliver relevant advertisements and track campaign effectiveness (e.g., Facebook, Google Ads)

Preference Cookies:
Remember your settings and preferences

4.2 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Site.

To opt out of targeted advertising:

Google: Ad Settings
Facebook: Ad Preferences
Network Advertising Initiative: NAI Opt-Out

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who help us operate our business, including:

Payment processors (Razorpay)
Shipping and logistics companies
Email service providers (Klaviyo, Mailchimp, etc.)
Analytics providers (Google Analytics, Meta)
Customer service platforms
Marketing and advertising partners
Website hosting and infrastructure providers

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Business Transfers

If Draft XX is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity.

5.3 Legal Requirements

We may disclose your information if required by law or in response to:

Legal processes (e.g., subpoenas, court orders)
Requests from government authorities
Investigations of potential violations of our policies
Protection of rights, property, and safety

5.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods:

Account information: Retained while your account is active and for a reasonable period thereafter
Order information: Retained for 7 years for accounting and tax purposes (as required by Indian law)
Marketing data: Retained until you opt out or request deletion
Analytics data: Typically aggregated and anonymized

When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Rights for All Users

Access and Update:
You can access and update your account information at any time by logging into your account or contacting us.

Marketing Opt-Out:
You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any promotional email or by contacting us.

Cookie Management:
You can manage cookies through your browser settings (see Section 4.2).

7.2 Additional Rights (EU/EEA, UK, California Residents)

If you are located in the EU, EEA, UK, or California, you may have additional rights:

Right to Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information (subject to legal exceptions)
Right to Restrict Processing: Request that we limit how we use your information
Right to Data Portability: Request a copy of your information in a machine-readable format
Right to Object: Object to our processing of your information for certain purposes (e.g., direct marketing)
Right to Withdraw Consent: Withdraw consent for processing based on consent (without affecting prior processing)
Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at: support@thedraftxx.com

We will respond to your request within 30 days (or as required by applicable law).

8. Data Security

We implement reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Our security measures include:

Encryption of sensitive data (SSL/TLS)
Secure payment processing through PCI-DSS compliant processors
Regular security assessments and updates
Access controls and authentication
Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. International Data Transfers

Draft XX is based in India. If you are located outside India, please be aware that your information may be transferred to, stored, and processed in India or other countries where our service providers operate.

By using our Site, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

For users in the EU/EEA, we ensure appropriate safeguards are in place for international transfers (e.g., Standard Contractual Clauses).

10. Children's Privacy

Our Site is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@thedraftxx.com. We will promptly delete such information from our records.

11. Third-Party Links and Services

Our Site may contain links to third-party websites, social media platforms, or services that are not operated by Draft XX. This Privacy Policy does not apply to those third-party sites.

We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

When we make changes:

We will update the "Last Updated" date at the top of this policy
For material changes, we will notify you by email or through a prominent notice on our Site
Your continued use of the Site after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DRAFT XX
Email: support@thedraftxx.com
Customer Service: support@thedraftxx.com
Phone: 9650877559
Address: D59/1A2A, Rathyathra, Varanasi, 221010, UP

Response Time:
We will respond to privacy inquiries within 30 days.

14. India-Specific Provisions

In compliance with Indian data protection regulations and the Information Technology Act, 2000:

Grievance Officer:
Name: Aaditya Shah
Email: support@thedraftxx.com
Response Time: 30 days

Data Protection:
We comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Consent:
By using our Site and providing your information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

15. State-Specific Rights (If Applicable)

California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request information about the personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information (subject to exceptions)
Right to Opt-Out: Opt-out of the "sale" of your personal information (Note: We do not sell personal information)
Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights
Shine the Light: Request information about personal information shared with third parties for direct marketing purposes

To exercise these rights, contact us at: support@thedraftxx.com

Cancellation Window: Orders may be cancelled within 24 hours of placement for a full refund, provided the order has not been shipped. Once an order enters production or has been dispatched, cancellation requests cannot be accommodated. To cancel an order, please contact us immediately at support@thedraftxx.com or +919650877559 with your order number.

Do Not Sell My Personal Information:
We do not sell personal information as defined by CCPA.

Appendix: Data We Collect

Category	Examples	Purpose
Identifiers	Name, email, phone, address, IP address	Account management, order fulfillment, communication
Commercial Information	Purchase history, shopping behavior, preferences	Personalization, analytics, marketing
Internet Activity	Browsing history, search history, interaction with ads	Analytics, optimization, targeted advertising
Geolocation Data	IP-based location, device location (if permitted)	Personalization, shipping, fraud prevention
Inferences	Preferences, characteristics, behavior predictions	Personalization, recommendations, marketing
Financial Information	Payment method (processed by third parties)	Payment processing, fraud prevention

This Privacy Policy was last updated on March 3, 2026.