Privacy Policy

At greatergood, we believe that the trust of our customers is as important as the clothes we make. This Privacy Policy explains how greatergood eco (‘greatergood’, ‘we’, ‘us’, or ‘our’) collects, uses, stores, shares, and protects your personal data when you visit https://greatergoodeco.com (‘Website’) or make a purchase from us.

By using this Website, you agree to the collection and use of your personal data as described in this Privacy Policy. If you do not agree, please do not use this Website.

This Policy is governed by the Digital Personal Data Protection Act, 2023 (‘DPDP Act’), the Digital Personal Data Protection Rules, 2025 (‘DPDP Rules’), the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020. For users accessing this Website from the European Union or United Kingdom, we additionally comply with the General Data Protection Regulation (GDPR) to the extent applicable.

1. Who We Are — Data Fiduciary Details

Under the DPDP Act, 2023, greatergood eco acts as the ‘Data Fiduciary’ — the entity that determines the purpose and means of processing your personal data.

  •     Brand Name:  greatergood eco
  •     Website:  https://greatergoodeco.com
  •     Registered Address:  [Insert full registered address]
  •     Contact Email:  [Insert official email address]
  •     Contact Phone:  [Insert phone number]
  •     Country of Establishment:  India

For any privacy-related questions, please contact us at [Insert privacy/contact email] or write to us at the address above.

2. What Personal Data We Collect

We collect personal data only to the extent necessary for the purposes described in this Policy. The categories of data we collect include:

2.1  Data You Provide to Us Directly

  •     Identity Data — your full name, username or similar identifier
  •     Contact Data — email address, billing address, delivery address, phone number
  •     Account Data — login credentials if you create an account on our Website
  •     Order & Transaction Data — details of products you have ordered, payment method used (we do not store card numbers — see Section 6), order history, and invoice details
  •     Communication Data — messages, queries, or feedback you send us through our contact form, email, or WhatsApp
  •     Marketing Preferences — your preferences for receiving marketing communications from us

2.2  Data Collected Automatically

When you visit our Website, we may collect certain technical data automatically through cookies and similar technologies:

  •     Usage Data — pages visited, time spent on pages, links clicked, referring URLs
  •     Device Data — IP address, browser type and version, operating system, device identifiers
  •     Cookie Data — session identifiers, preference settings, and analytics data (see Section 8 on Cookies)
  •     Location Data — approximate geographic location derived from your IP address (not GPS-precise location)

2.3  Data from Third Parties

  •     Payment Data — provided by our payment gateway partners (e.g., Razorpay, PayPal, or similar) after you complete a transaction. greatergood does not directly receive or store your full card or bank account details.
  •     Social Media Data — if you choose to connect a social media account or log in via a social platform, we may receive certain profile data as permitted by your social media settings.
  •     Analytics Providers — aggregated and anonymised usage data from tools such as Google Analytics.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, biometric data, or financial information beyond what is needed to process your payment.

3. Why We Collect Your Data — Purposes of Processing

Under the DPDP Act, 2023, we process your personal data only for specific, lawful purposes. We collect and use your data for the following reasons:

  •     To process and fulfil your orders — including confirming your purchase, arranging shipping, sending delivery updates, and managing returns or refunds.
  •     To manage your account — creating and maintaining your customer account, authenticating your login, and managing your preferences.
  •     To communicate with you — responding to your queries, complaints, or requests submitted via our contact form, email, or WhatsApp.
  •     To send transactional communications — order confirmations, shipping notifications, and invoice emails. These are not marketing emails and cannot be opted out of while an order is active.
  •     To send marketing communications — promotional offers, new arrivals, and sustainability updates, only if you have explicitly opted in. You may opt out at any time (see Section 7).
  •     To comply with legal obligations — maintaining records as required under Indian tax, customs, and consumer protection laws, and responding to lawful requests from regulatory authorities.
  •     To improve our Website and products — analysing usage patterns (in aggregated, anonymised form) to understand customer behaviour and improve our Website experience.
  •     To prevent fraud and ensure security — monitoring for suspicious activity and protecting the security of your account and transactions.
  •     To manage grievances — addressing complaints through our Grievance Officer as required by the Consumer Protection (E-Commerce) Rules, 2020.

We will not use your personal data for any purpose other than those listed above without obtaining your fresh, explicit consent.

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following legal bases:

  •     Consent — for marketing communications, non-essential cookies, and any processing not covered by the bases below. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
  •     Contractual Necessity — to process your order, deliver your products, and manage returns or refunds.
  •     Legal Obligation — to comply with applicable Indian laws including GST, customs, consumer protection, and income tax requirements.
  •     Legitimate Interests — for fraud prevention, Website security, and analytics (where such interests are not overridden by your privacy rights).

5. How We Share Your Data

greatergood does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

5.1  Service Providers and Data Processors

We share data with trusted third-party service providers who help us operate our business, including:

  •     Logistics and courier partners — to ship and deliver your orders (e.g., your name, address, and phone number)
  •     Payment gateway providers — to process your payments securely (e.g., Razorpay, PayPal, or similar). They are bound by their own privacy policies and PCI-DSS compliance standards.
  •     Email and communication platforms — to send order confirmations, newsletters, and notifications (e.g., Mailchimp, or similar)
  •     Website hosting and technology providers — to maintain and run our Website securely (e.g., WordPress, cloud hosting providers)
  •     Analytics providers — for anonymised Website usage data (e.g., Google Analytics)

All service providers are contractually required to process your data only on our instructions and in compliance with applicable data protection laws.

5.2  Legal and Regulatory Disclosure

We may disclose your data to government authorities, law enforcement agencies, or courts if required to do so by law, court order, or regulatory request — including under the Information Technology Act, 2000 and the DPDP Act, 2023.

5.3  Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

We will never share your personal data with third parties for their own marketing purposes without your explicit consent.

6. Payment Security

All payments on our Website are processed through secure, encrypted payment gateways. greatergood does not receive, process, or store your full credit card, debit card, or net banking credentials.

  •     Payment transactions are encrypted using industry-standard SSL/TLS protocols.
  •     Our payment partners comply with PCI-DSS (Payment Card Industry Data Security Standard).
  •     We store only a transaction reference number and payment status for order management purposes.

If you have any concerns about payment security, please contact us at hello@greatergoodeco.com

7. Your Rights as a Data Principal

Under the DPDP Act, 2023, and applicable Indian law, you have the following rights regarding your personal data:

  •     Right to Access — you may request a summary of the personal data we hold about you and how it is being processed.
  •     Right to Correction — you may request that we correct any inaccurate or incomplete personal data.
  •     Right to Erasure — you may request deletion of your personal data, where we are not legally required to retain it.
  •     Right to Withdraw Consent — you may withdraw your consent for any processing based on consent (e.g., marketing emails) at any time. Withdrawal does not affect past processing.
  •     Right to Grievance Redressal — you may file a complaint with our Grievance Officer (see Section 11) if you believe your data is being processed unlawfully.
  •     Right to Nominate — under the DPDP Act, you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
  •     Right to Complain to the Data Protection Board — if you are dissatisfied with our response, you may escalate your complaint to the Data Protection Board of India once it becomes operational.

To exercise any of the above rights, please write to us at [Insert privacy email] or contact us via https://greatergoodeco.com/contact-us. We will respond within 30 days of receiving your request.

Opting Out of Marketing

If you have subscribed to our marketing emails or newsletters, you may opt out at any time by:

  •     Clicking the ‘Unsubscribe’ link in any marketing email we send you, or
  •     Emailing us at [Insert email] with the subject line ‘Unsubscribe’.

Please note that opting out of marketing does not affect transactional communications related to active orders.

8. Cookies and Tracking Technologies

8.1  What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site.

8.2  Types of Cookies We Use

  •     Strictly Necessary Cookies — required for the Website to function (e.g., shopping cart, login session). These cannot be disabled without affecting Website functionality.
  •     Preference Cookies — remember your language, currency, and display settings so you do not need to re-enter them each visit. Last for up to 1 year.
  •     Analytics Cookies — collect anonymised data about how visitors use our Website (e.g., Google Analytics). Help us understand traffic patterns and improve the site. Last for up to 2 years.
  •     Marketing Cookies — track your browsing activity to show you relevant advertisements on other platforms (e.g., Meta Pixel, Google Ads). Only activated with your consent.
  •     Session Cookies — temporary cookies that expire when you close your browser. Used to maintain your login and shopping session.

8.3  Managing Cookies

When you first visit our Website, you will be presented with a cookie consent banner. You may accept all cookies, or customise your preferences by category.

You may also manage or disable cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the Website. Guidance on managing cookies is available at www.allaboutcookies.org.

8.4  Third-Party Cookies

Some cookies on our Website are set by third-party services such as Google Analytics, Meta, or payment providers. These third parties have their own privacy policies governing their use of cookie data. We recommend reviewing their policies:

  •     Google Analytics:  https://policies.google.com/privacy
  •     Meta (Facebook/Instagram):  https://www.facebook.com/policy.php

We do not use cookies to collect sensitive personal data or to identify you without your knowledge.

9. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

  •     Order and transaction data — retained for 7 years as required by Indian tax and accounting laws (Income Tax Act, GST legislation).
  •     Account data — retained for the duration your account is active, and for up to 2 years after account closure, unless you request earlier deletion.
  •     Marketing preferences and communication data — retained until you opt out or request deletion.
  •     Website usage and analytics data — retained in anonymised form for up to 2 years.
  •     Customer complaint and grievance records — retained for 3 years from the date of resolution, as required under consumer protection law.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to you.

10. Cross-Border Data Transfers

greatergood is based in India. However, some of our service providers (such as payment gateways, email platforms, or analytics tools) may process your data in countries outside India.

Where we transfer personal data outside India, we ensure that:

  •     The transfer is to a country notified by the Indian Government as providing adequate data protection, or
  •     Appropriate contractual safeguards are in place with the receiving party, as required under the DPDP Act, 2023 and DPDP Rules, 2025.

If you are an EU or UK customer, such transfers are additionally governed by Standard Contractual Clauses (SCCs) or equivalent mechanisms under the GDPR.

11. Grievance Officer — Data Privacy

In accordance with the DPDP Act, 2023, the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020, greatergood has designated a Grievance Officer to handle data privacy complaints and requests.

Grievance Officer Details:

  •     Name:  [Insert Name]
  •     Designation:  Grievance Officer — Data Privacy
  •     Email:  [Insert grievance email — e.g., privacy@greatergoodeco.com]
  •     Phone:  [Insert phone number]
  •     Address:  [Insert registered address]
  •     Working Hours:  Monday to Friday, [Insert hours], IST

All privacy complaints will be acknowledged within 48 hours of receipt and resolved within 30 days. If you are dissatisfied with our response, you may escalate your complaint to the Data Protection Board of India (once operational) or approach the appropriate Consumer Disputes Redressal Commission.

12. Children's Privacy

Our Website and products are not intended for children under the age of 18. We do not knowingly collect personal data from minors.

Under the DPDP Act, 2023, processing of personal data of children requires verifiable parental consent. If we discover that we have inadvertently collected personal data from a child without parental consent, we will delete it immediately. If you believe a child has provided us with personal data, please contact us at hello@greatergoodeco.com

13. Data Security

greatergood takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure, including:

  •     SSL/TLS encryption for all data transmitted between your browser and our Website
  •     Secure, access-controlled storage for customer data
  •     Regular review of our data security practices
  •     Limiting access to personal data to authorised personnel only, on a need-to-know basis

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Data Protection Board of India and affected individuals in accordance with the timelines required under the DPDP Rules, 2025.

No method of electronic transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security.

14. Links to Third-Party Websites

Our Website may contain links to third-party websites — for example, social media platforms (Instagram, Facebook, Pinterest, YouTube) or external blog references. This Privacy Policy does not apply to those websites.

We encourage you to read the privacy policies of any third-party websites you visit. greatergood is not responsible for the privacy practices or content of any external sites.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we do:

  •     The updated Policy will be posted on this page with a revised ‘Last Updated’ date.
  •     For material changes, we will notify registered users by email or through a prominent notice on our Website.
  •     Your continued use of the Website after the updated Policy is posted constitutes your acceptance of the changes.

We encourage you to review this Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests about this Privacy Policy or about how we handle your personal data, please get in touch: We are committed to resolving your concerns promptly and transparently.
Scroll to Top