Privacy policy

Privacy Policy

Last Updated: August 8, 2026

Cotton By Yard ("we," "our," or "us") operates under the legal business entity Cotton By Yard brand of Cottonfabrichub. We are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website, place an order, contact us, or otherwise interact with our services.

This policy is designed to address applicable privacy and data protection requirements, including, where applicable, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended (CCPA/CPRA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and Australia's Privacy Act 1988 and Australian Privacy Principles (APPs).

The rights and protections available to you may vary depending on where you live and which laws apply to your personal information.

Nothing in this Privacy Policy is intended to limit any privacy or data protection rights that cannot legally be excluded or restricted.

1. Information We Collect

We collect personal information that is reasonably necessary to operate our business, process and deliver orders, provide customer support, comply with legal obligations, and improve our services.

Information You Provide Directly

Depending on how you interact with us, this may include:

Identity & Contact Data:

  • Your name

  • Shipping address

  • Billing address

  • Email address

  • Phone number

Transaction Data:

  • Details of products you purchase

  • Order numbers

  • Purchase history

  • Shipping and delivery information

  • Return and exchange information

Customer Support Information:

  • Information you provide when contacting us by email or WhatsApp

  • Your communications and inquiries

  • Information necessary to resolve customer service issues

We do not intentionally collect sensitive personal information unless it is necessary for a specific purpose and permitted by applicable law.

Information Collected Automatically

When you visit our website, certain technical and usage information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Approximate geographic location

  • Pages visited

  • Website interactions

  • Referral information

  • Date and time of visits

  • Cookies and similar tracking technologies

The information collected may vary depending on your browser, device, cookie settings, and the services enabled on our website.

2. How We Collect Your Information

We may collect personal information:

  • Directly from you when you place an order.

  • When you create or use an account, where available.

  • When you contact us by email or WhatsApp.

  • When you subscribe to marketing communications.

  • When you request a return, refund, exchange, or customer support.

  • Automatically through cookies and similar technologies when you browse our website.

  • From payment processors, shipping providers, and other service providers when necessary to process your order.

We aim to collect only information that is reasonably necessary for the purposes described in this Privacy Policy.

3. How We Use Your Information

We may use your personal information for the following purposes:

Order Fulfillment

To:

  • Process and complete transactions.

  • Confirm and manage your orders.

  • Arrange shipping and delivery.

  • Send order and shipping notifications.

  • Process returns, refunds, and exchanges.

  • Maintain transaction records.

Customer Support

To:

  • Respond to your inquiries.

  • Communicate with you regarding your orders.

  • Resolve complaints and service issues.

  • Provide assistance through email or WhatsApp.

Marketing Communications

With your consent where required by applicable law, we may send you marketing emails regarding:

  • New products

  • Sales and promotions

  • Store updates

  • Other Cotton By Yard news

You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link included in our marketing emails.

We do not engage in marketing via SMS.

Website Analytics and Advertising

Where permitted by applicable law and your applicable cookie or privacy choices, we may use analytics and advertising technologies to:

  • Understand how visitors use our website.

  • Measure website performance.

  • Measure the effectiveness of advertisements.

  • Improve our website and services.

  • Show or measure relevant advertising.

Legal and Business Purposes

We may use personal information where necessary to:

  • Comply with applicable laws and regulations.

  • Meet tax, accounting, and record-keeping obligations.

  • Detect and prevent fraud, abuse, or unauthorized transactions.

  • Protect our legal rights and property.

  • Respond to lawful requests from government authorities.

  • Establish, exercise, or defend legal claims.

4. Legal Bases for Processing Personal Information

Where the GDPR applies, we process personal information on one or more of the following legal bases, depending on the circumstances:

Performance of a Contract:
We process information when necessary to fulfill your order, provide requested services, process payments, arrange delivery, or manage returns and exchanges.

Legal Obligation:
We may process information when necessary to comply with applicable legal, tax, accounting, fraud-prevention, or regulatory requirements.

Consent:
We may rely on your consent for activities such as certain marketing communications and, where required, certain cookies or advertising technologies.

You may withdraw consent at any time where processing is based on consent.

Legitimate Interests:
Where permitted by applicable law, we may process information for legitimate business interests such as improving our services, maintaining website security, preventing fraud, and managing customer relationships, provided those interests do not override your applicable privacy rights.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, understand website usage, improve our services, and, where applicable, measure and personalize advertising.

These technologies may include:

Google Analytics

We may use Google Analytics to understand how visitors interact with our website and to analyze website traffic and performance.

Google Ads Tracking

We may use Google Ads tracking technologies to measure the effectiveness of our advertising campaigns and, where permitted, support advertising activities.

Meta/Facebook Pixel

We may use the Meta/Facebook Pixel to measure advertising performance and, where permitted, support relevant advertising.

The actual cookies and tracking technologies used may change as we update our website and services.

Where required by applicable law, we will request consent before placing or using non-essential cookies or similar technologies.

You can manage cookies through your browser settings and, where available, through our website's cookie preference controls.

Please note that disabling certain cookies may affect the functionality or performance of parts of our website.

6. Third-Party Service Providers and Data Sharing

We do not sell or rent your personal information.

We may disclose or provide access to personal information to trusted third-party service providers where reasonably necessary to operate our business and provide our services.

These providers may include:

Payment Processors

Payments may be securely processed through third-party payment providers such as Stripe and PayPal.

We do not intentionally store complete credit card numbers on our own servers. Payment information is processed through the applicable payment provider in accordance with its own security and privacy practices.

Delivery and Logistics Providers

We may provide your:

  • Name

  • Shipping address

  • Phone number

  • Order information

to shipping companies, courier services, and logistics providers so that your order can be delivered.

Website, Hosting, and Infrastructure Providers

We may use third-party technology and infrastructure providers to host, operate, maintain, secure, and support our website and online store.

Marketing and Email Providers

We may use trusted software providers to manage email communications, newsletters, marketing campaigns, and related services.

Analytics and Advertising Providers

Where applicable, we may share or permit access to certain information with analytics and advertising providers such as Google and Meta in accordance with applicable law and your privacy choices.

These companies may process information under their own privacy policies and contractual arrangements with us.

We do not authorize third-party service providers to use your personal information for purposes unrelated to the services they provide to us, except where otherwise permitted or required by law.

7. Sale or Sharing of Personal Information

We do not sell personal information for monetary consideration.

However, certain advertising and analytics technologies may constitute "sharing" of personal information under certain privacy laws, including the CCPA, even where no money is exchanged.

Where applicable law gives you the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising, we will provide and honor the applicable opt-out mechanism.

If you are a California resident and wish to exercise applicable privacy rights, please contact us using the information provided in the Your Privacy Rights section below.

8. International Data Transfers

Our legal business is located in India:

Cotton By Yard (cottonfabrichub)
180 New Indra Colony, Gali No. 9,
Jalmahal, Jaipur, Rajasthan – 302002
India

Because we operate internationally and use service providers located in different countries, personal information collected from customers in the United States, United Kingdom, European Union, Canada, Australia, and other countries may be transferred to, stored in, or processed in countries outside your country of residence, including India and countries where our service providers operate.

Different countries may have different data protection laws.

Where applicable law requires safeguards for international transfers, we will use an appropriate lawful transfer mechanism and reasonable safeguards designed to protect personal information.

Where required under applicable law, this may include contractual safeguards or other legally recognized transfer mechanisms.

For Australian customers, we may disclose personal information to overseas recipients where necessary to provide our services. Where practicable and required by applicable law, we will identify the relevant countries or categories of countries involved.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Completing transactions and providing customer support.

  • Managing returns, refunds, and exchanges.

  • Maintaining business and accounting records.

  • Complying with legal and tax obligations.

  • Resolving disputes.

  • Preventing fraud and abuse.

  • Enforcing our agreements.

  • Maintaining necessary business records.

The exact retention period may vary depending on the type of information, the purpose for which it was collected, legal requirements, and legitimate business needs.

When personal information is no longer reasonably required, we will take reasonable steps to securely delete, destroy, or anonymize it, subject to applicable legal requirements.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, loss, misuse, alteration, or destruction.

These measures may include:

  • Access controls

  • Secure authentication

  • Encryption or secure transmission where appropriate

  • Restricted access to personal information

  • Security monitoring and maintenance

  • Appropriate safeguards for third-party service providers

However, no method of transmitting or storing information over the internet can be guaranteed to be completely secure.

If we become aware of a data security incident affecting your personal information, we will take appropriate steps required by applicable law, which may include investigating the incident, taking corrective measures, and notifying affected individuals or regulators where legally required.

11. Your Privacy Rights

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal information.

Right to Access

You may request information about the personal information we hold about you and, where required by law, obtain a copy of that information.

Right to Correction

You may request that inaccurate, incomplete, or outdated personal information be corrected.

Right to Deletion or Erasure

You may request that we delete your personal information, subject to legal and other permitted exceptions.

Right to Data Portability

Where applicable, you may request your personal information in a structured, commonly used, and machine-readable format.

Right to Restrict Processing

Where applicable, you may request that we restrict the processing of your personal information in certain circumstances.

Right to Object

Where applicable, you may object to certain processing activities, including certain direct marketing activities.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Right to Opt Out of Marketing

You may opt out of marketing emails at any time by clicking the "unsubscribe" link at the bottom of our marketing emails.

California Privacy Rights

If you are a California resident and the CCPA applies to our processing of your information, you may have rights including:

  • The right to know what personal information we collect, use, disclose, or otherwise process.

  • The right to request access to personal information.

  • The right to request correction of inaccurate personal information.

  • The right to request deletion of personal information, subject to applicable exceptions.

  • The right to opt out of the sale or sharing of personal information where applicable.

  • The right to limit certain uses or disclosures of sensitive personal information where applicable.

  • The right not to receive discriminatory treatment for exercising your privacy rights.

We will not discriminate against you for exercising privacy rights provided by applicable law.

12. How to Exercise Your Privacy Rights

To request access, correction, deletion, portability, restriction, objection, or other applicable privacy rights, please contact us using the information below.

Email: supportcottonbyyard@gmail.com

Please include sufficient information for us to understand and verify your request.

Where required by law, we may need to verify your identity before completing a request in order to protect your personal information from unauthorized disclosure.

We will respond to valid privacy requests within the time period required by applicable law.

Where permitted by law, we may request additional information necessary to verify your identity or clarify your request.

13. Children's Privacy

Our website and services are not intended to knowingly collect personal information directly from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information without appropriate authorization, please contact us so that we can review the situation and take appropriate action.

14. Third-Party Websites and Services

Our website may contain links to third-party websites, services, payment providers, social media platforms, or other external websites.

We are not responsible for the privacy practices, security, or content of third-party websites.

We encourage you to review the privacy policies of third parties before providing them with personal information.

15. Privacy Complaints

We take privacy concerns seriously.

If you believe that we have mishandled your personal information, you may contact us using the information below and explain your concern.

We will review and investigate your complaint and respond within a reasonable period and within any applicable legal timeframe.

Where applicable law provides you with the right to complain to a relevant privacy or data protection authority, you may also exercise that right.

For example:

  • EU/EEA customers may contact their applicable national data protection authority.

  • UK customers may contact the Information Commissioner's Office (ICO).

  • Australian customers may contact the Office of the Australian Information Commissioner (OAIC).

  • Canadian customers may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.

  • California residents may contact the California Privacy Protection Agency or other applicable regulatory authority.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, technology, legal requirements, or privacy practices.

When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice or obtain consent for material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

17. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, submit a privacy complaint, or request deletion of your personal information, please contact us:

Legal Business Name: Cotton By Yard brand of Cottonfabrichub

Physical Address:
180 New Indra Colony, Gali No. 9,
Jalmahal, Jaipur, Rajasthan – 302002
India

Email: supportcottonbyyard@gmail.com

WhatsApp: +91-9928891608

We will use reasonable efforts to respond to privacy inquiries and requests in accordance with applicable law.