Privacy Policy

This policy explains what data FrescoSmart collects when you visit our product pages at www.frescosmart.in, tap "Order on WhatsApp", or install our Android app — and what we do with that data.

1. Who we are

FrescoSmart is a retail business selling women's ethnic wear (sarees, kurtis, dress material, and related products). This policy applies whenever you interact with our website or messaging channels.

Grievance contact: For any questions about your data, or to exercise your rights (see section 9), emailirdc.lab.india@gmail.com — required by India's Digital Personal Data Protection Act 2023.

2. What we collect on this website

When you view a product page, we load the Meta (Facebook) tracking pixel — Pixel ID1344609262669760. It automatically records:

• The page you viewed
• The product ID you viewed (as a "ViewContent" event)
• Your IP address and approximate location derived from it
• Your browser type and device information
• Cookie identifiers used by Meta (see section 6)

When you tap "Order on WhatsApp", we additionally send a "Lead" event to Meta so we can measure which of our ads led to real orders.

Meta may use this data to build advertising profiles about you across the services they operate (Facebook, Instagram, WhatsApp) and their partner advertising networks. Their full data policy is atfacebook.com/policy.

The tracking pixel data above is not stored on our own servers. It flows directly from your browser to Meta.

But when you place an order using "Order now", we do store the details you enter on the order form. See section 3 below.

3. Our own server-side analytics

Separately from the Meta Pixel, we log basic information about visits to our product pages on our own server. This lets us measure real traffic (including from visitors who block the Pixel) and see which products people are viewing versus ordering. We log:

• The product page you viewed and the time
• The referring website you came from (e.g. facebook.com, google.com), if your browser sends one
• Your browser's user-agent string, truncated
• A random session identifier stored as a cookie (fs_sid, see section 6), so we can distinguish 20 views by one person from 20 different people
• Whether the request appears to be from a search-engine or social-media crawler bot, so we can filter that noise out of our reports

We do not store your IP address in this analytics log. Google Cloud does record IPs in its own server access logs for up to 30 days for infrastructure diagnostics; that is outside our application and not used for tracking.

This data stays on our own server and is not shared with Meta or any third party.

4. Placing an order

When you click "Order now" on a product page and submit the order form, we collect and store the following on our own database:

• Your name
• Your Indian mobile number
• Your email (if you provide one — optional)
• Your full postal address (line 1, line 2, city, state, pincode)
• Any notes you added (e.g. gift wrap, colour preference)
• The product you ordered, the price you agreed to, and the order timestamp
• Payment status (whether you've paid, when we dispatched it)

We use this data solely to fulfil your order — process the payment, dispatch the goods, and contact you if there's a question. We do not use it for unrelated marketing without your consent.

Your order stays visible to you on its own payment page (URL includes your order ID) so you can return to it later.

5. WhatsApp ordering

Tapping "Order on WhatsApp" opens WhatsApp on your device with a pre-filled message containing the product name, code, price, and page URL. When you send it, we receive:

• Your WhatsApp phone number
• Your WhatsApp display name and profile picture (if you have one)
• The message content you send us and any subsequent messages
• The timestamps of your messages

We use this information solely to process and fulfil your order, provide customer support, and follow up on related purchases. We do not use it for unrelated marketing without your consent.

The messaging service itself is operated by Meta under WhatsApp's own terms:whatsapp.com/legal/privacy-policy.

6. Cookies

The Meta Pixel sets two small cookies in your browser:

• _fbp — a first-party cookie Meta uses to identify your browser across visits to our product pages.
• _fbc — set only when you arrive from a Facebook or Instagram ad; records which ad you clicked.

We also set one cookie of our own:

• fs_sid — a random 36-character identifier stored on your browser for 30 days. It lets us count multiple page views from the same browser as one session (for our analytics — see section 3). It is not linked to your name, email, or any identifying information.

You can block or delete any of these via your browser settings, and most ad blockers prevent them from being set in the first place. Blocking them does not affect your ability to browse or buy — it only affects our measurement of visitor behaviour.

7. Third parties who receive or host your data

• Meta Platforms Ireland Ltd — receives Meta Pixel events (section 2) and hosts WhatsApp conversations (section 5).
• Google Cloud Platform — hosts our website on App Engine, our order database on Cloud SQL, and product images in Cloud Storage. Order data (name, mobile, email, address) that you enter on the "Order now" form is stored in this database. Google retains server access logs for up to 30 days.
• Google Play — if you install our Android app, Google Play's standard data collection applies.

We do not sell your personal data to any third party.

8. How long we keep data

• Website server logs: 30 days (Google Cloud default).
• Our own analytics logs (product page views, funnel steps — see section 3): 90 days. A daily automated job purges older rows.
• Meta Pixel data: retained by Meta under their own retention policy — this is outside our control. You can review and delete Meta's record via your Facebook or Instagram account settings.
• Order records (name, mobile, email, address, order details): retained for 8 years, because Indian tax and consumer-protection law requires order and financial records to be kept for that period. You can request earlier deletion of your personal contact fields (section 9), but line-item financial data must be retained for the legal period.
• WhatsApp orders and enquiries: retained in our WhatsApp Business account for up to 3 years, so we can service repeat customers and returns. Shorter if you request earlier deletion.
• Financial records (invoices, GST, tax documents): retained for 8 years, as required by the Indian Income Tax Act.

9. Your rights

Under India's Digital Personal Data Protection Act 2023, you can:

• Ask us what personal data we hold about you
• Ask us to correct incorrect data
• Ask us to delete your data (subject to legal retention requirements for financial records)
• Withdraw your consent for any optional data use
• Nominate someone else to exercise these rights on your behalf if you're unable to

To exercise any of these rights, emailirdc.lab.india@gmail.com with your request. We respond within 30 days.

If you're not satisfied with our response, you can escalate to the Data Protection Board of India, which was established under the DPDP Act 2023.

10. Children

Our products are marketed to adults. This site and our services are not directed at children under 18. If you are under 18, please do not send us your personal information.

11. Changes to this policy

We update this policy when we change how we collect or use data. The "Last updated" date at the top will change accordingly. Substantive changes will be highlighted at the top of the page for at least 30 days.

For customers already on file, we will notify significant changes by email or WhatsApp.