Privacy Policy
Effective date: 12th May 2026
This Privacy Policy explains how Soleil & Silk handles personal information.
It applies to our website, enquiries, orders, appointments and related communications.
Who We Are
Soleil & Silk is operated by Nandini Srivastava, at P2/13, Block 8, Kailash Dham, Sector 50, Noida. This policy explains how we handle personal information collected through our website, enquiries, orders, appointments and related communications.
Privacy contact: Nandini Srivastava
Customer care: info@soleilsilk.com
Information We Collect
We only collect information you provide to serve you with the best possible experience. Colleted information includes:
- Name and contact details
- Delivery and billing addresses
- Order, appointment and enquiry details
- Measurements, preferences and artwork references shared for a bespoke request
- Device, browser, IP address and page-interaction details
- Fraud-prevention signals
How We Use Information
We use relevant information to respond to enquiries, develop agreed commissions, process and deliver orders, provide service updates, arrange appointments, handle complaints and refunds, protect against fraud, operate the website and meet legal or accounting obligations.
We send optional collection news and promotional invitations only where you have opted in or another lawful permission applies. Making a purchase or submitting an enquiry does not, by itself, subscribe you to marketing. We do not use a blanket website-use statement as consent to every form of processing.
Payments and Service Providers
We use service providers for payments, hosting, delivery, communications, account sign-in, security and analytics where relevant. We share information needed for the service and require appropriate safeguards. We may disclose information where legally required or necessary for legitimate dispute resolution.
We do not sell or rent personal information. Use of a third-party provider does not remove responsibilities that applicable law places on us.
In the current integration, checkout sends payment requests to Razorpay. The application stores payment-session, order and payment identifiers, amount, currency and payment status in the commerce system. Razorpay processes payment information under its Privacy Policy.
We use the following service providers: Razorpay for payment processing; Google for optional account sign-in and reCAPTCHA Enterprise for appointment security; Vercel Web Analytics and Speed Insights for analytics and performance monitoring; and WhatsApp and email links for customer communications.
Cookies and Similar Tools
We use cookies and local storage for authentication, currency preferences, cart continuity and wishlist functionality.medusa_customer_token is an HttpOnly, SameSite=Lax authentication cookie retained for 30 days after email or Google sign-in; google_return_to is an HttpOnly, SameSite=Lax callback cookie retained for 10 minutes; and soleil-silk-currency is a one-year preference cookie.
The cart_id, currency_preference and wishlist are also stored in local storage.
Where consent is required for optional tools, they will operate only after that consent. Browser controls may also allow you to limit cookies; some essential features may then be unavailable. A marketing opt-in is separate from cookie settings.
WhatsApp and External Platforms
If you contact us through WhatsApp or another platform, that provider also handles information under its own terms and privacy policy. We use the information in our conversation to manage your enquiry or order.
Please avoid sending payment credentials or unnecessarily sensitive information through messages.
Customer Photographs, Stories and Bespoke References
We use photographs, measurements and references shared for a commission to understand and fulfil that request. We seek separate permission before using identifiable customer photographs, testimonials or personal stories in public marketing.
Permission for production is not automatically permission for publication.
Retention
We retain information only for a justified operational, legal or dispute-related period. We delete or anonymise information when no longer needed, subject to lawful retention, backup cycles and dispute holds. The periods below are our current retention schedule and may be extended where required for an audit, investigation, legal claim or other lawful obligation.
- Order, invoice and accounting records: at least 72 months from the due date of the relevant tax return, unless a longer period is required for an active matter or dispute.
- Enquiries and appointment records: up to 2 years after the last interaction, unless needed for an active matter or dispute.
- Bespoke references, photographs and measurements: until the commission is fulfilled and ordinarily up to 2 years after the last related activity, unless a longer period is necessary for an active matter or dispute.
- Account data, technical logs and cookies: account data while the account is active and as otherwise required for orders or disputes; technical logs ordinarily up to 12 months; authentication cookies for their stated duration; and preference cookies or local storage until expiry or deletion by the user.
Security and International Processing
We use reasonable safeguards appropriate to the information and services involved. No system can guarantee complete security. We address security incidents and provide notifications where required by applicable law.
The application uses Google reCAPTCHA Enterprise, Google account sign-in, Razorpay payment processing, and Vercel analytics. Their processing locations and transfer terms are governed by the applicable provider arrangements.
Your Choices and Requests
You may contact our privacy contact to request access, correction or deletion, withdraw consent where relevant, or raise a privacy concern. We handle requests in accordance with applicable law, explain any lawful limits and may reasonably verify identity to protect your information.
Withdrawal does not undo lawful prior processing and may affect a requested service where information is necessary to provide it.
You can unsubscribe from marketing through the available unsubscribe method or by emailing info@soleilsilk.com.
Necessary order, security and complaint messages are separate from marketing. Statutory data rights apply as the relevant provisions come into force; this policy does not claim that every future provision is already operative.
Children
The website and purchasing services are intended for adults aged 18 and above. We do not knowingly collect children's personal information through independent purchases.
If you believe a child has supplied information, contact us so we can assess and address it appropriately. Any commission involving a child's details must be handled through a parent or lawful guardian with the permissions required by applicable law.
Changes and Complaints
We publish an effective date when this policy changes and provide additional notice or seek fresh consent where required. Changes do not retrospectively authorise unrelated uses of information.
For an unresolved privacy concern, use the grievance contact on our Contact page or the relevant authority available under applicable law. Nothing here waives applicable privacy or consumer rights.