Skip to content

Policies

What we collect when you shop with us, why we need it, who else sees it and how to have it changed or deleted. No advertising trackers, and we never see your card or UPI details.

Last updated: 27 September 2026

1.Who we are

This website is run by Twofolds (“we”, “us”). This policy covers the personal data we collect through it: when you browse, create an account, place an order, upload artwork or get in touch.

We keep it short and specific on purpose. If anything here is unclear, email insiyaahusainn@gmail.com and we will explain.

2.What we collect

When you create an account

  • Your name and email address.
  • Your password, stored only as a one-way hash. Nobody at Twofolds can read it.
  • If you sign in with Google: the name, email address and profile picture Google shares with us, and a link between your Google account and your account here. We never see your Google password.

When you place an order

  • The name, email address and delivery address you enter at checkout.
  • What you ordered: products, sizes, colours and quantities, and for custom prints the artwork file names and where the print goes.
  • Prices, any discount code used, GST, the delivery method and the order total.
  • Whether your payment went through, and the reference Razorpay gives us for it. Not your card number, UPI PIN or bank login: you enter those in Razorpay’s own window and they never reach us.
  • The courier and tracking number once the order ships, and its status history.

When you upload artwork or ask for a bulk quote

  • The artwork files you upload for a custom print or a bulk order.
  • For a bulk enquiry: your name and email address, your company and phone number if you give them, and the details of the job (quantity, garment colour, the date you need it by and any notes).

When you get in touch

Your name, your email address and whatever you choose to tell us in your message, so we can reply.

If you join the drop list

Your email address, used only to tell you about new drops.

Kept on your device, not with us

Your bag, wishlist, recently viewed products, saved addresses, chosen delivery method and any discount code you have applied are kept in your browser’s local storage. They stay on that device. The details an order needs are sent to us only when you place it. Clearing your browser data removes the rest.

Technical information

Like any website, our hosting provider receives basic technical information with each request, such as your IP address, browser type and the page asked for, and records it in server logs used to keep the site running and secure.

3.How we use it

  • To create and run your account, and keep you signed in.
  • To take your order and payment, make and pack it, send it to you and keep you updated along the way.
  • To prepare the proof for a custom print and print it from your artwork.
  • To quote for and produce bulk orders.
  • To handle cancellations, returns, exchanges and refunds.
  • To answer your messages.
  • To prevent fraud and misuse, and keep the site secure.
  • To keep the tax and accounting records the law requires.

We use your data because you give it to us for these purposes, when you create an account, place an order or send an enquiry, or because the law requires or allows us to, as with tax records.

We do not sell your personal data, rent it out or use it to build advertising profiles. We email you about your orders and enquiries, and about drops only if you have asked for them.

4.Who we share it with

Only the services we need to run the shop, and only what each of them needs:

  • Razorpay processes payments. You enter your card, UPI or bank details in Razorpay’s checkout window; Razorpay tells us whether the payment succeeded and gives us a reference. Refunds go back through Razorpay too.
  • Vercel hosts this website and keeps the artwork files you upload, in private storage.
  • Our database provider stores account, order and enquiry records on our behalf.
  • Google, only if you choose to sign in with Google.
  • Courier partners receive your name and delivery address, plus any contact detail they need to reach you about the delivery.
  • Font services (Google Fonts and Fontshare) supply the typefaces the site uses. Your browser requests them directly, so those services see the technical details any web request carries, such as your IP address.

Each provider handles data under its own terms and privacy policy. Some of them, including our hosting provider, may process data on servers outside India.

We will also share information when the law requires it, for example in answer to a valid order from a court or government authority, or where it is needed to protect our customers or the business from fraud.

5.Cookies and local storage

We use only the cookies the site needs to work:

  • A sign-in cookie that keeps you signed in. It holds an encrypted session token and is cleared when you sign out.
  • Short-lived security cookies set while you sign in, which protect the sign-in form against forgery and remember which page to send you back to.

There are no advertising cookies, no analytics or tracking scripts and no social media pixels on this site.

When you pay, Razorpay’s checkout window runs Razorpay’s own code and may set its own cookies under Razorpay’s policy, for example to detect fraud.

Your bag, wishlist and the other things listed under “Kept on your device” are held in your browser’s local storage, not in cookies, and are not sent to us as you browse.

6.How long we keep it

  • Account details: for as long as your account is open. If you ask us to delete it, we do, apart from the order records below.
  • Order records: for as long as Indian tax and accounting law requires, even if you delete your account.
  • Uploaded artwork and bulk enquiries: for as long as we need them to quote, proof, print and handle any reprint or reorder you ask for. You can ask us to delete your files at any time once no open order depends on them.
  • Messages: for as long as it takes to deal with your question and any follow-up.
  • Data on your device: until you remove it or clear your browser data.

7.How we protect it

Passwords are stored only as one-way hashes. Uploaded artwork sits in private storage that only our team can open and is never published at a public address. A payment is checked against Razorpay’s cryptographic signature before any order is marked paid, and the whole site is served over an encrypted (HTTPS) connection.

No system is perfectly secure. If you think your account has been misused, email insiyaahusainn@gmail.com straight away.

8.Your choices and rights

You can ask us to:

  • Show you the personal data we hold about you.
  • Correct anything that is wrong or out of date. You can change your name yourself, in your account.
  • Delete your account and personal data, apart from records the law requires us to keep.
  • Stop anything we do only because you agreed to it, such as drop emails. Every drop email has an unsubscribe link.

To make a request, email insiyaahusainn@gmail.com from the email address on your account, or tell us which address it is, so we can confirm the request comes from you. A person replies within one working day to confirm we have it, and then we act on it.

If you are unhappy with how we have handled your data or a request, tell us and we will look into it. You can also complain to the authority responsible for data protection in India.

9.Children

This site is meant for adults. You need to be 18 or over to create an account or place an order, or to do it with a parent or guardian involved. We do not knowingly collect personal data from children. If you believe a child has given us their details, email insiyaahusainn@gmail.com and we will delete them.

10.Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. If a change is significant, we will point it out clearly on the site.

11.Contact us

Questions, requests or complaints about your personal data go to Twofolds: