How Rivalaya handles customer information.

Last updated: 13 October 2026

Information we collect

We may collect your name, phone number, email, delivery or billing address, order and payment-status details, tailoring appointment details, feedback, product preferences and messages you submit. If you choose to upload them, we also collect product, try-on, tailoring or support photos and files.

Optional device permissions

Notifications, location, camera and photo or file access are optional. If you allow location, Rivalaya records your latitude, longitude and accuracy for nearby-store and locally relevant experiences. Camera access is used only while you take a requested photo; the app stops the camera after the permission check. File access opens the device picker and does not let Rivalaya browse other files. We record permission choices and a pseudonymous device identifier so the app can remember them.

How we use it

We use customer information to respond to inquiries, process orders, support tailoring bookings, arrange pickup or delivery, send OTP verification, provide invoices, manage loyalty benefits and improve store service.

Marketing and analytics

With your interaction or consent, we may use contact details for launch offers, festival campaigns, feedback requests and website analytics. You can ask us to stop promotional communication.

Data sharing

We do not sell customer data. Information may be shared only with service providers needed for payments, SMS OTP, delivery, email, analytics, hosting or customer support. Razorpay processes payment details; Rivalaya stores order and payment-status records, not full card or bank credentials.

Security

OTP, payment and customer data flows are handled through the website backend and service providers. API keys and payment secrets are never intentionally exposed to frontend users.

Your choices

For access or correction requests, contact [email protected]. You can request account deletion at https://rivalaya.com/delete-account. We may retain invoice, tax, fraud-prevention or other records where the law requires it.

Retention

We retain customer, order, support and permission records only for service, security, accounting and legal needs. You can revoke browser or device permissions at any time. Account deletion removes or de-identifies account data unless a record must be retained for tax, invoice, fraud-prevention or another legal obligation.