NEED’LE

Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains what personal information NEED’LE collects when you use https://shopneedle.in, why we collect it, who we share it with, how long we keep it and the choices you have. Please read it together with our Terms & Conditions.

By using our website, creating an account or placing an order, you acknowledge that your information will be handled as described here, in accordance with Indian law, including the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 as its provisions come into force.

1. Who We Are

NEED’LE is an apparel brand based in Coimbatore, Tamil Nadu, India. NEED’LE decides why and how your personal information is used and is responsible for it.

Seller: NEED’LE
Address: Ganapathy, Coimbatore – 641006, Tamil Nadu, India
Email: needle.support@gmail.com
Phone / WhatsApp: +91 98422 17180 / +91 96007 22145
Website: https://shopneedle.in
Grievance Officer: NEED’LE Customer Support

2. Information We Collect

We collect only the information needed to run the store, fulfil orders and support customers.

A. Account information

When you create an account or sign in, we collect:

Your name and email address.
A password, if you register with email. Passwords are stored by our authentication provider in hashed form; NEED’LE cannot see your password.
If you use Google sign-in: your name, email address and profile picture, as shared by Google. We do not receive your Google password.
Your mobile number, once you provide it at checkout or on your Account page.

B. Saved addresses

If you choose to save delivery addresses, we store for each one: a label (Home, Work or Other), recipient name, mobile number, street address, landmark (optional), city, state, PIN code and whether it is your default.

C. Order information

When you check out, we record:

Recipient name, mobile number, delivery address, city, state and PIN code.
The email address you enter for order updates (or your account email if left blank).
Products, sizes, quantities and prices; item subtotal, shipping charge and order total; and the amount shown to you on the payment screen.
Order number, order status and its history (including cancellation reasons), payment reservation time and the dates of each step.
Which order emails have been sent for the order.

D. Payment information

Payments are made by UPI directly from your own UPI app to our UPI account. We receive and store:

The 12-digit UTR (UPI Transaction Reference) you submit.
The payment details visible to us in our own UPI account statement (such as the amount, date, and the payer’s UPI name or ID), used only to match your payment to your order and to process refunds.

We never collect or store your UPI PIN, bank account password, OTP, or debit/credit card details. Never share these with anyone claiming to be from NEED’LE.

E. Messages you send us

When you use the Contact form, we collect your name, email address, mobile number and message. We also keep emails, calls and WhatsApp messages you send us about orders, returns, refunds or complaints, including any photos or videos you share.

F. Technical information

On your device: your shopping bag is stored in your browser’s local storage. While a payment reservation is active, the reservation and the delivery details you entered for it are also stored there, so checkout can resume if you leave and come back. The reservation details are deleted when the order completes or you sign out. This information stays on your device.
Sign-in cookies: our authentication provider sets essential cookies to keep you securely signed in.
Security and server logs: our hosting and database providers automatically process technical data such as IP address, browser type, device information, pages requested and timestamps, to deliver and protect the website. The Contact form briefly uses your IP address to limit repeated messages; it is not stored with your message.

We do not use analytics, advertising pixels, or third-party tracking or marketing cookies.

3. How We Use Your Information

We use personal information to:

Create and manage your account and keep you signed in.
Reserve stock, process and verify your order and payment, and pack and deliver your order.
Alert our team when a new order is placed, so payment can be verified and the order dispatched.
Send service emails about your order: order received, payment confirmed, shipped, delivered or cancelled.
Share courier and tracking details once your order ships.
Provide invoices and order history in your account.
Handle cancellations, returns, replacements and refunds.
Respond to your messages, questions and complaints.
Prevent fraud and misuse (for example, ensuring each payment reference is used only once and limiting repeated checkout attempts and messages), and keep the website secure.
Keep business, accounting and tax records and meet legal obligations.

We do not send marketing messages unless you have separately agreed to receive them. Service messages about an order you placed are not marketing.

We do not sell or rent your personal information, and we do not use automated decision-making that has legal or similarly significant effects on you.

4. Basis for Processing and Consent

We process your information because you have chosen to provide it for a specific purpose (such as creating an account, placing an order or contacting us), because it is necessary to fulfil your order, or because the law requires it.

Where we rely on your consent, you can withdraw it at any time by emailing needle.support@gmail.com. Withdrawing consent does not affect processing already carried out, and we may still need to keep certain records as described in Section 7.

5. Who Can Access and Receive Your Information

Within NEED’LE, only authorised team members can view orders, payment references and contact messages, through an admin dashboard protected by password and a one-time code sent by email. Customers can see only their own account, addresses and orders; this is enforced by access rules in our database.

Service providers process information on our behalf, limited to what they need:

Provider	Purpose	Information involved
Supabase	Database, account login, file storage	Account, address, order and message data
Google	Google sign-in; Gmail for sending order, new-order and contact-form emails	Name, email, profile picture; email contents
Vercel	Website hosting	Technical and server-log data; data passing through the website
Courier partners	Delivering your order	Recipient name, mobile number, delivery address, PIN code
Your UPI app, its payment provider and your bank	Processing your payment and any refund	Governed by their own privacy policies

We may also disclose information to professional advisers (such as accountants), or to government authorities, regulators, law-enforcement agencies or courts where required or permitted by law, or to protect our rights, customers or the public against fraud or harm.

6. Where Your Information Is Stored

Your information is stored on secure servers operated by our service providers, which may be located in India or in other countries. Where information is processed outside India, we do so only as permitted under Indian law and rely on providers that maintain recognised security standards.

7. How Long We Keep Your Information

We keep information only as long as needed for the purposes in this policy:

Information	How long we keep it
Account details and saved addresses	While your account is active. Deleting a saved address removes it immediately; closing your account deletes both.
Orders, payment references (UTRs) and invoices	8 years from the end of the financial year of the order, as required for tax and accounting purposes, even if you close your account.
Unpaid reservations that expired	12 months, for stock and fraud-prevention records.
Contact messages and support correspondence	2 years after the matter is resolved.
Reservation details in your browser	Until the order completes or you sign out.
Your shopping bag in your browser	Until you clear your browser data or empty the bag.

When information is no longer needed, we delete or anonymise it.

8. How We Protect Your Information

We use reasonable technical and organisational safeguards, including:

Encrypted HTTPS connections across the entire website, with strict browser security headers.
Database access rules so that customers can see only their own data.
Two-step verification (password plus an emailed one-time code) for all admin access, with admin sessions that expire after 8 hours.
Prices, stock and order totals calculated and checked on our servers, not on your device.
Passwords handled by our authentication provider in hashed form; one-time codes stored hashed.
Limits on checkout attempts and contact messages to prevent abuse.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal-data breach occurs, we will take prompt action and notify affected users and the relevant authorities as required by law.

You can help by using a strong, unique password, signing out on shared devices, and paying only through our official checkout page.

9. Your Rights and Choices

Subject to applicable law, you have the right to:

Access a summary of the personal information we hold about you and how it is used.
Correct or update inaccurate or incomplete information. You can edit your name, mobile number and saved addresses yourself on the Account page.
Delete your account and personal information, subject to the records we must keep (Section 7).
Withdraw consent where processing is based on consent.
Nominate another person to exercise your rights in the event of your death or incapacity.
Raise a grievance with our Grievance Officer and, if it is not resolved, with the Data Protection Board of India.

To make a request, email needle.support@gmail.com from the email address on your account. We may ask for information to verify your identity before acting on a request. We will acknowledge requests within 48 hours and respond within one month.

You can also control cookies and site data through your browser settings. Blocking essential cookies will prevent sign-in and checkout from working.

10. Children

Our website is intended for people aged 18 and above. Customers under 18 may use the website only with the involvement and verifiable consent of a parent or lawful guardian. We do not knowingly collect personal information from children without such consent, and we do not track or target advertising at children. If you believe a child has given us information without consent, contact us and we will delete it.

11. Third-Party Links

Our website links to third-party services such as Instagram and WhatsApp, and Google sign-in takes you to Google’s pages. Information you share on those services is governed by their own privacy policies, not this one.

12. Changes to This Policy

We may update this Privacy Policy when our website, service providers, data practices or legal obligations change. The latest version will always be published on this page with a revised “Last updated” date. Where a change materially affects how we use your information, we will notify you by email or on the website and seek your consent where required.

13. Contact and Grievance Officer

For privacy questions, requests or complaints, contact:

Grievance Officer: NEED’LE Customer Support
Email: needle.support@gmail.com
Phone / WhatsApp: +91 98422 17180 / +91 96007 22145
Address: Ganapathy, Coimbatore – 641006, Tamil Nadu, India

Please include your account email and, where relevant, your order number. We will acknowledge your request or complaint within 48 hours and resolve it within one month of receipt.

NEED’LE — Everyday essentials, considered carefully.