Privacy policy
Last updated 4 August 2026.
Soft Season is a brand of Astrion, trading as Astrion, of Nagercoil, Tamil Nadu, India. We are the data fiduciary / data controller for the information described here. You can reach us at hello@softseason.store.
This page tells you exactly what we hold, why we hold it, who else touches it, and how to make us delete it. It is written to be read, not to be survived.
What we collect
When you buy something
- Your name, email address, telephone number, billing address and delivery address.
- What you ordered, when, in what colour, and for how much.
- Anything you write in the cart note — including a gift message, and the name of the person the gift is for.
- Payment confirmation. We never see or store your card number. Card details go directly to Razorpay and PayPal; we receive only a success or failure and the last four digits.
Information about a baby
Some orders involve details about a child — a first name for a card, a due date or birth date, or a photography session date. We ask for these only when they are needed to make or route your order. We use them for nothing else. We do not build a profile of a child, we do not use these details for marketing, and we delete them within 90 days of your order being delivered unless you have asked us to keep them for a repair or a repeat commission. If you would rather not give them, tell us and we will work around it.
When you contact us
Your email address or phone number and whatever you send us — including photographs you send to support a claim under one of our promises. If you agree to receive your making-film or dispatch updates on WhatsApp, we hold your WhatsApp number for that purpose. Message content on WhatsApp is handled by WhatsApp under its own terms.
When you use the site
Our store runs on Shopify, which records standard technical information: IP address, browser and device type, pages viewed, referring site, and cookie identifiers. This keeps your cart working, protects against fraud, and tells us — in aggregate — which pages are useful.
When you subscribe or review
Your email address if you join our list, and your name, review text and any photographs you choose to publish. Reviews are published under the name you give us. You can ask us to remove yours at any time.
Why we hold it, and on what basis
| Purpose | Basis |
|---|---|
| Taking payment, making your piece, shipping it, and handling claims | Performance of our contract with you |
| Keeping tax, GST and accounting records | Legal obligation |
| Fraud and chargeback prevention, site security | Legitimate interests |
| Marketing emails and WhatsApp updates | Your consent, withdrawable at any time |
| Publishing a review you submitted | Your consent |
We do not sell your personal information, and we never have. We do not share it with data brokers, and we do not run advertising that identifies you to a third party by name or email address.
Who else touches it
Only the parties below, only for the purpose listed, and only to the extent they need it.
- Shopify Inc. — hosts the store and processes orders and checkout.
- Razorpay and PayPal — take payment and handle refunds and disputes.
- Courier and postal partners — receive your delivery address, name and phone number so the parcel can arrive.
- Our artisan partners in Narsapur, Andhra Pradesh, India — receive the colour, the size and, if your order includes one, a first name to be embroidered or written on a card. They do not receive your address, email, phone number or payment details.
- Our email and review providers — receive your email address and any review you submit.
- Professional advisers, and authorities where the law requires it.
Where your information goes
We are based in India, and your order information is processed here. Shopify and our payment, email and courier providers operate internationally, so your information may be stored or processed outside your own country, including in Canada, the United States and the European Union. Where we transfer personal data out of the UK or the EEA, we rely on the standard contractual clauses our providers have in place.
How long we keep it
- Order and payment records — for as long as Indian tax and accounting law requires us to keep them, currently up to eight years from the end of the relevant financial year.
- Details about a child — deleted within 90 days of delivery, as above.
- Support emails — three years, so we can honour a repair or a warranty claim.
- Marketing list — until you unsubscribe, and then we retain only the fact that you unsubscribed so that we do not email you again.
Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it for marketing. Email hello@softseason.store and we will respond within 1–2 business days, Monday to Friday and complete the request within 30 days. We do not charge for this and we will not ask you why.
If you are in India, the Digital Personal Data Protection Act 2023 gives you the right to access, correct, complete, update and erase your data, to nominate someone to exercise your rights, and to have a grievance heard. Our Grievance Officer is named at the bottom of this page. If we do not resolve your complaint, you may escalate it to the Data Protection Board of India.
If you are in the UK or the EEA, you additionally have the rights to restrict processing, to object to processing based on legitimate interests, and to data portability, and you may complain to your national supervisory authority — in the UK, the Information Commissioner's Office at ico.org.uk.
If you are in California, you have the right to know what we collect, to have it deleted, to correct it, and to opt out of the sale or sharing of personal information. As above: we do not sell or share it. Exercising any of these rights will never get you worse service or a worse price.
Cookies
We use three kinds:
- Essential — your cart, your session, checkout security and fraud screening. The store does not work without these.
- Analytics — anonymous, aggregated page and traffic statistics.
- Marketing — only if you consent, so that we do not show you an advert for something you have already bought.
You can refuse or delete cookies in your browser settings, and where a consent banner is shown you can change your choice at any time. Refusing analytics and marketing cookies does not affect your ability to order.
Children
Our store is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email us and we will delete it. Where an order includes details about a baby, those details are given to us by the purchasing adult and are handled as described above.
Security
Payments are taken over an encrypted connection by PCI-DSS compliant processors. Access to order data is limited to the people who need it to fulfil your order. No system is perfect; if a breach ever affects your data, we will tell you and the relevant regulator within the time the law requires, and we will tell you what actually happened rather than a sanitised version of it.
Changes
If we change this policy we will update the date at the top. If a change materially affects how we use your information, we will email everyone on our list rather than quietly reposting the page.
Grievance Officer
Under the Consumer Protection (E-Commerce) Rules 2020 and the Digital Personal Data Protection Act 2023:
the Grievance Officer
Astrion trading as Astrion
Nagercoil, Tamil Nadu, India
hello@softseason.store
We acknowledge every grievance within 48 hours and resolve it within one month of receipt.