Privacy Policy

This Privacy Policy explains how FIT & CO (“we”, “us”) collects, uses and shares personal information when you visit or shop at www.fitandco.in (the “website”).

FIT & CO is a sole proprietorship owned and operated by Ranjith S R. Business address: 16/2 Sabashkhan Street, Arni, 632301.

For privacy questions and requests, email fitandcoclothing@gmail.com.

Account details. When you create an account, we collect your first and last name, email address and a password. We store only a hashed version of your password, never the password itself. We email you a one-time code to verify your email address. You can also add a phone number to your profile.

Delivery addresses. When you save an address, we collect the recipient’s full name, address, city, state, PIN code and mobile number.

Orders. When you place an order, we keep the products, sizes, quantities and prices, any coupon used, the delivery and billing addresses used, the payment method, the order status, shipping and tracking details, and your invoice. If you use Track Order, we use the order number and email address you enter to find your order.

Payments. Online payments are handled by Razorpay. You enter your card, UPI, net-banking or wallet details in Razorpay’s payment form, and we do not receive or store them. We keep the references Razorpay gives us (such as order and payment IDs), the amount and the payment status.

Customer support. If you raise a support request from your account, we keep its category, subject, your messages, our replies and any order it relates to. If you email us or message us on WhatsApp, we receive whatever you send us there.

Reviews. If you review a product, we keep your rating and any title and text you write. Reviews are shown publicly on the product page with your first name once we approve them.

Wishlist and bag. We keep the products you save to your wishlist or add to your bag.

Technical information. When you use the website, our hosting provider and the website process technical information such as your IP address, browser type and the pages you request, so that pages can be delivered and the website kept secure — for example, by limiting repeated sign-in attempts.

Mailing list. The website previously offered a mailing-list sign-up. It has been switched off, and no marketing emails were ever sent to the addresses collected through it. Existing records are being preserved unchanged while their retention is reviewed. No deletion has been approved.

We use personal information to create and manage your account and verify your email address; to process, deliver and support your orders, including payment, cash on delivery, cancellations and refunds; to answer support requests; to show product reviews; and to keep the website secure and prevent fraud and misuse.

We send emails about your account and orders: verification codes, password-reset codes, password-change notices, and order confirmation, payment, shipping, out-for-delivery, delivery, cancellation and refund updates. We do not send marketing emails.

If you accept analytics cookies, we use Google Analytics to understand how the website is used so we can improve it — for example, which products are viewed most and at which step visitors leave checkout. We do not use it for advertising.

If you accept advertising cookies, we use the Meta Pixel to measure how our ads on Meta’s apps, such as Facebook and Instagram, perform — for example, how many people visit our store or view a product after seeing one of our ads.

We don’t use the Meta Pixel to show you ads based on your visits to our site.

Online payments are processed by Razorpay, which handles your payment details under its own terms and privacy policy. We share the order amount and your email address with Razorpay so the payment can be completed. Refunds of online payments are made through Razorpay.

Where cash on delivery is available, you may be asked to pay part of the order total online through Razorpay when you order — the amount is shown at checkout — and you pay the remainder to the courier on delivery.

Essential cookies. Sign-in cookies keep you signed in for up to 30 days; security cookies are used during sign-in; and a cookie remembers your bag when you are not signed in (fco_guest_cart, kept for up to 90 days).

Browser storage. Your browser stores your cookie choice, the products you recently viewed and your recent searches. You can clear these in your browser settings.

Consent records. When you make or change a cookie choice, your browser keeps a randomly generated ID, and we keep a record on our server of that ID, your analytics and advertising choices, the versions of this policy and of our advertising-consent request that applied, and the time. The record does not include your name, email address, IP address or account details. It lets us show which choice was made in this browser.

Analytics cookies (Google Analytics). Only if you press Accept on our analytics cookie banner, we use Google Analytics 4, a web analytics service provided by Google. Nothing is loaded from or sent to Google before you choose, and nothing is loaded if you decline. Once you accept, Google Analytics sets cookies whose names begin with _ga; they hold a randomly generated identifier for your browser and last for up to 2 years from your most recent visit.

What Google Analytics receives. The pages you visit on the website (internal order references are removed from order-confirmation page addresses), the page that brought you here, your browser, device type, screen size and language, and an approximate location that Google works out from your IP address. For shopping activity, it receives the products you view, add to your bag, check out and buy — product IDs, names, sizes, colours, prices and quantities — the value of your bag or order, and, for a completed order, the order number and the shipping and tax amounts. We do not send your name, email address, phone number, delivery address or account details to Google Analytics. Google signals and advertising personalisation are switched off.

Pages that are never measured. Google Analytics is not used on the sign-in, registration, email-verification, password-reset, unsubscribe, account or search pages, or on any page whose web address contains information such as an email address or search term.

Changing your choice. You can change or withdraw your choice at any time from Cookie settings at the bottom of every page. If you withdraw, Google Analytics stops collecting information on the website and its cookies are deleted from your browser; this cannot recall information already sent to Google. Your choice is stored in your browser, so you will be asked again on another browser or device, or if you clear your browser storage.

Advertising cookies (Meta Pixel). Only if you press Accept for advertising cookies, we use the Meta Pixel, a measurement tool provided by Meta. This choice is separate from your analytics choice. Nothing is loaded from or sent to Meta before you choose, and nothing is loaded if you decline. Once you accept, Meta’s script sets a cookie named _fbp that holds a randomly generated identifier for your browser and, if you arrive by clicking one of our ads on Meta’s apps, a cookie named _fbc that holds the identifier of that click.

What Meta receives. When you have accepted, Meta receives the pages you visit on the website and the page that brought you to each of them; the products you view and add to your bag (product ID, name, price, quantity and value); the identifiers in the _fbp and _fbc cookies; and, as Meta’s script sends with every request, information about your browser and device and your IP address. We do not send your name, email address, phone number, delivery address, order details or account details to Meta, and we do not report your checkout or purchases to Meta.

When the Meta Pixel runs, Meta may also set or read its own cookies on facebook.com, such as fr, under Meta’s cookie policy. We can’t read, control or delete those cookies. You can manage them in your browser settings or your Meta account.

Pages where the Meta Pixel is never used. The sign-in, registration, email-verification, password-reset, unsubscribe, account, search, checkout, order-confirmation, order-tracking and admin pages, and any page whose web address contains information such as an email address or search term.

Changing your advertising choice. You can change or withdraw it at any time from Cookie settings at the bottom of every page. If you withdraw, the Meta Pixel stops and we try to delete the _fbp and _fbc cookies from your browser; this cannot recall information already sent to Meta. When this policy changes how advertising cookies are used, we ask for your choice again.

Razorpay — online payments and refunds.

Shiprocket and its courier partners — to deliver your order. They receive the recipient’s name, delivery address, phone number and email address, the items ordered, the order value and the payment method.

Resend — to send our account and order emails.

Google (Google Analytics) — only if you accept analytics cookies, to measure how the website is used, as described under Cookies and similar technologies. Google may process this information on servers outside India.

Meta (Meta Pixel) — only if you accept advertising cookies, to measure our advertising, as described under Cookies and similar technologies.

Meta also uses information it receives through the Meta Pixel for its own purposes, under Meta’s own privacy policy. For example, it uses it to improve how ads are delivered, to personalise content and ads it shows people on and off its apps, for safety and security, and for research and product development. Meta may store and process this information in the United States and other countries.

Vercel — hosts the website. Neon — hosts our database.

Upstash — provides the rate limiting that protects the website from repeated attempts, for example at sign-in, password reset, registration, email-code checks, checkout and order tracking. It temporarily processes your IP address, the email address you enter to sign in or, for actions while signed in, your account ID. Each record is deleted automatically after about one minute.

The Upstash database that holds this information is hosted on Amazon Web Services in the ap-south-1 region (Mumbai, India).

A public Indian postal PIN code lookup service — when you save an address, only the PIN code is sent, to check it.

WhatsApp — only if you choose to contact us there.

People authorised to run FIT & CO can see customer and order information so they can fulfil orders and provide support, with access limited by role-based permissions. We may also disclose information where the law requires it.

Our website is hosted by Vercel and our database by Neon, both cloud service providers. Your information may be stored and processed on servers outside India. Our other service providers may also process information in their own locations.

We keep personal information only for as long as we need it for the purposes in this policy, including to provide your account and orders, to handle support requests, refunds and disputes, and to meet our legal, tax and accounting obligations. Order, payment and invoice records may need to be kept for longer than other information because of those obligations.

When information is no longer needed, we delete it or make it anonymous, unless the law requires us to keep it. The website does not delete information automatically on a schedule; deletion is carried out manually.

We keep each consent record for 2 years after it is replaced by a newer choice or withdrawn, and then delete it automatically. The record of your current choice is kept for as long as that choice applies.

Information stored in your browser stays there until you clear it, except that sign-in cookies expire after 30 days, the guest bag cookie after 90 days, and Google Analytics cookies (if you accepted them) up to 2 years after your most recent visit, or as soon as you withdraw your choice.

If you accepted analytics cookies, Google Analytics keeps each detailed record of your activity on the website for 14 months after it is collected, after which Google deletes it. Reports that show only totals and cannot identify you may be kept longer.

If you accepted advertising cookies, the _fbp cookie lasts for 90 days from your most recent visit, and the _fbc cookie, which is set only when you arrive by clicking one of our ads, lasts for 90 days. We try to delete both as soon as you withdraw your choice.

Under its business terms, Meta may keep this information for up to two years.

You can update your name, phone number, saved addresses and password from your account page. You can view your orders and download invoices there, and cancel an order where cancellation is offered. You can remove items from your wishlist yourself.

You cannot currently edit or delete a review yourself — contact us and we will help.

To ask for a copy of your personal information, to have it corrected or deleted, or to close your account, email fitandcoclothing@gmail.com. The website does not offer self-service account deletion or data export, so these requests are handled manually by Ranjith S R. We may need to keep some records, such as order and invoice records, where the law requires it.

Before acting on a request, we check that it comes from the account holder — for example, by asking you to send it from, or confirm it through, the email address on your account.

We will respond to privacy requests within 30 days of receiving them.

You can nominate another person to exercise your rights if you die or become unable to do so. Contact our Grievance Officer to do this.

Our store is intended for adults. If you are under 18, please don’t accept analytics or advertising cookies.

We protect your information by serving the website over HTTPS; storing passwords only in hashed form; leaving card, UPI and bank details to Razorpay so they never reach our servers; limiting repeated sign-in and form attempts; and restricting access to customer and order information by role-based permissions.

No website can be completely secure, so we cannot guarantee the security of information sent to us.

If you have a complaint about how we handle your personal information, contact our grievance officer: Ranjith S R (designation: Grievance Officer), 16/2 Sabashkhan Street, Arni, 632301. Email: fitandcoclothing@gmail.com. Phone: +91 72005 46232.

We’ll acknowledge your complaint within 48 hours and resolve it within one month.

If you’re not satisfied with our response, you can complain to the Data Protection Board of India.

We may update this policy from time to time, for example when the website changes or we change service providers. We will post the updated policy on this page with a new effective date.