Privacy Policy

SPRSTR (operated by 123 Apparels) respects your privacy. This policy explains what personal information we collect when you use our website, why we collect it, how we use and share it, and how you can exercise your rights.

1. Information we collect

When you place an order or contact us, we collect information you provide directly:

Name, delivery address, phone number, and (optionally) email address
Order details — items, quantity, price, payment method, order history
Login credentials for account holders (phone number and one-time password)

We also collect limited technical information automatically:

Device, browser, and operating-system identifiers your browser sends with each request
Approximate location derived from your IP address (region-level, not precise)
Essential cookies used to keep you signed in, remember your cart, and secure the site
Analytics and marketing cookies — only if you consent (see “Cookies & consent” below)

2. How we use it

Accept and fulfil your orders, process payments, and issue GST invoices
Arrange delivery through our courier partners
Send transactional messages about your order (confirmation, dispatch, delivery, returns, refunds) through the messaging channels we have configured
Provide customer support and respond to your queries
Detect and prevent fraud, misuse, or abuse of the site
Comply with tax, accounting, and other legal obligations under Indian law
Improve the site and — where you have consented — measure marketing performance

3. Cookies & consent

When you first visit the site we show a cookie/consent banner. Essential cookies (login session, cart, security) are always active. Analytics and marketing cookies are set only when you accept them. You can review or change your preferences at any time from the “Privacy preferences” link in the site footer.

4. Who we share it with

We share your personal information only with the parties needed to run our business:

Courier partners — to pick up, ship, and deliver your order
Payment processors — to accept online payments and process refunds
SMS / WhatsApp providers — to send order-related messages, when we have those channels configured
Cloud hosting and error-monitoring providers — to keep the site running and secure
Analytics providers (see section 4a below) — only after you grant Analytics consent
Government authorities and law-enforcement bodies — when required by law or valid legal process

We do not sell your personal information. We do not permit our vendors to use your data for their own marketing.

4a. Analytics tools we use

If you choose to allow Analytics, we use Google Analytics and PostHog to help us understand how our store is used and improve your shopping experience.

These tools help us understand things such as which pages are visited, how customers use our store and search, and where we can improve the website. We may also use heatmaps and session replay to understand how visitors interact with different parts of the store.

We take steps to protect your privacy when using these tools. Information entered into forms and selected areas containing personal information are masked from session replay. Analytics is used only when you allow it through your Privacy preferences.

Our analytics service providers may process information outside India. You can decline Analytics when first visiting our store or change your choice at any time through Privacy preferences.

4b. Advertising measurement tools we use

When you grant Marketing permission, we transmit a small set of information about your successful order to Meta Platforms, which operates Facebook and Instagram, so we can measure how our advertising on those platforms performs. We use two complementary mechanisms:

1. The Meta browser pixel — a small piece of code from Meta loaded in your browser. The pixel records certain actions on our store — such as viewing a product, adding items to your cart, starting checkout, and completing an order — and transmits a bounded set of event information to Meta directly from your browser.

2. The Meta Conversions API — a complementary mechanism in which, after your order is successfully placed, our server sends an equivalent bounded set of event information to Meta directly from our server. Both mechanisms share the same event identifier so Meta reports a single order, not two.

What we send to Meta.The event name (such as “Purchase”), the time of the event, the storefront URL at which the event occurred, your order identifier, your order total in INR, your currency, and the payment method category (prepaid / cash-on-delivery / wallet). When available, the IP address associated with your request and your browser's user-agent information are also transmitted by the server-side Conversions API — only when Marketing permission is granted at the moment of transmission, only for the single transmission itself, and we do not store or log them.

What we do NOT send. We do not transmit your name, phone number, email address, mailing address, pincode, or any other direct personal identifier to Meta through either mechanism in this phase. We do not transmit pseudonymous customer identifiers.

Consent is required for both. Both the pixel and the Conversions API operate only when you have granted Marketing permission. If you decline, both mechanisms stay off. If you withdraw Marketing permission, subsequent orders do not transmit event information. A very narrow window may exist in which a Conversions API transmission already in progress at the moment you withdraw permission completes; subsequent orders are not affected.

Meta processes information outside India in accordance with its own data policy. You can change your Marketing preference at any time via the Preferences panel on this site.

5. How long we keep it

We keep order and invoice records for the periods required by tax, GST, and accounting law. Cart data and other operational records are retained only for as long as needed to serve you and are then either deleted or anonymised in line with our internal retention practice.

Analytics data has separate, shorter retention windows. PostHog session recordings are retained for up to 30 days, and Google Analytics event data for up to 14 months. These periods apply only to analytics data — they do not apply to your order or invoice records, which follow the tax/GST periods above.

6. Your rights

You may ask us to access, correct, or delete your personal information, or to update your communication preferences. Where a legal or accounting obligation requires us to retain certain records (for example, tax invoices), we will explain the limits of what can be deleted. To make a request, contact us using the details in section 8 below.

7. Security

We take reasonable technical and organisational measures to protect your personal information — including encryption in transit, access controls, and monitoring. No system is completely secure; please tell us immediately if you believe your account has been compromised.

8. Contact & grievances

Questions about this policy, requests about your personal information, and grievances about our handling of your data can be sent to us:

Email: support@sprstr.in
Phone: +91 78900 90030
Postal address:
161/29 KB, Mayapuri Industrial Area Phase II, New Delhi – 110064, India

If you have raised a grievance and are not satisfied with our response, you may write to us again at support@sprstr.in or call +91 78900 90030. We aim to acknowledge grievances promptly and to work with you toward a resolution.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected on this page with a revised date; please review it periodically.

Last updated: September 2026