Privacy Policy

Last updated 27 October 2026

Last updated: 2026-11-07

This Privacy Policy explains how BRENSTA collects, uses and protects the personal information you share with us when you shop on our website.

1. Who we are

BRENSTA is a women's fashion and lifestyle brand operated by Jayshree Shrikrishna Katkade (Sole Proprietor, trading as BRENSTA) (hereafter "we", "us", "BRENSTA"), with registered business address: Gat No. 286, Pruthvihome, Moshi Alandi Road, Near Swami Samarth Mandir, Moshi, Pimpri Chinchwad, Pune, Maharashtra — 412105, India. You can reach us at brensta.business@gmail.com or +91 93097 01804.

2. What we collect

When you shop with us we collect:

  • Account information you provide (name, email, mobile).
  • Shipping and billing addresses.
  • Order and payment metadata (your card / UPI details are handled by our payment partner, not stored by us).
  • Technical information needed to run the site (cookies required for sign-in and cart).

3. How we use your data

  • To process, pack and deliver your orders.
  • To send order updates, delivery notifications and support messages.
  • To respond to your questions and resolve complaints.
  • To improve our storefront and detect fraud.

4. Who we share it with

  • Shipping and payment partners we work with — only the minimum data they need to complete your order.
  • Government or regulatory authorities when required by law.

We do not sell your data to anyone.

5. How long we keep it

We retain order and billing data for the period required by Indian tax law (typically 8 years). Account data is retained for as long as your account is active; you may ask us to delete it at any time.

6. Your rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccuracies.
  • Request erasure (subject to tax-law retention above).
  • Withdraw consent for marketing communication.

Write to brensta.business@gmail.com with your request. We will respond within 30 days.

7. Security

We use industry-standard HTTPS encryption in transit and bcrypt-hashed passwords at rest. Payment information is handled by our PCI-compliant payment partner and never touches our servers. If we ever detect a breach that affects you, we will notify you promptly.

8. Cookies

See our Cookie Notice.

9. Grievance Officer

Any complaint about this policy or your personal data should be addressed to our Grievance Officer — details on the Contact & Grievance Redressal page.

10. Changes

We will post updates on this page with a new "Last updated" date. Material changes will also be announced via email to registered customers.