Privacy Policy

Gillou World | Effective Date: 15 September 2026

This Privacy Policy explains how KAORI STUDIO (OPC) PRIVATE LIMITED, operating the brand Gillou World (“Gillou”, “we”, “us”, “our”), collects, uses, shares and protects your personal data when you visit https://gillou.in (the “Website”), place an order, or contact us.

We follow applicable Indian law, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Consumer Protection (E-Commerce) Rules, 2020, and the Digital Personal Data Protection Act, 2023 and its Rules, as they apply to us.

By using the Website, you agree to this Privacy Policy. If you do not agree, please do not use the Website.

1. Who We Are

Legal name	KAORI STUDIO (OPC) PRIVATE LIMITED
Brand	Gillou World
Registered address	Kaori, SD-120, Sector 45, Noida, Uttar Pradesh – 201303, India
GSTIN	09AAKCK3389B1ZC
Email	gillouworld@gmail.com
Phone / WhatsApp	+91 92890 38890
Support hours	Monday to Saturday, 10:00 AM – 7:00 PM IST (Sunday closed)

2. Information We Collect

2.1 Information you give us

• Contact details: name, email address, mobile number.
• Order details: billing and shipping address, PIN code, products purchased, sizes, and order notes.
• Account details: login email and password (stored in encrypted form) if you create an account.
• Child-related details (optional): your child’s age, size or measurements, only if you share them to help us suggest the right fit. We do not ask for a child’s name, photo or date of birth.
• Communication: messages you send us by email, WhatsApp, phone, social media or the contact form, including photos or videos you share for return or damage claims.
• Reviews and content: product reviews, ratings and photos you choose to post.

2.2 Information we collect automatically

• Device and browser type, IP address, approximate location, pages viewed, time spent, and referring website.
• Cookies, pixels and similar technologies (see Section 7).

2.3 Payment information

Payments are processed by secure, RBI-authorised third-party payment gateways. We do not collect or store your full card number, CVV, UPI PIN or net banking password. We only receive limited details such as the transaction ID, payment status and payment method.

3. How We Use Your Information

We use your personal data only for clear purposes:

1. 1.To process and deliver orders – confirm orders, arrange shipping, send tracking updates, and handle Cash on Delivery (COD) verification.
2. 2.To provide customer support – respond to questions, and handle returns, exchanges, refunds and complaints.
3. 3.To manage your account – login, order history, saved addresses and wishlist.
4. 4.To send updates – order and delivery messages by SMS, email or WhatsApp.
5. 5.For marketing (with your consent) – new collections, festive launches, offers and discount codes. You can opt out at any time.
6. 6.To improve our Website and products – understand shopping behaviour, fix issues and improve sizing guidance.
7. 7.To prevent fraud – detect fake orders, payment fraud, and misuse of offers or COD.
8. 8.To meet legal duties – GST invoicing, tax records, accounting and responding to lawful requests from authorities.

4. Legal Basis and Consent

We process your personal data based on:

• Your consent, which you give when you place an order, create an account, subscribe or contact us; and
• Legitimate uses allowed by law, such as completing a purchase you requested or meeting a legal requirement.

You may withdraw your consent at any time by writing to gillouworld@gmail.com. Withdrawing consent will not affect processing already done, but we may be unable to complete orders or provide some services afterwards.

5. Children’s Privacy

Gillou World sells clothing for children, but our Website is meant for use by parents, guardians and adults aged 18 years or above.

• We do not knowingly collect personal data directly from children under 18.
• We do not track children, show them targeted ads, or build behavioural profiles of children.
• If you believe a child has shared personal data with us, please write to gillouworld@gmail.com and we will delete it promptly.

6. Who We Share Your Information With

We do not sell or rent your personal data. We share it only as needed with:

Recipient	Purpose
Courier and logistics partners	Pickup, delivery, returns and reverse pickups
Payment gateways and banks	Processing payments and refunds
E-commerce platform (Shopify) and IT/hosting providers	Running the Website and storing order data
SMS, email and WhatsApp service providers	Sending order updates and (if you agree) offers
Analytics and advertising partners (e.g.Google, Meta)	Measuring Website performance and showing relevant ads
Government and legal authorities	When required by law, court order or to prevent fraud
A buyer or successor business	In the event of a merger, sale or restructuring

All partners are expected to protect your data and use it only for the purpose it was shared.

Some service providers may store data on servers outside India. Where this happens, we take reasonable steps to make sure your data is protected and the transfer is allowed under Indian law.

7. Cookies and Tracking

We use cookies to:

• keep items in your cart and keep you logged in;
• remember your preferences;
• understand how visitors use the Website (analytics); and
• show you relevant Gillou ads on other websites and social media (marketing).

You can block or delete cookies in your browser settings. Some features, such as the shopping cart, may not work properly without cookies.

8. How Long We Keep Your Data

• Order and invoice records: as long as required under tax and accounting laws (generally up to 8 years).
• Account data: until you delete your account or ask us to delete it.
• Marketing data: until you unsubscribe or withdraw consent.
• Support messages and claim photos: up to 2 years after the issue is resolved.

After this period, we delete or anonymise the data, unless the law requires us to keep it longer.

9. How We Protect Your Data

We use reasonable security practices, including SSL (HTTPS) encryption, secure payment gateways, password-protected systems and limited staff access. No online system is 100% secure, but we work to protect your information.

If a personal data breach occurs that affects you, we will inform you and the relevant authorities as required by law.

10. Your Rights

Subject to applicable law, you have the right to:

1. Access – know what personal data we hold about you and how it is used.
2. Correction and update – correct inaccurate or incomplete data.
3. Erasure – ask us to delete your data, unless we must keep it by law.
4. Withdraw consent – including for marketing messages.
5. Grievance redressal – raise a complaint with our Grievance Officer.
6. Nominate – nominate another person to exercise your rights in case of death or incapacity.

To unsubscribe from marketing: click “Unsubscribe” in our emails, reply “STOP” to SMS/WhatsApp messages, or write to us.

To make any request, email gillouworld@gmail.com with the subject line “Privacy Request”. We may ask you to verify your identity before acting on the request.

11. Grievance Officer

In line with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023:

Name	Sweta Dwivedi
Designation	Grievance Officer
Company	KAORI STUDIO (OPC) PRIVATE LIMITED
Address	Kaori, SD-120, Sector 45, Noida, Uttar Pradesh – 201303, India
Email	gillouworld@gmail.com
Phone	+91 92890 38890
Hours	Monday to Saturday, 10:00 AM – 7:00 PM IST

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days of receipt.

If you are not satisfied with our response, you may approach the Data Protection Board of India or other authorities as permitted by law.

12. Third-Party Links

Our Website may link to other websites (for example, Instagram, Facebook, YouTube, or payment pages). We are not responsible for their privacy practices. Please read their policies separately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Continued use of the Website after changes means you accept the updated policy.

14. Contact Us

Click Here