Legal & encryption protocols • Edition 01
Privacy Policy
Engineered for sovereign patron privacy, 256-bit transactional encryption, and zero third-party data brokerage. How Dustrato Atelier protects customer telemetry and order archives.
Effective
January 2025
Encryption
256-bit SSL / TLS 1.3
Data brokerage
Strict zero-sale policy
Data controller
Dustrato Global Inc. / Chennai Prototype Lab
Data promise
Every garment created at Dustrato is serialized. We treat your personal credentials with the exact same precision and structural integrity as our 340 GSM fleece.
Regulatory conformance: DPDP Act 2023 (India) • GDPR (EU) • RBI Tokenization Framework • ISO/IEC 27001 staged
Information We Collect
Dustrato operates under a principle of radical data parsimony. We collect solely what is physically necessary to engineer, tailor, serialize, and deliver garments directly to your custody.
Direct patron telemetry
Legal recipient name, verified shipping coordinates across India and international customs zones, mobile contact for encrypted courier SMS waybill pings, and email for serialized provenance certificates.
Transactional shielding
Complete 16-digit debit/credit cards and UPI MPINs never traverse or reside within Dustrato servers. Payment execution is fully isolated via RBI-compliant tier-1 gateways (Razorpay, Cashfree, Stripe).
When you interact with the Dustrato storefront, ephemeral diagnostic logs (browser engine, geographic region, display dimensions) are momentarily collected to adapt typography rendering and verify drop concurrency.
Payment Architecture & UPI / COD Protocols
Payment credential safety is governed by end-to-end cryptographic tokenization. At no juncture does Dustrato retain unmasked Card Verification Values (CVV) or bank authentication secrets.
The Partial-COD Protocol (₹99 advance)
To prevent automated bot raids, malicious address hoarding, and unverified Return-to-Origin (RTO) waste, Dustrato requires a non-refundable ₹99 commitment verification token for Cash-on-Delivery orders.
Security scope: this ₹99 transaction creates an encrypted single-use handshake with our payment rail, verifying genuine patron intent without retaining recurring payment permissions or saving account details.
Order Fulfillment & Logistics Partners
Logistics telemetry is strictly cordoned. We do not integrate programmatic marketing trackers with shipping carriers or expose order manifests to commercial aggregators.
| Fulfillment carrier | Data fields provided | Protocol & retention |
|---|---|---|
| BlueDart Express Air | Recipient name, postal address, contact mobile | Air waybill generation; purged post-delivery audit. |
| Delhivery Logistics | Delivery coordinates, contact mobile | Real-time GPS routing, no telemetry retention. |
| India Post (special areas) | Consignee name, pin code, address | Physical slip dispatch; zero digital sync. |
Unboxing Video & Quality Verification
To maintain the integrity of limited-edition drops and curb fraudulent return attempts, Dustrato enforces an authentic 360° unboxing recording requirement for all transit damage or defect claims.
- Dedicated intake: unboxing recordings submitted to support@dustrato.store are transferred straight to isolated, encrypted cold storage.
- Limited custody: access is restricted strictly to the technical quality inspection team at our Chennai prototype lab.
- Absolute 30-day purge: once a replacement is dispatched or the claim reaches final settlement, all submitted video files and attached patron media are permanently destroyed from our server drives within 30 days.
Patron Sovereignty & Data Rights (DPDP & GDPR)
Regardless of jurisdiction, we afford all Dustrato patrons the highest caliber of privacy rights under the Indian Digital Personal Data Protection Act (DPDP 2023) and the European General Data Protection Regulation (GDPR).
Right 01
Right to access
Request a full machine-readable archive of all transactions, delivery slips, and notes bound to your profile.
Right 02
Burn archive record
Right to complete erasure of personal markers once statutory tax and GST audit horizons (6 years) expire.
Right 03
Rectification
Instant updating of contact coordinates and delivery specifics prior to garment dispatch stamp.
Contact Privacy Officer & Grievance Redressal
Under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and DPDP 2023, the designated Grievance Officer for Dustrato Global Inc. is:
Grievance officer
Chief Privacy Archivist
Dustrato Prototype & Design Atelier, IIT Madras Research Park, Taramani, Chennai, Tamil Nadu — 600113, India
Direct inquiries
privacy@dustrato.store
Turnaround SLA: within 48 business hours
Operational hours: Mon – Fri, 10:00 – 18:00 IST
256-bit military SSL encryption
Every checkout submission and contact transmission is scrambled using high-grade TLS 1.3 cryptographic ciphers before hitting network relays.
Strict zero-data commercialization
We never broker, license, or monetize our patron catalog with third-party ad networks, telemarketers, or speculative AI training repositories.
Dedicated privacy officer
Real human oversight at our Chennai lab to audit physical logs, manage token purges, and execute deletion petitions directly.
Sovereign patron action
Initiate an archive modification or erasure
Need to correct a pre-dispatch postal coordinate or initiate a permanent record erasure request? Contact our compliance archivists directly.