Privacy Policy

Datenschutzerklärung · Privacy Policy

Privacy Policy

How IndiaNiva handles your personal data under EU GDPR and German law.

Important notice · Pre-launch version

IndiaNiva is currently in an information-first stage. This Privacy Policy reflects current data collection (waitlist email + IP-anonymised analytics only). A complete, lawyer-reviewed Datenschutzerklärung will be published before the launch of the online shop in July 2027, when additional data (orders, addresses, payment) will be processed.

This text is provided in clear English. A formal German version (Datenschutzerklärung) is being prepared in parallel and will be published before commercial activity begins.

1. Who we are

This website, indianiva.com, is operated by Valentine Pereira, based in Munich, Germany. For data protection matters, you can contact us at info@indianiva.com.

2. What data we collect

2.1 Waitlist signup

When you join our 2027 launch waitlist, we ask for:

— Your name
— Your email address
— Your city (optional)
— Your country (to plan EU rollout)
— Your consent to receive IndiaNiva updates

This data is stored securely within our WordPress site (hosted with Hostinger in the EU) and used solely to send you saree guides, brand updates, and your invitation when the online shop launches in July 2027.

2.2 Server logs

Like all websites, our server automatically records standard technical data: IP address (anonymised), browser type, page visited, referrer, and time of visit. This is used solely for security and basic site analytics.

2.3 Cookies and analytics

We use a cookie consent banner (Complianz) to ask your permission before any non-essential cookies are set. If you accept analytics cookies, we use Google Analytics 4 via MonsterInsights with IP anonymisation enabled to understand how visitors use the site. You can decline this at any time.

To verify before launch

If additional tracking tools are added (Meta Pixel, Pinterest Tag, TikTok Pixel for ads), they must be added to this list and consent must be obtained via the cookie banner before they fire.

3. Legal basis for processing (GDPR Art. 6)

Consent (Art. 6 §1 a): For waitlist signup and optional analytics.
Legitimate interest (Art. 6 §1 f): For server logs needed to operate and secure the website.
Contract (Art. 6 §1 b): Will apply later for order processing once the shop is live.

4. How long we keep your data

Waitlist email signups: kept until you unsubscribe or for a maximum of 3 years from the date you joined, whichever comes first.
Server logs: deleted automatically after 30 days.
Cookie consent records: kept for 12 months, as required for proof of consent.

5. Who we share your data with

We do not sell your data. We share it only with the technical service providers needed to operate the site, all of which are GDPR-compliant:

Hostinger (EU hosting, with a Data Processing Agreement)
Google (Analytics + Fonts — only if you consent to analytics cookies)
WPForms (waitlist form processing, data stored on our server)

To verify with a lawyer

Once you add specific marketing tools (Mailchimp, ConvertKit, etc.) and the shop is live (Stripe, Klarna, PayPal, shipping providers), each one must be listed here with their respective DPA (Data Processing Agreement) references.

6. Your rights under GDPR

You have the right to:

— Request access to the data we hold about you
— Request correction of inaccurate data
— Request deletion of your data (“right to be forgotten”)
— Withdraw consent at any time
— Restrict processing
— Receive a copy of your data in a portable format
— Object to processing
— Lodge a complaint with the Bavarian Data Protection Authority (BayLDA)

To exercise any of these rights, email info@indianiva.com. We respond within 30 days.

7. Data security

Your data is stored on EU servers, transmitted over HTTPS encryption, and protected by industry-standard security measures (Wordfence firewall, regular backups via UpdraftPlus, strong admin passwords with two-factor authentication).

8. International data transfers

Some service providers (e.g. Google) may transfer data outside the EU. In such cases, we rely on EU-approved Standard Contractual Clauses and additional safeguards to ensure your data remains protected under GDPR-equivalent standards.

9. Children’s data

IndiaNiva is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has signed up to our waitlist, please contact us and we will remove the data.

10. Changes to this policy

This Privacy Policy will be updated as IndiaNiva evolves — particularly before the online shop launch in July 2027, when commercial data processing begins. The “Last updated” date below shows when changes were last made.

Verify before launch

This Privacy Policy is a starting structure only. Before the formal launch in July 2027, the complete and final Datenschutzerklärung must be generated using a trusted German legal text generator (e.g. eRecht24.de) and reviewed by a qualified German Anwalt or Datenschutzbeauftragter.

Last updated: May 2026 · Pre-launch information stage