1. Introduction
Eleven Carpets (“we,” “us,” “our”) is committed to safeguarding the privacy and security of all individuals who visit, browse, or make purchases on our website, www.elevencarpets.com. This Privacy Policy outlines the types of personal data we collect, the purposes for which we use it, and your rights as a user of our services. By accessing our site or providing personal information, you consent to the practices described in this policy. Our intent is to be fully transparent about our data handling practices, and to ensure compliance with applicable data protection laws, including regulations in India and international standards. Whether you're simply browsing or creating an account to make a purchase, this policy explains what information we collect and how it is managed. We encourage you to review it carefully and reach out to us if anything is unclear or concerning to you.
2. Personal Data You Provide to Us
When you create an account, place an order, sign up for newsletters, submit a review, or contact customer service, we collect personally identifiable information such as your full name, email address, telephone number, postal addresses, and payment information. This data is required to provide you with seamless service—everything from processing orders to answering your inquiries. Additionally, if you post reviews or feedback, we store the content and metadata associated with those submissions. Your data helps us fulfill contractual obligations, customize your shopping experience, process transactions, and respond effectively to your communications. We take care to collect only the information necessary for these purposes while ensuring confidentiality and secure handling throughout its lifecycle.
International Data Transfers
As an Indian business serving international customers, we may transfer and store your personal data outside of your country of residence, including in the United States, Europe, or other countries where our partners operate. When we do so, we ensure that these transfers are conducted lawfully and with appropriate safeguards. For users in the European Union, we follow GDPR-compliant mechanisms such as Standard Contractual Clauses or rely on data adequacy decisions where applicable. For Indian users, cross-border data flows will be managed in line with rules prescribed under the DPDPA, 2023 once they are fully implemented. We only transfer data to third parties that maintain equivalent levels of data protection. These measures ensure that your personal data remains protected and is treated in accordance with this Privacy Policy and relevant legal requirements, regardless of where it is processed or stored.

3. Data Collected Automatically
While you browse our website, we automatically collect certain technical data: IP address, browser type and version, operating system, device identifiers, and usage patterns such as pages visited, time spent, and navigation paths. We use cookies, log files, and third-party analytics tools—like Google Analytics and Facebook Pixel—to gather and store this information. These tools help us understand user behavior, optimize page load times, identify potential issues, and tailor our site to your preferences. If you have consented, cookies also support personalized marketing efforts. Most browsers allow you to block or delete cookies, although disabling them may affect site functionality. We collect this data to enhance usability, make data-driven improvements, and ensure the security and reliability of our platform.
4. Use of Third-Party Login and Social Data
If you choose to sign in via third-party services—such as Facebook, Google, or other platforms—we may receive certain profile information from those providers, depending on your consent settings. Typically, this includes your name, email address, avatar, and any other public information you’ve allowed us to access. We use this data to simplify login, streamline your account setup, and personalize content. However, we do not store any sensitive credentials like passwords. Any data obtained this way is handled in accordance with this Privacy Policy. You can revoke the permissions at any time through your social account settings, which will limit future data sharing with us.
5. How We Use Your Information
We use personal data to facilitate order processing, manage fulfillment and shipping, address customer support requests, and improve the shopping experience. This includes sending you order confirmations, shipment updates, receipts, and account-related messages. With your prior consent, we may also send newsletters, promotional offers, event invitations, or new product announcements. We analyze aggregated data to study customer trends and site performance, helping us make informed business decisions. Additionally, we may use data to identify and prevent fraud, enforce legal terms, and comply with regulations. All data usage is restricted to the purpose for which it was collected and carried out in compliance with legal and ethical standards.
6. Sharing Through Service Providers
To provide services, we collaborate with trusted third-party providers including payment processors (e.g., Razorpay, Stripe, PayPal), logistics companies, cloud hosting platforms, email marketing tools, and data analytics services. These partners are granted access to only the data necessary to fulfill the service they provide, and are contractually bound to maintain confidentiality and high security standards. They are prohibited from using your data for unrelated purposes. We vet all service providers carefully and monitor their compliance. Should any of these partnerships change, we will ensure your data remains protected per your expectations.
7. Data Transfers and Protection Measures
Because we operate through a global infrastructure, your personal data may be stored or processed in different countries by our service providers. We only initiate such transfers when they are necessary to deliver services. In these cases, we enforce suitable safeguards like encryption, secure contractual terms, and compliance with recognized data protection frameworks. Our goal is to ensure your personal information receives protection no less than that afforded in your home region, regardless of where it is processed, and to adhere to evolving standards for secure cross-border data handling.
8. Data Retention Policies
We retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, including completing transactions, delivering products, offering support, and complying with legal and financial record-keeping requirements. Generally, order and account data may be retained for up to four years, or longer if required by law. When data is no longer necessary, it will be securely deleted or anonymized. Analytics and aggregated data may be retained indefinitely for internal analysis, but cannot be used to identify individuals. If you request deletion of your data, we will honor the request in accordance with applicable laws and retain essential records that we are required to keep.
9. Security and Encryption
We prioritize the security of your personal information through multiple layers of protection. Data in transit is encrypted using SSL/TLS, and our servers are hosted in secure environments with firewalls and intrusion detection systems. Access to personal data is restricted to authorized personnel and undergoes routine audits, monitoring, and staff training. We use industry-standard practices including strong password protocols and secure coding practices. Sensitive data like payment information is handled exclusively by certified processors and is never stored on our systems. While we implement extensive safeguards, the nature of online operations means no method is infallible. In the event of a security incident, we will promptly act to mitigate impacts and notify affected individuals according to legal requirements.
10. Rights of Data Subjects
You have rights regarding your personal data. These include the right to access the data we hold about you, request corrections to inaccurate information, and request deletion, subject to certain legal exceptions. Where processing is based on consent (e.g., marketing communications or cookies), you may withdraw that consent at any time without affecting other legal bases for processing. In some regions, you may also have additional rights like portability, restriction, or objection. Contact us at privacy@elevencarpets.com to make a request. We will verify your identity before acting and respond within the timeframe prescribed by applicable data protection regulations. We aim to handle requests transparently and with respect for your privacy preferences.
12. Children’s Data Protection
Our services are not intended for individuals under the age of 13 (or higher if defined by applicable laws in your region). We do not knowingly collect information from minors without verifiable parental or guardian consent. If we receive information from a child, we remove it as soon as we become aware. Parents or guardians who suspect their child may have submitted information can contact us at privacy@elevencarpets.com. We will cooperate fully to delete any personal data collected from a minor. Protecting children's privacy is a priority, and our practices comply with relevant regulations including those governing online data collection from minors.
13. Policy Updates and Notification
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or new features on our website. When substantive changes occur, we’ll post a notice or banner on our site, and may send you an email if you’ve subscribed or made a purchase recently. We encourage you to check the “Last Updated” date below before using our services. Continued use of our website after updates indicates your acceptance of the new terms. If you do not agree with the revised policy, you can stop using our services and request deletion of your personal data.
14. Legal Disclosures and Law Enforcement
We may disclose personal data if required by law, regulation, or in response to lawful requests from public authorities. This includes responding to subpoenas, court orders, or lawful requests related to claims of unlawful activity. We may also share information to protect our rights, safety, or property, or that of our users. Disclosures to protect against fraud, abuse, or security threats are governed by legal obligations and internal policies. We strive to restrict such disclosures to what is absolutely necessary and will notify you when permissible and appropriate under applicable law.
5. Your Rights and Choices
Depending on your location, you may have certain legal rights regarding your personal information. These may include the right to access the data we hold about you, request corrections or deletions, object to certain processing activities, and withdraw consent where applicable. If you are a resident of the European Union or United Kingdom, you have rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority. California residents may exercise their rights under the CCPA, such as the right to know what personal data we collect and the right to opt-out of the sale of personal information (although we do not sell data). You can manage your privacy preferences through your account settings or by contacting us directly at privacy@elevencarpets.com. We respect your choices and will respond to verified requests within the time frames required by law. Your privacy is a priority, and we aim to make it as easy as possible for you to manage your data.

11. Governing Laws
This Privacy Policy is governed by and shall be construed in accordance with the laws of the Republic of India. By accessing and using the website www.elevencarpets.com, you agree that any legal matters, claims, or disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in India, specifically the courts having jurisdiction over the registered office of Eleven Carpets. We are committed to complying with the applicable laws and regulations of India, including but not limited to the Information Technology Act, 2000 and the applicable rules thereunder, such as the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. In cases involving cross-border data transfers, we will ensure compliance with both Indian laws and relevant international data protection standards. If any provision of this Privacy Policy is deemed unlawful, invalid, or unenforceable under Indian law, it shall not affect the legality and enforceability of the remaining provisions. For any legal concerns or questions regarding this policy, users may reach out to us at privacy@elevencarpets.com.

10. Contact Us
If you have any questions, concerns, or requests related to your privacy or this policy, we welcome you to contact us.

- shop@elevencarpets.com 

- +91 8858894004 

- Eleven Carpets, Daropur Road, Bhadohi, UP - 221401