Effective Date: February 25, 2026
Last Updated: April 27, 2026
IMPORTANT LEGAL NOTICE
This Privacy Policy (“Policy”) governs the collection, processing, storage, usage, disclosure, transfer, retention, protection, and handling of personal data and associated information by TFCP Infotainment Private Limited in relation to:
- access to and use of the Platform;
- rentals;
- purchases;
- marketplace transactions;
- seller onboarding;
- warehousing services;
- managed inventory services;
- logistics services;
- enterprise services;
- and associated digital systems.
This Policy is intended to comply with:
- the Digital Personal Data Protection Act, 2023 (“DPDP Act”);
- the Information Technology Act, 2000;
- the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
- and other applicable laws of India.
By accessing or using the Platform, the User expressly acknowledges and consents to the practices described herein.
1. COMPANY DETAILS
This Platform is owned and operated by:
TFCP INFOTAINMENT PRIVATE LIMITED
Registered Office:
Opp. Piccadilly 4, Royal Palms Estate
Aarey Milk Colony, Goregaon
Mumbai – 400065, Maharashtra, India
CIN: U59111MH2023PTC401543
GSTIN: 27AAKCT0771A1ZJ
Email: privacy@costumepeti.com
This Policy applies to:
- CostumePeti
- Vault.rent
- Vault.Fashion
- Vault.Wedding
- Vault.Luxury
- Seller.CostumePeti.com
- affiliated domains,
- associated applications,
- warehouse systems,
- operational systems,
- and associated digital infrastructure.
2. DEFINITIONS
2.1 “Applicable Law”
shall include all applicable laws relating to:
- privacy,
- data protection,
- cybersecurity,
- electronic records,
- and information technology.
2.2 “Personal Data”
shall mean any data relating to an identified or identifiable natural person including:
- names;
- phone numbers;
- email addresses;
- billing information;
- addresses;
- government identifiers;
- photographs;
- IP addresses;
- device identifiers;
- metadata;
- payment information;
- and associated identifiers.
2.3 “Processing”
shall include:
- collection;
- recording;
- organization;
- storage;
- adaptation;
- retrieval;
- disclosure;
- transfer;
- usage;
- analysis;
- deletion;
- and destruction.
2.4 “Platform”
shall collectively include:
- websites;
- mobile applications;
- software systems;
- APIs;
- warehouse systems;
- QR systems;
- dashboards;
- AI systems;
- operational systems;
- and associated infrastructure operated by the Company.
3. CATEGORIES OF DATA COLLECTED
The Company may collect and process the following categories of information:
3.1 Identity Information
Including:
- full name;
- date of birth;
- gender;
- photographs;
- business name;
- GST details;
- PAN details;
- KYC documentation;
- enterprise credentials.
3.2 Contact Information
Including:
- phone numbers;
- email addresses;
- billing addresses;
- shipping addresses;
- communication records.
3.3 Transactional Information
Including:
- rentals;
- purchases;
- seller transactions;
- payment records;
- logistics records;
- return records;
- deposits;
- warehouse activity;
- operational interactions.
3.4 Technical Information
Including:
- IP addresses;
- browser details;
- device identifiers;
- operating systems;
- geolocation data;
- cookies;
- metadata;
- analytics information;
- log files;
- usage behavior.
3.5 Seller & Enterprise Information
Including:
- inventory records;
- warehousing records;
- storage mappings;
- QR data;
- logistics metadata;
- business documents;
- operational logs;
- audit trails.
3.6 Visual & Operational Data
Including:
- photographs;
- CCTV footage;
- warehouse footage;
- dispatch imagery;
- intake imagery;
- quality control imagery;
- metadata;
- timestamps;
- operational evidence.
4. PURPOSES OF PROCESSING
The Company may process Personal Data for:
- account creation;
- rental transactions;
- purchases;
- logistics management;
- warehousing operations;
- customer support;
- seller onboarding;
- KYC verification;
- fraud prevention;
- payment processing;
- operational analytics;
- AI-assisted operations;
- QR tracking;
- legal compliance;
- dispute resolution;
- evidence preservation;
- marketing communications;
- and associated operational purposes.
5. LEGAL BASIS FOR PROCESSING
Processing may occur:
- pursuant to User consent;
- for performance of contracts;
- for compliance with legal obligations;
- for legitimate operational interests;
- for fraud prevention;
- for dispute resolution;
- for protection of legal rights.
6. USER CONSENT
By using the Platform, the User expressly:
- consents to collection and processing;
- consents to electronic communications;
- consents to operational monitoring;
- consents to analytics and platform improvement activities;
- consents to lawful disclosures under Applicable Law.
Users may withdraw consent subject to:
- legal obligations;
- operational requirements;
- pending transactions;
- and legitimate retention obligations.
7. COOKIES & TRACKING TECHNOLOGIES
The Platform may utilize:
- cookies;
- analytics tools;
- tracking pixels;
- device identifiers;
- session technologies;
- operational tracking systems.
Such technologies may be used for:
- authentication;
- performance optimization;
- fraud prevention;
- operational analytics;
- personalization;
- marketing;
- and security purposes.
Users may manage cookies through browser settings, though certain functionalities may be affected.
8. AI, AUTOMATION & ANALYTICS
The Platform may utilize:
- AI systems;
- automated categorization;
- recommendation systems;
- operational analytics;
- fraud monitoring systems;
- inventory intelligence systems;
- and automated workflows.
The Company does not guarantee:
- algorithmic accuracy;
- uninterrupted AI performance;
- or absence of automated decision limitations.
9. PAYMENT PROCESSING
Payments may be processed through third-party payment processors.
The Company may not directly store:
- full card information;
- payment instrument credentials;
subject to operational integrations and Applicable Law.
Users acknowledge that payment processing may be governed by third-party terms and policies.
10. DISCLOSURE OF DATA
The Company may disclose Personal Data:
- to logistics providers;
- warehousing operators;
- technology providers;
- payment processors;
- analytics providers;
- operational partners;
- insurers;
- legal advisors;
- auditors;
- law enforcement agencies;
- governmental authorities;
- courts;
- regulators;
where reasonably necessary.
11. CROSS-BORDER TRANSFERS
Personal Data may be processed or stored:
- on cloud infrastructure;
- by international service providers;
- through globally distributed systems;
subject to Applicable Law and reasonable safeguards.
12. DATA RETENTION
The Company may retain Personal Data:
- for operational purposes;
- legal compliance;
- fraud prevention;
- accounting requirements;
- dispute resolution;
- evidentiary preservation;
- enterprise recordkeeping;
- warehouse audit trails;
- and legitimate business purposes.
Retention periods may vary depending upon:
- transaction type;
- operational necessity;
- legal obligations;
- risk management considerations.
13. DATA SECURITY
The Company implements commercially reasonable technical and organizational safeguards including:
- access controls;
- encryption measures;
- authentication systems;
- monitoring systems;
- audit trails;
- operational security protocols;
- network protections;
- and restricted access systems.
However, no system can guarantee absolute security.
The User acknowledges inherent cybersecurity risks associated with digital systems and internet communications.
14. CCTV, WAREHOUSE & OPERATIONAL MONITORING
Warehouses, operational zones, dispatch areas, intake areas, and associated facilities may utilize:
- CCTV systems;
- digital monitoring systems;
- QR tracking systems;
- metadata logging;
- operational scanning systems.
Such records may be utilized for:
- security;
- inventory protection;
- operational monitoring;
- fraud prevention;
- dispute resolution;
- evidentiary purposes.
15. DIGITAL EVIDENCE & ELECTRONIC RECORDS
The User expressly acknowledges that:
- QR logs;
- metadata;
- warehouse scans;
- timestamps;
- dispatch records;
- CCTV footage;
- operational logs;
- and digital audit trails
may constitute legally admissible electronic evidence under Applicable Law.
16. USER RIGHTS
Subject to Applicable Law, Users may:
- request access to Personal Data;
- request correction;
- request updates;
- request withdrawal of consent;
- request deletion where legally permissible;
- request grievance redressal.
Certain requests may be restricted due to:
- legal obligations;
- operational requirements;
- fraud prevention;
- evidentiary preservation;
- contractual obligations.
17. CHILDREN’S DATA
The Platform is not intended for minors lacking lawful contractual capacity.
Users representing minors warrant lawful authorization and supervision.
18. THIRD-PARTY SERVICES
The Platform may integrate third-party services including:
- payment gateways;
- logistics providers;
- analytics systems;
- cloud infrastructure;
- communication tools;
- AI systems.
The Company shall not be responsible for independent third-party privacy practices.
19. MARKETING COMMUNICATIONS
Users may receive:
- operational communications;
- transactional notifications;
- promotional communications;
- newsletters;
- updates;
- marketing campaigns.
Users may opt out of non-essential marketing communications subject to operational requirements.
20. FRAUD PREVENTION & INVESTIGATIONS
The Company reserves rights to:
- monitor transactions;
- investigate suspicious activity;
- preserve records;
- cooperate with authorities;
- disclose information where legally required;
- suspend accounts;
- prevent fraud and abuse.
21. LIMITATION OF LIABILITY
To the fullest extent permissible under Applicable Law, the Company shall not be liable for:
- unauthorized access;
- cyberattacks;
- system failures;
- force majeure events;
- third-party breaches;
- internet failures;
- data interception;
- operational disruptions;
- or indirect damages.
Users acknowledge inherent risks associated with digital systems.
22. POLICY MODIFICATIONS
The Company reserves rights to:
- modify this Policy;
- revise operational practices;
- update compliance measures;
- alter data processing practices;
at any time.
Continued usage constitutes acceptance of revised terms.
23. GOVERNING LAW & JURISDICTION
This Policy shall be governed by the laws of India.
Courts situated at Mumbai shall possess exclusive jurisdiction.
24. GRIEVANCE OFFICER / DATA PROTECTION CONTACT
Privacy & Data Protection Officer
TFCP INFOTAINMENT PRIVATE LIMITED
Email: privacy@costumepeti.com
Registered Office:
Opp. Piccadilly 4, Royal Palms Estate
Aarey Milk Colony, Goregaon
Mumbai – 400065, Maharashtra, India
