Last updated: 10 September 2026

This Privacy Policy explains how HALFSKULL APPARELS LLP (“Halfskull”, “we”, “us” or “our”) collects, uses, shares, stores and protects your personal data when you visit https://halfskull.com (the “Website”), create an account or buy from us. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the rules made under them. For the purposes of the DPDP Act, HALFSKULL APPARELS LLP is the Data Fiduciary for the personal data described in this policy.

By using the Website or providing your personal data, you consent to its processing as described here. You can withdraw your consent at any time (see “Your Rights” below).

1. Who We Are

HALFSKULL APPARELS LLP (brand: Half Skull / Halfskull), a Limited Liability Partnership registered in India
Address: 14, Sarada Pally (Street No. 4, Ward No. 10), Tarakeswar, Hooghly, West Bengal – 712410, India
Phone: +91 8972723644
Email: ha******************@***il.com

2. Personal Data We Collect

Information you give us

• Contact details: name, email address and phone number.
• Addresses: billing and delivery addresses, including pin code.
• Account details: login email/username and password (stored in securely hashed form).
• Communications: messages you send us through the contact form, email or phone, and reviews you post.
• Refund details: for Cash on Delivery refunds, the bank account or UPI details you choose to share with us.

Order and payment information

• Products purchased, order value, order history, payment method (prepaid or Cash on Delivery) and order status.
• Transaction references and payment status received from Cashfree Payments. We do not receive or store your full card number, CVV, UPI PIN or net banking password.
• Delivery and tracking status received from Delhivery, including COD collection and undelivered or returned shipments.

Information collected automatically

• Device and usage data: IP address, browser and device type, operating system, pages viewed, time spent on pages, referring website, and approximate location derived from your IP address.
• Cookies and similar technologies: see section 7.

3. How We Use Your Personal Data

• To process, pack, ship and deliver your orders, and to handle cancellations, returns, exchanges and refunds.
• To process online payments through Cashfree Payments and to offer Cash on Delivery.
• To send order confirmations, shipping and tracking updates and other service messages by email, SMS or phone.
• To create and manage your account and respond to your questions, complaints and requests.
• To prevent fraud, misuse and repeated refusal of COD parcels, and to keep the Website secure.
• To understand how the Website is used and to improve our products, content and shopping experience.
• To send offers and marketing messages where you have agreed to receive them. You can opt out at any time using the unsubscribe link or by contacting us.
• To measure our advertising and show relevant ads on other platforms (such as Google and Meta) using cookies and pixels.
• To comply with legal, tax, accounting and regulatory obligations, and to establish or defend legal claims.

4. Consent and Legitimate Uses

We process your personal data on the basis of your consent, or for legitimate uses permitted under the DPDP Act, such as when you voluntarily provide your data for a specific purpose (for example, placing an order) or when processing is required to comply with law. Where processing is based on consent, you may withdraw it at any time by emailing us. Withdrawal does not affect processing already carried out, but we may be unable to complete orders or provide some services without the necessary data.

5. Who We Share Your Data With

We do not sell your personal data. We share it only as needed with:

• Cashfree Payments – to process online payments and refunds.
• Delhivery – our delivery partner, which receives your name, delivery address, phone number and order/COD details to deliver your order and handle returns.
• Email and SMS service providers – to send order, shipping and account messages.
• Website hosting, IT and software providers – who host and maintain the Website and our store systems.
• Analytics and advertising partners – such as Google (Google Analytics, including through Google Site Kit) and Meta (Meta Pixel), which collect device, cookie and usage data to help us measure performance and show relevant ads.
• Professional advisers – such as accountants, auditors and lawyers, where necessary.
• Government authorities, courts and law enforcement agencies – when required by law or to protect our rights, customers or the public.
• A buyer or successor – if our business is reorganised, merged or sold, subject to this policy.

These parties may use your data only for the purpose for which it is shared, and our service providers are required to keep it secure.

6. Payment Security

Online payments are handled directly by Cashfree Payments on its secure systems. Your card details, UPI PIN and net banking credentials are entered with the payment gateway and are never stored by us.

7. Cookies and Tracking Technologies

Cookies are small files stored on your device. We use:

• Essential cookies – to keep items in your cart, keep you logged in and complete checkout.
• Analytics cookies – to understand how visitors use the Website (for example, Google Analytics).
• Advertising cookies and pixels – to measure ad performance and show relevant ads (for example, Google and Meta).

You can block or delete cookies in your browser settings. Blocking essential cookies may stop the cart and checkout from working. You can also manage ad preferences in your Google and Meta account settings.

8. Data Retention

We keep personal data only for as long as needed for the purposes in this policy. Order, invoice and payment records are kept for the period required under applicable tax, accounting and other laws. Account data is kept until you delete your account or ask us to erase it, and marketing data until you opt out. After that, we delete or anonymise the data, unless we must retain it by law or to resolve a dispute.

9. Data Security

We use reasonable security practices and procedures, including encrypted (HTTPS/SSL) connections, access controls and trusted service providers, to protect your personal data against unauthorised access, alteration, disclosure or loss. No method of transmission over the internet is completely secure. If a personal data breach occurs, we will inform affected users and the relevant authorities as required by law.

10. Your Rights

Under the DPDP Act and applicable law, you have the right to:

• Access – obtain a summary of the personal data we process about you and the parties we have shared it with;
• Correction and updating – ask us to correct inaccurate or misleading data, complete incomplete data, or update it;
• Erasure – ask us to delete personal data that is no longer needed, unless we must keep it by law;
• Withdraw consent – at any time, for processing based on consent (including marketing);
• Grievance redressal – raise a complaint with our Grievance Officer and receive a response; and
• Nomination – nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, email ha******************@***il.com from your registered email address with the subject “Privacy Request”. We may need to verify your identity before acting on your request. You can also update most account details yourself in My Account. If you are not satisfied with how we handle your grievance, you may approach the Data Protection Board of India.

11. Children’s Personal Data

The Website is not directed at children. Under the DPDP Act, a child is anyone under 18 years of age. Persons under 18 should use the Website only with a parent or legal guardian, who should place orders on their behalf. We do not knowingly process children’s personal data without verifiable parental consent, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has shared personal data with us, please contact us and we will delete it.

12. Where Your Data Is Stored

Your data is stored on the systems of our hosting and service providers, which may be located in India or in other countries. Any transfer of personal data outside India will be made in compliance with applicable Indian law.

13. Third-Party Links

The Website may contain links to third-party websites or services, such as our social media pages. Their privacy practices are governed by their own policies, and we are not responsible for them.

14. Grievance Officer

For any complaint or concern about the processing of your personal data or this Privacy Policy, please contact:

Ratish Karmakar
Grievance Officer, HALFSKULL APPARELS LLP
Address: 14, Sarada Pally (Street No. 4, Ward No. 10), Tarakeswar, Hooghly, West Bengal – 712410, India
Phone: +91 8972723644
Email: ha******************@***il.com

We will acknowledge your complaint within 48 hours and resolve it within one month from the date of receipt.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or in how we operate. The updated version will be posted on this page with a new “Last updated” date. Where required by law, we will notify you of significant changes.

16. Contact Us

HALFSKULL APPARELS LLP
14, Sarada Pally (Street No. 4, Ward No. 10), Tarakeswar, Hooghly, West Bengal – 712410, India
Phone: +91 8972723644
Email: ha******************@***il.com
Customer support: Monday to Saturday, 10 AM – 8 PM IST