Privacy Policy

Last Updated: 1 October 2026 

1. Introduction

This Privacy Policy explains how Connext Five Three LLP, a limited liability partnership registered in Surat, Gujarat, India, holding GSTIN 24AAUFC4477D1Z9, with its registered address at 1203-1208, 12^th Floor, Vasupriya Rio Empire, Adajan Hajira Road, Near PAL RTO, Adajan, Surat, Gujarat- 395009, trading as CARTER FARRAGO ("CF", "we", "us" or "our"), collects, uses, stores, shares and protects your personal information. For the purposes of the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules (the “DPDP Rules”), we are the Data Fiduciary for the personal data described in this policy. You are the Data Principal.

2. Who and What this Policy Covers

This Privacy Policy applies to personal data of customers and visitors of www.carterfarrago.com (“CF’s website”) and related pages, including people who place orders, create accounts, join waitlists, or mailing lists, contact support, or request warranty or repair services. Where we collect data at a specific moment, including but not limited to signing up for an account; checkouts; filling a form; purchase, return, exchange or requesting service for a CF product; subscribing to our email, SMS, WhatsApp or other communications; contacting our customer-support team; submitting a warranty or repair request; interacting with our marketing campaigns and social media accounts; and otherwise engaging with CF, we show a short notice at that point, which this policy supplements.

3. Personal Data We Collect, Why, and on What Basis

We collect only the data needed for the purposes detailed below:

We do not collect your precise device location, biometric data, or health data through the website. If a feature ever needs it, we will ask you for your consent first.

We use a service provider to analyse browsing and purchase behaviour so that we can understand customers who are likely to purchase and personalise our marketing. You can decline this when we ask for consent, or withdraw permission at any time. We take no decision with legal or similarly significant effects on you based on this analysis.

Data is maintained for the duration mentioned under each line item above, and is deleted either when consent is withdrawn or the purpose is served. We retain it beyond this limit only if a law requires us to keep it. Where we are required to retain it, we restrict the data to that purpose alone. After the retention period, all data is irreversibly anonymized.

4. How We Ask for Consent:

We ask for consent through a clear, affirmative action, in the form of a ticked box or button, never through pre-ticked boxes. We do not assume consent because you used our website.

Every consent is specific to a purpose. We ask for your consent separately for marketing, analytics, and advertising cookies, and profiling.

You can refuse marketing, analytics or advertising consent and still buy from us. If you refuse consent that is needed to complete an order (for example, sharing your address with the courier), we cannot deliver that order. Before or when we ask for consent, we show a notice describing the personal data, the specific purposes, how to withdraw consent, how to exercise your rights, and how to complain to the Data Protection Board of India.

5. Cookies and Similar Technologies:

5.1. Essential cookies operate the site (cart, checkout, login, security, remembering your privacy choices), and are always on. Essential cookies may be required to:

• operate the website;
• maintain security; 
• enable cart and checkout functionality;
• authenticate users;
• prevent fraud;
• remember privacy choices; and
• provide services requested by you.

The website may not function correctly if essential cookies are disabled.

5.2. Functional cookies may be used to remember:

• login preferences;
• language or currency selections;
• previously viewed products;
• saved choices; and
• other website preferences.

5.3. Analytics cookies (such as Microsoft Clarity and Google Analytics) and advertising cookies and pixels (such as Meta) load only after you opt in through our cookie banner.  Analytics and performance technologies may help us understand:

• visitor numbers;
• traffic sources;
• website performance;
• navigation patterns;
• product engagement;
• errors; and
• how visitors interact with our website.

You can change your choice at any time through the cookies setting link  or through your browser settings.

6. How We Use Your Information

We may use your personal information for the following purposes.

6.1. To Operate Our Website

We may use your information to:

• display and maintain the website;
• provide customer accounts;
• remember your preferences;
• maintain cart and checkout functionality;
• authenticate users;
• detect technical problems; 
• improve website performance; and
• maintain the security and reliability of our services.

6.2. To Process and Fulfil Orders

We may use your information to:

• accept and confirm orders;
• verify and process payments;
• issue invoices;
• arrange packaging, shipping and delivery;
• provide order-status updates;
• verify delivery information;
• process cash-on-delivery orders;
• manage unsuccessful delivery attempts;
• manage cancellations;
• process returns, exchanges and refunds; and
• maintain transaction and accounting records.

6.3. To Provide Customer Support

We may use your information to:

• respond to questions and requests;
• verify purchases;
• resolve complaints;
• provide product information;
• administer warranties;
• manage servicing and repairs;
• arrange product pickup and redelivery;
• investigate product or delivery issues; and
• maintain customer-support and service records.

6.4. To Communicate With You

We may contact you by email, telephone, SMS, WhatsApp or another appropriate channel concerning:

• order confirmations;
• payment updates;
• delivery updates;
• return or refund updates;
• account or authentication information;
• warranty and servicing updates;
• security or fraud alerts;
• responses to your requests; and
• other information necessary to provide a product or service requested by you.

These transactional and service-related communications are separate from promotional communications.

6.5. To Send Marketing Communications

Where permitted by applicable law and based on your communication preferences, we may send:

• product announcements;
• collection launches;
• restock notifications;
• waitlist updates;
• invitations;
• promotional offers;
• editorial or brand communications; and
• information about products or services that may interest you.

Where consent is required, we will request it before sending such communications.

You may opt out of promotional communications at any time by using the unsubscribe option included in the communication or by contacting us.

Opting out of marketing communications will not prevent us from sending necessary transactional or service-related communications.

6.6. To Personalise and Improve Our Services

We may use information to:

• understand how visitors use our website;
• remember customer preferences;
• analyse customer journeys;
• understand product interest;
• improve our products and services;
• test website features;
• evaluate website performance;
• measure advertising and campaign performance; and
• provide more relevant content and advertising.

Where required by applicable law, non-essential analytics, personalisation and advertising technologies will be used only after obtaining the appropriate consent.

6.7. To Prevent Fraud and Maintain Security

We may process information to:

• verify identity or transactions;
• detect suspicious activity;
• prevent payment and delivery fraud;
• protect customer accounts;
• prevent unauthorised access;
• investigate security incidents;
• enforce our policies; and
• protect Carter Farrago, our customers and other persons from harm.

6.8. To Comply With Legal Obligations

We may use or retain information to:

• comply with tax, accounting, consumer-protection and other legal obligations;
• respond to lawful requests from courts, regulators or government authorities;
• maintain records required by law;
• investigate possible misconduct;
• resolve disputes;
• enforce our agreements and policies; and
• establish, exercise or defend legal claims.

6.9. Business Transfers

Information may be reviewed, disclosed or transferred in connection with an actual or proposed merger, investment, financing, restructuring, reorganisation, acquisition or sale involving some or all of Carter Farrago's business or assets.

Where required, we will provide notice before your information becomes subject to a materially different privacy policy.

We process personal information only for lawful purposes.

Depending on the circumstances and applicable law, we may process your information:

• with your consent;
• when you voluntarily provide information for a specified purpose;
• to process or fulfil an order or request initiated by you;
• to provide customer support, warranty or after-sales services;
• to comply with a legal obligation;
• to prevent fraud, misuse, security threats or unlawful activity;
• to establish, exercise or defend legal claims; or
• where processing is otherwise permitted under applicable law.

Where we rely on consent, you may withdraw that consent in the manner described in this Privacy Policy.

7. Advertising Technologies

Subject to applicable law and your consent choices, advertising technologies may be used to:

• measure advertising performance;
• understand whether an advertisement resulted in a website visit or purchase;
• limit repeated advertising;
• create or measure advertising audiences; and
• display advertising that may be more relevant to your interests.

8. How We Share Your Information

We share personal data only with service providers acting on our behalf, and only asneeded for the purposes mentioned in Section 6. Each provider is bound by a written contract to process data only on our instructions, to keep it secure, and to delete or return it when the contract ends. We remain responsible for personal data processed on our behalf. The categories of processors are as follows:

• e-commerce and hosting platforms 
• payment gateways and financial service providers
• couriers and logistics providers 
• customer-relationship, helpdesk, and telephonic tools
• communications tools (email, SMS, WhatsApp, and RCS)
• analytics and advertising providers
• review providers, and
• professional advisers (lawyers, accountants, and auditors).

Our current providers are listed in Annex A. We update the list each time providers change.

We may also disclose personal data where the law requires it, to courts and authorities, to detect or investigate fraud or offences, and to establish or defend legal claims.

If we are involved in a merger, acquisition, or sale of assets, personal data may be transferred to the successor. We will tell you beforehand, and if the new owner will use your data for a materially different purpose, we will seek your consent afresh before making a transfer.

We do not sell your personal data.

Some of our service providers may process or store personal information outside India.

The privacy and data-protection laws in those locations may differ from Indian law. Where information is processed or transferred outside India, we will take reasonable steps to ensure that it is handled in accordance with applicable law and appropriate contractual, organisational or technical safeguards.

We will comply with any restriction or condition imposed by the Government of India or another competent authority concerning the transfer of personal information outside India.

9. Security of Your Information

We maintain reasonable administrative, technical and organisational safeguards appropriate to the nature of the information we process and the risks associated with that processing.

These measures may include:

• encryption, masking or tokenisation of personal data where necessary
• role-based access controls and authentication;
• protected transmission and storage;
• logging and monitoring of access to personal data;
• backups and recovery procedures;
• service-provider assessments; and security-incident response procedures.

No method of transmission over the internet and no method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you believe that your account or information has been compromised.

10. Personal-Data Breaches

If we become aware of a personal-data breach, we will comply with applicable data-protection law, including the requirements of the DPDP Act and DPDP Rules as and when applicable, including by:

• Notify the Data Protection Board of India without delay and send a detailed report within the prescribed period of 72 hours, and
• Notify each affected person without delay, telling them what happened, the likely consequences, what we have done and are doing to contain and mitigate harm, and steps you can take to protect yourself, as well as who to contact for any questions.

11. Your Privacy Rights

Subject to applicable law, you may have the right to:

11.1. Access Your Information

You may request confirmation of whether we process your personal information and request a summary of the information being processed.

Where required by law, you may also request information concerning the identities or categories of service providers with whom your information has been shared.

11.2. Correct or Update Your Information

You may request that we:

• correct inaccurate or misleading information;
• complete incomplete information; or
• update information that is no longer current.

11.3. Request Erasure

You may request deletion of information that is no longer required for the purpose for which it was collected.

We may retain information where required or permitted for legal compliance, accounting, fraud prevention, warranty administration, dispute resolution or the establishment, exercise or defence of legal claims.

11.4. Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect processing carried out lawfully before the withdrawal. Where particular information is required to complete an order, provide a service or fulfil another request, withdrawal may affect our ability to provide the relevant service.

11.5. Opt Out of Marketing

You may unsubscribe from promotional communications through the unsubscribe mechanism included in the communication or by contacting us.

We may retain limited information necessary to record and respect your opt-out preference.

11.6. Raise a Grievance

You may raise a grievance concerning our collection, use, sharing, retention, security or other processing of your personal information.

11.7. Nominate Another Individual

Where this right is available under applicable law, you may nominate another individual to exercise your privacy rights in the event of your death or incapacity.

12. How to Exercise Your Rights

To submit a privacy request, contact us using the information provided in the "Contact Us and Grievance Officer" section below. Please include, where applicable:

• your full name;
• the email address or telephone number connected with your interaction with Carter Farrago;
• the relevant order number;
• the right you wish to exercise;
• a clear description of your request; and
• any information reasonably required to locate the relevant records.

We may request additional information to verify your identity and protect personal information against unauthorised access, correction or deletion.

We will acknowledge your request within 7 days of receipt and respond within 30 days, or within any shorter period required under applicable law. Where we cannot fulfil a request, we will explain the reason where required or appropriate.

13. Children's Privacy

Our website and services are intended for individuals who are at least eighteen years of age and capable of entering into a binding contract.

We do not knowingly collect or process the personal information of any person under eighteen years of age. We do not permit individuals under eighteen to create a customer account or place an order.

We do not conduct targeted advertising directed at children, behavioural monitoring or tracking of children, or profiling of children.

If a parent or lawful guardian believes that a person under eighteen has provided information to us, they may contact us at the address in Section 17. We will take reasonable steps to investigate and to delete the information or otherwise address it lawfully.

14. Third-Party Websites and Services

Our website may contain links to websites, applications or services operated by third parties. We do not control the privacy, security or data-processing practices of those third parties. Your use of a third-party service will be governed by that party's own terms and privacy policy. We encourage you to review the relevant privacy policy before providing information to a third-party service.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• changes in our business practices;
• changes to our website or services;
• new service providers or technologies;
• legal or regulatory developments; or
• security and operational requirements.

The revised Privacy Policy will be posted on our website with an updated "Last Updated" date.

Where a change materially affects how we process your information, we will provide additional notice or obtain consent where required by applicable law.

16. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India. Subject to any mandatory rights, statutory remedies or consumer forums available under applicable law, courts having jurisdiction in Surat, Gujarat shall have jurisdiction over disputes arising from this Privacy Policy. Nothing in this section limits any legal right or remedy that cannot lawfully be excluded or restricted.

17. Contact Us and Grievance Officer

For privacy questions, requests or grievances, please contact:

Legal Entity: Connext Five Three LLP GSTIN: 24AAUFC4477D1Z9
Brand: Carter Farrago
Registered Address: 1203–1208, 12th Floor, Vasupujya Rio Empire, Adajan Hajira Road, Near PAL RTO, Adajan, Surat, Gujarat – 395009
Email: support@carterfarrago.com 

Please write "Privacy Request" or "Privacy Grievance" in the subject line wherever possible.

We will acknowledge receipt of your communication within 24-48 hours of receipt. We will endeavour to resolve grievances promptly and within 90 days of receipt.

If you are not satisfied with our response, or we do not respond within the stated period, you may escalate your complaint to the Data Protection Board of India.

Annex: Full List of Third Party Service Providers