Privacy policy

Last Updated: 19 June 2026

1. Introduction

Welcome to Roccope (“we”, “our”, or “us”), operated by Roccope Lifestyle Pvt Ltd, a company incorporated under the laws of India. We are committed to protecting your personal information and your right to privacy wherever you are located.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.roccope.com and make purchases from us — including purchases shipped to Canada. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

This Privacy Policy is compliant with: 

        Information Technology Act, 2000 and SPDI Rules, 2011 (India)

        General Data Protection Regulation (GDPR) (EU/EEA visitors)

        Personal Information Protection and Electronic Documents Act (PIPEDA) (Canada)

        Quebec Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Bill 64) (Quebec residents)

 

2. Information we collect 

We collect information that you provide directly to us, information collected automatically, and information from third-party services. The types of information we may collect include:

2.1 Personal Information You Provide

        Full name and contact details (email address, phone number)

        Shipping and billing address

        Account login credentials (username and encrypted password)

        Order history and purchase preferences

        Communications you send us (e.g., customer support queries, feedback)

2.2 Payment Information

We do not directly collect or store your payment card details. All payment transactions are processed through either Razorpay or PayPal. Both are PCI-DSS compliant payment processors. We only receive a transaction confirmation reference from these providers. PayPal's privacy policy is available at www.paypal.com/privacy 

2.3 Information Collected Automatically

        IP address and approximate geographic location

        Browser type, device type, and operating system

        Pages visited, time spent on pages, and referring URLs

        Clickstream data and browsing behavior on our website

        Cookie identifiers and session data (see Section 6 for details)

        Store browsing behavior collected by Shopify's platform infrastructure (e.g. pages viewed, cart activity, checkout steps)

        Data collected by third-party apps installed on our Shopify store (e.g. review tools, pop-ups, loyalty apps) — subject to each app's own data practices.

2.4 Information from Third-Party Services

We may receive limited information from third-party analytics, marketing, and customer engagement tools we use to operate our business, including but not limited to Google Analytics, Shopify, email marketing platforms, and customer support tools. This information is used only in aggregated or anonymized form wherever possible.

Shopify Inc. — as our e-commerce platform, Shopify processes customer data on our behalf including order data, account data, and checkout behavior. Customer data is initially processed by Shopify International Limited, Ireland. Shopify's Consumer Privacy Policy also applies when customers interact with Shopify-powered features on our store.

Third-party Shopify apps — apps installed on our store may independently access certain customer data. We ensure these apps operate under appropriate data processing agreements.

2.5 Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

3. How We Use Your Information

3.1 To Fulfil Your Orders

        Process and confirm your purchases of leather accessories and products

        Arrange shipping and delivery to your provided address

        Send order confirmations, shipping updates, and delivery notifications

        Handle returns, refunds, and exchanges in accordance with our Refund Policy

3.2 To Manage Your Account

        Create and manage your registered user account

        Authenticate your identity when you log in

        Enable guest checkout where applicable

3.3 For Marketing and Communications

We send promotional emails, offers, and newsletters only if you have expressly opted in or are an existing customer. For Canadian residents, we comply with Canada's Anti-Spam Legislation (CASL) — we will only send commercial electronic messages (CEMs) where we have your express or implied consent, and every CEM will include a clear and easy unsubscribe mechanism that is honored within 10 business days. 

You may opt out of marketing communications at any time by clicking the unsubscribe link in any email we send or by contacting us at info@roccope.com.

        Improve our website, products, and customer service

        Conduct analytics to understand how visitors use our website

        Prevent fraud, detect security threats, and ensure platform integrity

        Comply with applicable laws and regulations in India and Canada

        Enforce our Terms and Conditions and other agreements

4. Legal Basis for Processing Your Data

Under the IT Act, 2000 and SPDI Rules, 2011 (India), we collect and process sensitive personal data only with your consent or as necessary to provide our services.

For EU/EEA visitors under GDPR: Contract Performance, Legitimate Interests, Consent, and Legal Obligation.

For Canadian residents under PIPEDA and Quebec Law 25:

        Consent: We collect, use, and disclose personal information only with your knowledge and consent, except where permitted or required by law.

        Identified Purpose: The purposes for which personal information is collected are identified before or at the time of collection (see Section 3 above).

        Limiting Collection: We collect only the information necessary for the identified purposes — no more.

        Accountability: Roccope Lifestyle Pvt Ltd is responsible for personal information under its control. Our Privacy Officer oversees compliance (see Section 15).

        Quebec — Automated Decision-Making: If we ever use automated processing to make decisions that significantly affect you, we will notify you and provide the right to request human review.

5. Sharing of Your Information

We do not sell, trade, or rent your personal information to any third parties for their marketing purposes. We may share your information only in the following limited circumstances:

5.1 Service Providers

We share your information with trusted third-party vendors who assist us in operating our website and fulfilling your orders. These include:

        Razorpay — payment processing

        PayPal — payment processing

        Logistics and Courier Partners — to deliver your orders internationally

        Email and SMS Marketing Platforms — to send authorized communications

        Analytics Providers (Google Analytics) — to understand website usage

        Customer Support Tools — to manage your queries and support tickets

        Shopify Inc. e-commerce platform, store infrastructure, checkout, and order management. Processed under Shopify's Data Processing Addendum.

        Third-party Shopify App Store applications — tools installed on our store for reviews, marketing, analytics, or support that may access limited customer data for their specific function. Each is contractually bound to data protection standards.

All service providers are contractually required to use your information only for the purposes we specify and to maintain appropriate security standards.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority in India or Canada, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal data. Canadian residents will be notified in advance where required by PIPEDA.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather information about how our website is used.

6.1 What Are Cookies?

Cookies are small data files placed on your device when you visit a website. They allow the website to remember your actions and preferences over a period of time.

6.2 Types of Cookies We Use

        Essential Cookies: Necessary for website function including cart and session management. These cannot be disabled.

        Analytics Cookies: Used by Google Analytics to understand visitor behavior and improve our website.

        Marketing Cookies: Used to show relevant advertisements, including retargeting pixels (e.g., Meta Pixel).

        Preference Cookies: Used to remember your settings such as language or currency.

        Shopify Functional Cookies: Used by Shopify's platform to enable cart persistence, checkout security tokens, and fraud prevention. These are essential and cannot be disabled.

You can control and manage cookies through your browser settings. For Canadian residents, non-essential cookies require your prior consent in accordance with applicable Canadian privacy law. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

        Order and transaction records are retained for a minimum of 7 years as required under Indian accounting and tax laws.

        Account data is retained for the duration your account is active and for a reasonable period thereafter.

        Marketing preferences and communications history are retained until you opt out.

        Analytics data is retained in aggregated and anonymized form indefinitely.

        Canadian residents: When personal information is no longer required for its identified purpose, it is securely destroyed, erased, or anonymized, consistent with PIPEDA obligations.

8. Data Security

We implement reasonable security practices and procedures as mandated by the SPDI Rules, 2011 and consistent with PIPEDA's security safeguard principle to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

        SSL/TLS encryption for all data transmitted between your browser and our website

        Secure storage of personal data with access restricted to authorized personnel only

        Regular security assessments and vulnerability testing

        PCI-DSS compliant payment processing via Razorpay and PayPal

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that poses a real risk of significant harm to Canadian residents, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required under PIPEDA's mandatory breach reporting rules.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

9.1 Rights for All Users (India – IT Act / SPDI Rules)

        Right to access the personal data we hold about you

        Right to correct inaccurate or incomplete personal data

        Right to withdraw consent for use of your sensitive personal data

        Right to opt out of marketing communications at any time

9.2 Additional Rights for EU/EEA Users (GDPR)

        Right to erasure (‘right to be forgotten’) – request deletion of your personal data

        Right to data portability – receive your data in a structured, machine-readable format

        Right to restrict processing of your data in certain circumstances

        Right to object to processing based on legitimate interests or for direct marketing

        Right to lodge a complaint with your local data protection supervisory authority

9.3 Rights for Canadian Residents (PIPEDA + Quebec Law 25)

        Right of Access: You may request access to your personal information held by us, how it is used, and to whom it has been disclosed.

      Right to Correction: You may request that inaccurate or incomplete personal information be corrected.

   Right to Withdraw Consent: You may withdraw consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Note that withdrawal of consent may affect our ability to provide you with services.

    Right to Complain: You have the right to challenge our compliance with PIPEDA by contacting us first. If not resolved, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

        Quebec Residents — Right to Deindex / Discontinue Dissemination: Under Quebec Law 25, you may request that we cease disseminating your personal information or deindex any hyperlinks attached to your name where dissemination causes harm to you.

       Quebec Residents — Data Portability: You have the right to receive personal information you have provided to us in a structured, commonly used technological format.

9.4 How to Exercise Your Rights

To exercise any of the above rights, please contact our Privacy Officer at support@roccope.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

9.5 Data Deletion via Shopify

If you request deletion of your personal data, we will process your request through our Shopify admin. As of May 2025, Shopify automatically propagates confirmed deletion requests to all connected third-party apps on our store. Some data may be retained for the legally required period

10. Children's Privacy

Our website and services are not directed to children under the age of 16 (or 13 in applicable jurisdictions). We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@roccope.com and we will take steps to delete such information from our records.

11. International Data Transfers

Roccope is based in India and primarily processes and stores data within India. We do not operate a physical presence in Canada; all orders are shipped directly from India.

As we use certain third-party service providers (including PayPal, Google Analytics, Shopify and cloud hosting tools) whose servers may be located in multiple countries, your data may be transferred to and stored in countries outside India, including Canada, the United States, and the European Economic Area.

For Canadian residents: Where your personal information is transferred to a third-party service provider located outside Canada, we use contractual or other means to provide a comparable level of protection. You may contact our Privacy Officer for information about our policies and practices relating to service providers outside Canada.

For EU/EEA users: Data is processed in accordance with GDPR requirements for international transfers, including appropriate safeguards such as Standard Contractual Clauses. 

 12. Third-Party Links and Services

Our website may contain links to third-party websites, social media platforms, or services that are not operated by us. We have no control over the content or privacy practices of those websites and are not responsible for their privacy policies. We encourage you to review the privacy policy of every website you visit.

This includes third-party applications available through the Shopify App Store that may be integrated into our store. Each such application is governed by its own developer's terms of service and privacy policy, and we are not responsible for their data practices beyond the contractual obligations we impose at the time of installation.

Our website uses social media features including the Meta (Facebook/Instagram) Pixel, which may collect your IP address and browsing behavior on our site. These features are operated by their respective platforms and governed by their own privacy policies.

13. Returns, Refunds, and Related Policies

This Privacy Policy should be read alongside our Returns & Refund Policy available on our website. Personal data collected during a return or refund request (such as bank account or PayPal details for refund processing) will be used solely for that purpose and retained only for the legally required period.

14. Canada's Anti-Spam Legislation (CASL)

We comply with Canada's Anti-Spam Legislation (CASL) for all commercial electronic messages (CEMs) sent to Canadian recipients. Specifically:

        Express Consent: We will only send promotional emails or SMS to Canadian recipients where you have expressly opted in to receive such communications.

        Implied Consent: If you have made a purchase from us within the past 24 months, we may send you CEMs on the basis of implied consent under CASL unless and until you unsubscribe.

        Identification: Every CEM we send will clearly identify Roccope Lifestyle Pvt Ltd as the sender, along with our contact information.

        Unsubscribe Mechanism: Every CEM will include a clear, easy-to-use unsubscribe mechanism that is actioned within 10 business days of your request, at no cost to you.

        Record-Keeping: We maintain records of all consents obtained for commercial electronic messages as required by CASL.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of any significant changes by updating the 'Last Updated' date at the top of this policy, sending an email notification to registered users, and displaying a prominent notice on our website. Your continued use of our website after any changes constitutes your acceptance of the updated terms.

16. Grievance Officer (As Required Under IT Act, 2000)

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of our Grievance Officer are provided below:

Name: Privacy & Compliance Officer

Company: Roccope Lifestyle Pvt Ltd

Email: support@roccope.com

Website: www.roccope.com

If you have any grievances regarding the processing of your personal data, please contact the Grievance Officer. We will endeavor to resolve your grievance within 30 days of receipt of the complaint.

17. Canadian Privacy Contact & OPC Complaints

For Canadian residents who wish to raise a privacy concern, you may first contact our Privacy Officer at support@roccope.com. We will investigate and respond to your complaint within 30 days.

If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada (OPC):

        Website: www.priv.gc.ca

        Toll-free: 1-800-282-1376

        Address: 30 Victoria Street, Gatineau, Quebec K1A 1H3

Quebec residents may also contact the Commission d'acces a l'information du Quebec (CAI) at www.cai.gouv.qc.ca for matters relating to Quebec Law 25.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

Roccope Lifestyle Pvt Ltd

Email: info@roccope.com

Website: www.roccope.com

We are committed to working with you to obtain a fair resolution of any complaint or concern about your privacy.

19. Shopify Platform & Third-Party Apps

Our website is built and operated on the Shopify e-commerce platform, provided by Shopify Inc. (Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).

Shopify acts as a data processor on our behalf for the following: order processing, checkout management, customer account management, payment facilitation, and store analytics.

We have accepted Shopify's Data Processing Addendum (DPA), available at shopify.com/legal/dpa, which governs how Shopify handles your personal data.

If you have Shopify's Shop Pay or a Shop account, additional data processing may occur directly between you and Shopify under Shopify's Consumer Privacy Policy (shopify.com/legal/privacy/consumers).

We use third-party apps from the Shopify App Store to operate parts of our store. Each app we install may access limited customer data relevant to its function. We review all apps for privacy compliance before installation and maintain data processing agreements with app developers where required. A list of currently installed apps is available on request by contacting info@roccope.com.

If you enable Shopify's Enhanced Services or Network Intelligence features, Shopify may process your data as a data controller in its own right. We will update this policy if such features are enabled.

© 2026 Roccope Lifestyle Pvt Ltd. All Rights Reserved