Your privacy at AHA Fashion

When you buy or order from us

Your name and mobile number, and if you give them your WhatsApp number, email address, and your delivery and billing addresses (flat or house number, building, street, landmark, area, city, district, state and PIN code, the name and mobile of whoever receives the parcel, and any delivery instructions). We use them to make your bill, to reach you about your order, an advance or balance, a delivery, an alteration or a return, and to find your earlier purchases when you come back.

For GST invoices

If you buy as a business, your GSTIN and billing address, and for every sale the state of supply, as GST law requires on a tax invoice.

Details that help us serve you — only if you share them

Your date of birth and anniversary, blouse size and fitting notes, measurements for stitching or alterations, notes our staff keep (for example pieces you liked), a reminder to call you back, and your preferred language and time to call.

What you buy

Your orders, the pieces and services on them, prices and discounts, payments and refunds (the method and the payment reference — we never see or keep card numbers or UPI PINs), returns and exchanges, store credit, loyalty points, stitching jobs, pieces held for you and deliveries. We need these to complete the sale, keep our accounts and meet tax law.

Your consent choices

Whether you agreed to receive WhatsApp or email updates from us, when you agreed, and when and why you withdrew. We send offers and new-arrival messages only if you agreed.

Proving your mobile number is yours

When you buy on this website we send a one-time code to your number on WhatsApp. We keep the number, the time, whether the code was used, the first part of your IP address and a one-way fingerprint of your browser — so that nobody can order in your name and so we can stop someone sending you codes over and over. The code itself is never stored, only a one-way hash of it, which cannot be turned back into the code. These records are deleted after 30 days.

How you found us

The way you tell us you heard of AHA (walking past, Instagram, an advertisement, a friend, an exhibition) and the campaign it belonged to, so we know which advertising works.

Your shopping profile

Figures worked out from your purchases — how much and how often you have bought, your last visit and loyalty tier — and the colours, fabrics and price range you tend to choose. We use them to suggest pieces you may like. They are never used for any decision with a legal or similar effect on you.

On this website

• Always, because the site needs it: your bag and wishlist are saved in your own browser and are not sent to us, except the product codes when the site checks that a piece is still available. Your cookie choice is saved in a first-party cookie (aha_consent) and in your browser for six months.
• Only if you allow Analytics: a random anonymous id kept in your browser, and the pieces you look at (and whether for 30 seconds or more), zooming in, playing a video, adding to the wishlist or bag, tapping “Enquire on WhatsApp” and the shop filters you use, with your IP address. From a search we keep only the words that match our catalogue (such as a colour or fabric), never anything else you type. AHA keeps these records itself. Google Analytics is not used.
• Only if you allow Marketing: the campaign details in the link you arrived by (for example an Instagram advertisement), the page you landed on and the name of the site that sent you. The Meta Pixel is not used.
• WhatsApp: when you tap “Enquire on WhatsApp” the site writes the message for you, but you send it through WhatsApp (Meta), under WhatsApp’s own privacy policy. We receive what you send us.
• Server logs: our web host’s servers keep standard access logs (IP address, page requested, time and browser) to run and protect the site.

Linking your browsing to you. The website’s records are anonymous. If you allowed Analytics, the WhatsApp message the site writes for you ends with a short reference such as “Ref: A7K2QX”. If you send the message with that reference, AHA can add what you looked at on the website to your customer record, so we can show you pieces you liked. It can be linked only within 30 days of your last visit. If you do not want that, delete the reference line before sending, or switch Analytics off in Cookie settings (the reference is then not added at all). Linked records are part of your data: you can see them, have them erased or ask us to unlink them.

WhatsApp messages with our order-updates number

AHA sends order confirmations, payment links and delivery updates from a WhatsApp Business number of its own. When you write back to that number, your messages, any photo or file you send, your WhatsApp profile name and the time they arrived are kept in our system so our staff can read and answer them; so are the messages we send you and whether they were delivered and read. We use them only to help you with your order or question. WhatsApp (Meta) carries these messages under its own terms.

Security and audit records

Our system keeps a record of every change to its records, including customer details, with the member of staff who made it and the IP address of their device, plus error logs and staff sign-in records. They keep our accounts accurate and the system secure.