Eigenweg
Cart

Privacy Policy

Last Updated: October 2026

256-Bit SSL Encryption

Enterprise-grade cryptographic encryption protects every browsing session, account login, and transaction.

Zero Data Selling

We strictly never sell, monetize, or trade your personal or fitness profiling data to third-party data brokers.

Tokenized Cashfree PG

PCI-DSS compliant payment processing. We never store or inspect raw card credentials or bank passwords.

Complete Data Control

Under the DPDP Act 2023, you hold full rights to access, rectify, export, or permanently delete your account data.

SECTION 01•Introduction to our data privacy commitment and legal identity.

Overview, Legal Entity & Scope

This Privacy Policy (“Policy”) outlines how EIGENWEG, operated under the personal legal entity of Amaan Faizal (“we,” “us,” or “our”), collects, utilizes, stores, shares, and protects your personal information when you visit, create an account on, or make a purchase through our website and e-commerce platform (collectively, the “Platform”).

Brand & Statutory Entity Information
Brand NameEigenweg
Legal EntityAmaan Faizal
Registered LocationKochi, Kerala, India
Country of OriginIndia

We respect the digital privacy of athletes, lifters, and customers. By accessing or using our Platform, you acknowledge that you have read, understood, and consented to the practices described in this Policy. This Policy complies with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and recognized international privacy benchmarks.

SECTION 02•Categories of personal, transactional, and technical data gathered.

Information We Collect

We collect only the minimum personal data strictly necessary to deliver high-performance athletic apparel, process orders securely, and provide seamless customer service:

Directly Provided Information
  • Identity Data: Full name, title, and preferred display name.
  • Contact Data: Email address, mobile telephone number, and WhatsApp contact details.
  • Fulfillment Data: Detailed doorstep shipping address, billing address, PIN code, and delivery instructions.
  • Account Credentials: Encrypted passwords and saved profile preferences.
Automated Technical & Device Data
  • Device Telemetry: IP address, browser type and version, operating system, and hardware identifiers.
  • Interaction Analytics: Pages visited, time spent, product clicks, and referral source URLs.
  • Transactional History: Items ordered, sizes selected, order status history, and support chat transcripts.
No Sensitive Personal Data: Eigenweg does not collect, process, or store biometric records, political opinions, genetic information, or philosophical affiliations.
SECTION 03•Why we process your information and the legitimate grounds for doing so.

Purpose & Legal Grounds for Processing

We process your data strictly under lawful, transparent, and fair legal grounds:

Purpose of ProcessingCategories of DataLegal Ground
Order Fulfillment & DispatchName, Address, Phone, Cart ItemsContractual Necessity
Payment Processing via CashfreeOrder Value, Customer ID, Session TokenContractual Necessity
Customer Care & Size ExchangesOrder Number, Size, Return ReasonCustomer Service & Contract
Taxation & Statutory AccountingInvoices, GST records, Sales historyLegal Obligation (GST / Income Tax)
Product Drop Alerts & NewslettersEmail Address, Mobile NumberConsent (Freely Revocable)
SECTION 04•PCI-DSS compliance, tokenization, and complete absence of stored card details.

Payment Gateway Security (Cashfree PG)

Online financial transactions on our Platform are managed exclusively through Cashfree Payments India Pvt. Ltd. (“Cashfree PG”), an authorized, RBI-compliant Payment Aggregator.

Zero Card Storage Guarantee

Eigenweg does NOT collect, view, hold, or store your credit/debit card numbers, CVVs, card expiry dates, UPI MPINs, or NetBanking passwords on our servers. All sensitive card processing is executed directly inside Cashfree's PCI-DSS Level 1 certified vault.

  • Tokenized Processing: Transactions generate a temporary session token (payment_session_id) that binds strictly to your unique order and expires automatically after checkout.
  • End-to-End Encryption: All payment handoffs occur over TLS 1.3 / 256-bit secure cryptographic channels with mandatory two-factor authentication (OTP/3D Secure).
SECTION 05•Legitimate service partner disclosures and strict zero-monetization policy.

Data Sharing & Trusted Third Parties

We never sell, lease, or monetize your personal records to advertisers, marketing agencies, or data brokers. Information is disclosed solely to authorized service partners necessary to fulfill operations:

  • Logistics & Courier Partners: Trusted air-express delivery partners (including Blue Dart, Delhivery, DTDC, and XpressBees) receive your recipient name, shipping address, contact phone number, and package dimensions to execute doorstep delivery and reverse pickups.
  • Payment Aggregators: Cashfree PG processes order payment amounts and passes back confirmation status tokens.
  • Hosting & Cloud Infrastructure: Encrypted cloud hosting and high-security transactional email and SMS dispatch providers.
  • Legal & Regulatory Authorities: We may disclose information if required under valid legal process, court subpoenas, or statutory obligations to comply with applicable Indian laws.
SECTION 06•Session management, preference preservation, and browser cookie controls.

Cookies, Telemetry & Tracking Technologies

Cookies are small alphanumeric files placed on your browser or device to enable core website functionality and remember your preferences:

Essential Cookies

Mandatory for session persistence, authentication state, shopping bag contents, and checkout routing.

Functional Cookies

Preserve your preferred garment size filter, recently viewed fits, and currency display settings.

Analytical Telemetry

Aggregated, anonymized performance metrics to identify load latency, UI bottlenecks, and mobile rendering errors.

Managing Cookies: You can configure your browser (Chrome, Safari, Firefox, Edge) to block or delete cookies. However, disabling essential cookies will prevent product additions to the cart and impede successful checkout.
SECTION 07•Retention schedules for order archives, tax accounts, and dormant profiles.

Data Retention & Storage Schedule

We retain personal data only for as long as strictly necessary to fulfill the operational purposes for which it was collected, resolve disputes, and comply with mandatory statutory laws:

  • Active Customer Accounts: Profile data, saved delivery addresses, and order history are retained while your account remains active.
  • Taxation & Accounting Archives: Under Indian GST regulations and the Companies Act, completed sales transaction invoices and tax records must be preserved for a statutory period of 7 years.
  • Marketing Subscribers: Contact info for promotional broadcasts is retained until you unsubscribe or withdraw consent.
SECTION 08•Technical, physical, and administrative measures to protect customer data.

Security Safeguards & Infrastructure

We implement defense-in-depth security measures to protect your personal data against accidental loss, unauthorized access, alteration, or unlawful destruction:

Technical Controls

Strict HTTPS/TLS 1.3 protocol enforcement, automated web application firewall (WAF) filtering against DDoS and bot scraping, and salted password hashing.

Administrative Governance

Principle of least privilege (PoLP) governing internal employee access to order logs, mandatory multi-factor authentication, and regular access log reviews.

SECTION 09•Statutory rights regarding data access, correction, erasure, and consent withdrawal.

Your Rights under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable global data protection regimes, you are entitled to comprehensive rights concerning your personal data:

1. Right to Access & Summary

Request a structured digital copy of all personal data held about you by Eigenweg.

2. Right to Correction & Updating

Correct inaccurate delivery records, update phone numbers, or modify profile details directly in your Account Profile.

3. Right to Erasure / Account Deletion

Request permanent deletion of your profile and personal data, subject only to mandatory statutory tax and accounting retention laws.

4. Right to Withdraw Consent

Revoke consent for promotional newsletters, SMS, or WhatsApp broadcasts at any time using the one-click unsubscribe links.

Exercise Your Privacy Rights

Submit a data export, correction, or erasure request directly to our privacy desk.

Submit Privacy Request
SECTION 10•Age restrictions and requirements for parental or legal guardian consent.

Protection of Children & Minors

Our Platform and products are strictly intended for individuals who are at least 18 years of age or the legal age of majority in their jurisdiction.

Zero Tolerant Collection: We do not knowingly solicit or collect personal records from children under the age of 18. If you believe that a minor has provided personal data without verified parental consent, please contact us immediately at eigenweg.gymwear@gmail.com, and we will purge the corresponding records promptly.
SECTION 11•Data handling practices for international orders and cloud storage.

Cross-Border Logistics & Global Transfers

Eigenweg operates from India. If you access our Platform or place an international order from outside India (e.g., UAE, Singapore, UK, EU, North America), please be advised that your information is collected, processed, and stored on secure cloud servers located in India and certified global regions.

By submitting your order, you consent to the transfer of data across international borders to logistics and customs partners for cross-border clearance in full accordance with this Policy.

SECTION 12•Official contact details of our Data Protection & Grievance Officer.

Statutory Grievance Officer & Contact Info

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the details of the designated Grievance Officer are provided below:

Data Protection & Grievance Officer
Designated OfficerAmaan FaizalGrievance & Compliance Lead
Legal EntityAmaan FaizalBrand: Eigenweg
Statutory LocationKochi, Kerala, IndiaCountry of Origin: India
Direct Grievance & Privacy Email

Guaranteed response within 48 business hours.

eigenweg.gymwear@gmail.com
Customer Concierge & WhatsApp

Mon – Sat: 10:00 AM – 7:00 PM IST.

+91 7306 124 275

Our Uncompromising Privacy Promise

At Eigenweg, we believe your personal data is sacred. We apply the same discipline and integrity to safeguarding your privacy as we do to engineering high-performance athletic apparel.