Privacy policy

Last updated: June 2026

Filo Hevis - Menswear | B2B Wholesale & Retail
This Privacy Policy describes how Filo Hevis (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from b2b.filohevis.com (the "Site") or otherwise communicate with us (collectively, the "Services").

For the purposes of Applicable Laws, Filo Hevis acts as the ‘Data Fiduciary’ responsible for determining the purpose and means of processing personal data.

For purposes of this Privacy Policy, "you" and "your" means you as the user of the services, whether you are a retail customer, website visitor, wholesale buyer, vendor, distributor, or institutional buyer, or another individual whose information we have collected according to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the services you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the services.

This Privacy Policy is compliant with Applicable Laws governing data protection in India. Where applicable, it also addresses obligations under the GDPR (for EU/UK wholesale buyers) and equivalent international frameworks.

CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date and take any other steps required by applicable law.

HOW WE HANDLE YOUR PERSONAL DATA
To provide the services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition, we may use information we collect about you to communicate with you, provide the services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the services, our rights, and the rights of our users or others. This includes information collected in the context of bulk wholesale orders, vendor registrations, and B2B business transactions.

Tax and Regulatory Compliance: We may process business information including GST numbers, billing details, and invoicing information to comply with applicable Indian tax and statutory accounting requirements.

WHAT PERSONAL INFORMATION WE COLLECT
The types of personal information we obtain about you depends on how you interact with our Site and use our services. When we use the term "personal information", we are referring to information that identifies, relates to, describes or can be associated with you. The following sections describe the categories and specific types of personal information we collect.

INFORMATION WE COLLECT DIRECTLY FROM YOU
Information that you directly submit to us through our services may include:
•    Basic contact details, including your name, address, phone number, email.
•    Order information, including your name, billing address, shipping address, payment confirmation, e-mail address, phone number.
•    Account information, including your username, password, security questions.
•    Shopping information, including the product browsing and catalogue enquiry behaviour on the Site.
•    B2B and wholesale business information, including company name, GST/tax registration number, business type, trade licence details, bulk order requirements, and authorised representative details.
•    Vendor and distributor information, including bank details for payment processing of wholesale transactions, delivery preferences, and territory or region of operation.
•    Customer support information, including the information you choose to include when communicating with us.
•    Communication data collected through WhatsApp, phone calls, or email exchanges initiated by you or your business representatives for the purpose of wholesale enquiries, order coordination, or after-sales support. Such communications may be recorded or logged for service quality and compliance purposes. Please note that communications conducted via WhatsApp are processed through Meta's platform and are subject to Meta's own privacy policy, which is independent of ours. For sharing sensitive business documents such as bank details, trade licences, or contracts, we recommend using official email channels.

Some features of the services may require you to directly provide us with certain information about yourself. You may select not to provide this information, but doing so may prevent you from using or accessing these features.

Authorised Representative Confirmation: If you are submitting personal or business data on behalf of a company, partnership, or institution, you confirm that you are duly authorised to do so and that the business entity you represent has consented to the collection and processing of its data as described in this Privacy Policy. Filo Hevis is not liable for data submitted by individuals who lack such authority.

COOKIE USAGE AND DATA COLLECTION
We also automatically collect certain information about your interaction with the services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the services. 

INFORMATION WE OBTAIN FROM THIRD PARTIES
Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:
•    Companies who support our Site and Services, such as Shopify.
•    Our payment processors (such as Razorpay / PayU / Easebuzz), who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfil your orders and provide you with products or services you have requested, in order to perform our contract with you.
•    B2B payment and trade finance partners who process bulk invoices, and wholesale payment arrangements on our behalf.
•    When you visit our Site, open or click on emails we send you, or interact with our services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
•    Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices.

HOW WE USE YOUR PERSONAL INFORMATION
•    Providing Products and Services. We use your personal information to provide you with the services in order to perform our contract with you, including to process your payments, fulfil your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, facilitate any returns and exchanges. For B2B clients, this also includes processing bulk wholesale orders, managing vendor accounts, issuing invoices, and coordinating large-volume deliveries.
•    Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications through e-mails, text messages or postal mail, and to show you advertisements for products or services, thus providing the latest updates. For B2B partners, this may include wholesale catalogues, seasonal collection previews, trade offers, and bulk pricing communications. 
•    Security and Fraud Prevention. We use your personal information to detect, investigate or act regarding possible fraudulent, illegal or malicious activity. If you choose to use the services and register an account, you are responsible for keeping your account credentials safe, as you are liable for any activity under your account. We highly recommend that you do not share your username, password, or other access details with anyone else. If you believe your account has been compromised, please contact us immediately.
•    Communicating with you. We use your personal information to provide you with customer support and improve our services. This is in our legitimate interests to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.
•    B2B Relationship Management. We use your business information to manage ongoing wholesale relationships, negotiate trade terms, coordinate repeat bulk orders, and maintain accurate vendor and distributor records.
•    Lawful Basis for Processing. We process your personal data on one or more of the following legal bases as applicable: (a) Performance of a contract: to fulfil orders, manage accounts, and deliver services; (b) Legitimate interests: to manage business relationships, prevent fraud, and improve our services; (c) Consent: for marketing communications and non-essential cookies, where required; (d) Legal obligation: to comply with applicable tax, trade, and data protection laws. You may withdraw consent at any time without affecting the lawfulness of prior processing.

COOKIES: WHAT WE COLLECT
Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see: https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the services. We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may affect some of the services, including certain features and general functionality.

In compliance with Applicable Laws, we seek your consent before deploying non-essential cookies such as tracking, analytics, or advertising cookies. You may manage your cookie preferences at any time via the cookie settings option available on our Site. Essential cookies necessary for the Site to function do not require your consent and will remain active.

When you first visit our Site, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You can modify your preferences at any time through the cookie settings link available on our Site.

HOW WE DISCLOSE PERSONAL INFORMATION
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
•    With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage).
•    With shipping, courier, freight, and logistics providers (Delhivery / Bluedart / Shiprocket / DTDC) used to deliver retail and wholesale orders.
•    With business and marketing partners, including Shopify and Meta (WhatsApp), to provide services and advertise to you. They will use your information in accordance with their own privacy notices.
•    With wholesale distributors, institutional buyers, or trade partners for the purpose of fulfilling bulk orders, coordinating delivery logistics, and managing B2B contractual obligations.
•    When you direct us, request us, or otherwise consent to our sharing of certain information with third parties - such as for shipping your products or coordinating wholesale deliveries - we will do so with your consent.
•    With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
•    In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the services, our rights, and the rights of our users or others.
•    With government authorities, regulatory bodies, or law enforcement agencies, where required by Applicable Laws, court order, or legal process, including under applicable tax and trade regulations.

THIRD PARTY WEBSITES AND LINKS
Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.

CHILDREN'S DATA
The services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you believe a child has mistakenly submitted personal information through our platform, please contact us using the details below and we will delete such data promptly.

Under Applicable Laws, a "child" is defined as any individual below the age of 18 years. We do not knowingly process personal data of children and do not conduct behavioural monitoring or targeted advertising directed at minors. If we become aware that personal data of a child has been collected without verifiable parental or guardian consent, we will delete such data promptly.

B2B DATA CONFIDENTIALITY
Filo Hevis recognises that business-to-business relationships involve sensitive commercial information. Any business information shared by wholesale buyers, vendors, or distributors - including pricing agreements, order volumes, trade terms, and business credentials - will be treated as strictly confidential. Such information will not be disclosed to competing parties or used for any purpose other than fulfilling the agreed wholesale or distribution arrangement.

B2B partners may request access to, correction of, or deletion of their business data at any time by contacting us using the details provided below.

Data Processing Agreements (DPAs): For B2B partners, institutional buyers, or wholesale accounts that require a formal Data Processing Agreement - particularly those based in the EU, UK, or jurisdictions with equivalent data protection requirements - we are willing to enter into such agreements upon request. Please contact us with the subject line 'DPA Request – [Your Company Name]' to initiate this process.

B2B Account Offboarding: Upon termination of a wholesale relationship or vendor account, we will retain business data only for as long as required by applicable tax, trade, and legal obligations (typically 7 years under Indian tax law). Upon expiry of the mandatory retention period, business data will be securely deleted or anonymised. B2B partners may request confirmation of data deletion by contacting us in writing.

SECURITY AND RETENTION OF YOUR INFORMATION
We implement appropriate technical and organisational measures to protect your personal and business data against unauthorised access, loss, or misuse. However, no security system is entirely infallible, and we recommend using secure channels such as official email for sharing sensitive business information.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies. 

We retain different types of data for different periods as follows:

Data Type	How Long We Keep It	Why
Order & invoice records	7 years	Indian tax law
Account / login data	Duration of account + 1 year	Contract
Marketing / catalogue sends	Until you unsubscribe	Consent
WhatsApp / call logs	2 years	Business records

Data Breach Notification: In the event of a personal data breach, we will notify the relevant authorities as required under Applicable Laws. Where the breach is likely to result in harm to affected individuals, we will also notify those individuals without undue delay. For B2B clients, we will notify authorised representatives of affected wholesale accounts as promptly as circumstances allow. We maintain an internal incident response procedure to manage and contain data breaches effectively.

YOUR DATA RIGHTS AND CHOICES
Depending on where you live, you may have some or all the rights listed below in relation to your personal information. These rights apply equally to individual retail customers and to authorised representatives of B2B businesses and wholesale partners.
•    Right to Access / Know. You may have the right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.
•    Right to Delete. You may have the right to request that we delete personal information we maintain about you, subject to certain exceptions and applicable laws.
•    Right to Correct. You may have the right to request that we correct inaccurate personal information we maintain about you.
•    Right of Portability. You may have the right to receive a copy of the personal information we hold about you and, in certain circumstances and subject to certain exceptions, to request that we transfer it to a third party.
•    Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.
•    Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.
•    Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you.
•    Rights under Applicable Laws: As a Data Principal under Applicable Laws, you have the right to: (a) obtain a summary of personal data being processed and the identities of all processors and third parties with whom it has been shared; (b) have grievances addressed by our designated Grievance Officer (see Contact section below); and (c) nominate another individual to exercise data rights on your behalf in the event of death or incapacity. We will endeavour to respond to all data-related requests within 30 days of receipt.

COMPLAINTS
If you have complaints about how we process your personal information, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, depending on where you live you may have the right to appeal our decision by contacting us, or lodge your complaint with your local data protection authority.

For complaints arising under Applicable Laws, you may also lodge a complaint with the relevant data protection authority. We are committed to resolving all complaints in a fair, transparent, and timely manner in line with Applicable Laws.

INTERNATIONAL USERS
Filo Hevis is based in India and your personal data is primarily collected and processed here, in accordance with Applicable Laws. When we use third-party platforms, such as Shopify or payment processors like Razorpay / PayU / Easebuzz, that operate internationally, your data may be stored or processed outside India. We take reasonable steps to ensure that such third-party partners maintain data protection standards consistent with applicable law. International wholesale buyers should note that their data is handled subject to Indian data protection law. Where required by applicable regulation, for instance for EU or UK-based wholesale partners, we take reasonable steps to ensure appropriate data protection safeguards are in place for such transfers, in accordance with applicable law.

Where required, we implement appropriate safeguards for cross-border data transfers, including contractual protections and standard contractual clauses (SCCs) or equivalent legal mechanisms.

FOR PRIVACY-RELATED INQUIRIES - CONTACT US
If you have any questions about our privacy practices or this privacy policy, or if you would like to exercise any of the rights available to you:
•    Please call: 99999 789 24
•    E-mail us: support@filohevis.com
•    Contact us: Wazirpur Industrial Area - 110052, Delhi DL, India.
•    For B2B & Wholesale Enquiries: Please mention 'Wholesale / B2B Inquiry' in your subject line for priority response.
•    Grievance Officer: In accordance with India's Digital Personal Data Protection Act, 2023, any grievances may be directed to our designated Grievance Officer at: support@filohevis.com with the subject line 'Data Grievance'. We will acknowledge your complaint, and aim to resolve it within 30 days.

Best Regards,
Team - Filo Hevis
Menswear | Wholesale | B2B Shirts