Privacy Policy
We ask for very little, and we would rather tell you exactly what that is than write around it. This is what Solise Paris collects, why we hold it, who else touches it, and what you can make us do with it.
In effect from 4 November 2026
Who holds your data
Solise Designs Private Limited, of 14 Blue Hills, NDA Pashan Road, Bavdhan, Pune 411021, Maharashtra, India, trading as Solise Paris, decides why and how your personal data is processed. Under the Digital Personal Data Protection Act, 2023 that makes us the data fiduciary and you the data principal. This policy covers our website, our concierge and assistant, and the Orbit membership.
It sits alongside our Terms & Conditions and our Policies. Where those describe personal data, this policy is the fuller account.
What we collect
What you give us
To take an order and get it to you: your name, phone number, email address, delivery address, city, state and pin code. To hold a membership: the same, plus the account you sign in with. If you write to us, or talk to the concierge, whatever you choose to put in that message.
If you leave a review, your rating, your words, and the name on your account, which is published with it.
What we create about you
Your order history and its contents, the totals and discounts applied, delivery status, your customer number, membership code and tier, referral credits earned and spent, and who introduced whom where a referral code was used.
If you arrived from one of our ads or campaign links and then order, the campaign and ad you came from are kept with the order, so we can see which ads lead to real orders. We do not send this to anyone, and it is never joined to the analytics identifier below.
What we collect automatically
Our analytics are first-party and cookieless. We record page views, product clicks, items added to the bag, and how long a page was visible, against a random per-tab identifier that is created when you arrive and destroyed when the tab closes. It is not tied to your name, your account or your device, and cannot be used to recognise you on a later visit.
With those events we store the page path without its query string, and the host a visitor arrived from, never the full referring URL. Where you arrive from a campaign link, the campaign tags, including which ad you came from, travel with the visit.
We also measure how quickly pages load for visitors, through our hosting provider, with no cookie and without the address’s query string.
Separately, and only if you say yes to its own question, Microsoft Clarity records how you move around the site. Clause 07 says exactly what it sees and how to turn it off.
Separately, and only if you say yes when the site asks, Meta’s advertising pixel records which pages and pieces you look at, what you add to your bag, and when you begin checkout and pay. If you then order, our server also tells Meta about the sale. Clause 07 says exactly what is sent and how to turn it off.
Our servers see your IP address on every request, as every web server does. We use it only to rate-limit abuse, held in memory and never joined to your account. The one exception: if you have said yes to the advertising cookie and you order, the IP address and browser of that checkout are kept with the order so the sale can be reported to Meta.
We do not collect financial account numbers, card numbers, CVVs or one-time passwords. We never ask for them, and you should never send them to us. We do not knowingly collect anything about your health, beliefs, caste, or any other sensitive category, and we ask you not to volunteer it.
Why we hold it, and on what basis
The Act lets us process personal data for the certain purpose you gave it for, and where a law requires it. Purpose by purpose, that is:
- Taking your order
- Confirming it, arranging payment, shipping it, and telling you where it is. Given for that purpose when you check out.
- Supporting you after it
- Returns, exchanges, refunds, repairs, replating and any complaint. The same purpose, continued.
- Running the Orbit
- Assigning your customer number and tier, applying member pricing, issuing and redeeming referral credits. Given when you take up the membership your first order carries.
- Legal obligations
- GST invoicing and tax records, and anything we must produce to a lawful authority. Required of us, whatever either of us would prefer.
- Keeping the site standing
- Rate-limiting, fraud and abuse prevention, and security. Necessary to provide the service you asked for.
- Understanding the site
- Anonymous, aggregate analytics, so we can see which pieces are looked at and which pages fail. No individual is identified in it.
- Marketing
- Only where you have said yes to it, separately. See clause 05.
- Measuring our ads
- Seeing which of our ads on Instagram and Facebook bring people who go on to order, including telling Meta about your order. Only with your consent to the advertising cookie, asked for separately. See clause 07.
- Fixing what gets in the way
- Watching recordings of how the site is used, to find what confuses people or fails. Only with your consent to Microsoft Clarity, asked for separately. See clause 07.
- Knowing which ads work
- Keeping the campaign and ad you came from with your order, so we can stop ads that do not lead to orders. It stays with us. See clause 02.
We do not sell your personal data and we do not rent it. If you accept the advertising cookie, Meta uses what it records to measure our ads and to show them to people likely to be interested, which can include you. If you do not, nothing about you reaches an advertiser.
Consent, and taking it back
Where we rely on your consent, we ask for it separately, in plain words, for a named purpose, and we do not bundle it into anything else. Saying no to marketing does not affect your order, your membership, or the price you pay.
You may withdraw a consent at any time, as easily as you gave it, by writing to legal@soliseparis.com or telling the concierge. We act on it promptly. Withdrawal does not undo what was lawfully done while the consent stood, and it does not reach data we must keep for a legal purpose, an invoice being the usual example.
This policy is available in English and, on request, in any language in the Eighth Schedule to the Constitution. Ask us and we will provide it.
WhatsApp, email and marketing
Placing an order is your consent for us to email you, and where needed to message you on WhatsApp, about that order: confirmation, your invoice, dispatch, delivery, and support afterwards. That is service communication, and it comes with the purchase.
Marketing is separate, and opt-in. We will not send you launches, offers or Orbit news on WhatsApp or by email unless you have said yes to that specifically. Reply STOP in the thread, use the unsubscribe link in any marketing email, or write to us, and it stops, while the messages your open orders need continue.
WhatsApp is operated by Meta under its own terms and privacy policy. What you send us there passes through its systems as well as ours, and we cannot change that. If you would rather not use it, order or write to us by email or telephone instead, and we will serve you exactly the same.
Claire, our assistant
Claire answers questions about our pieces on the site. What you type to her, her reply, the page you were on and the piece you were looking at are stored against the same throwaway per-tab identifier the analytics use, so that a question we answered badly can be found and put right, and so a message that needs a person can be picked up by one.
Your message is sent to Anthropic, whose model generates the reply. We reach it through Anthropic’s commercial API under a business account, whose terms do not permit what you send to be used to train the model. Where you are signed in, your Orbit tier is attached to the conversation so that Claire quotes you the right price, but your name, contact details and address are not.
She is a shop assistant, not a confidante. Please do not type anything into her that you would not put in an email to a shop, and never card details, passwords or one-time codes.
Cookies and what sits in your browser
We use one advertising cookie, Meta’s, and only if you say yes when the site asks. Say no, or never answer, and it never loads. Microsoft Clarity is asked about separately, and the same goes for it. Everything else here is ours and stays with us. What we use is:
- Sign-in cookies
- Set when you sign in, so that the site knows the session is yours. Strictly necessary. Clearing them signs you out.
- Per-tab session id
- A random string in your browser’s sessionStorage, used to count a visit and to keep a conversation with Claire together. Gone when the tab closes.
- Your bag
- The pieces you have added are kept in your own browser’s storage so they survive a refresh. They stay on your device until you clear them or check out.
- Meta pixel, if you allow it
- Meta’s _fbp cookie, and _fbc if you arrived from one of our ads, which last 90 days. They tell Meta which pages and pieces you viewed, what you added to your bag, and when you began checkout and paid. When you pay, our server also tells Meta about the order: its value and pieces, your email address and phone number in hashed form (a one-way code Meta matches against its own records, never readable text), and your IP address and browser. Never your name or delivery address. Meta may connect this to a Facebook or Instagram account you are signed in to, under its own privacy policy.
- Your answer
- Whether you said yes or no, kept in your browser so you are asked once, and recorded on our server with the date, the wording you saw and a random code, nothing else about you, so we can show what you agreed to. An order you place carries the same code. Cookie Settings, at the foot of every page, asks again; saying no there stops the pixel and removes its cookies.
- Microsoft Clarity, if you allow it
- Clarity’s _clck and _clsk cookies. It records your taps, scrolling and the pages you visit, and which ad you came from, so we can watch how the site is used and fix what gets in the way. What you type is never recorded, and your checkout, order, tracking and account pages and your conversations with Claire are hidden. Your answer is recorded the same way as the one above, and Cookie Settings asks again; saying no there stops it and removes its cookies.
You can clear all of it in your browser at any time. The site keeps working; you will simply be signed out and your bag will be empty.
Processing outside India
Some of the providers above operate outside India, so your data is processed outside India. We would rather tell you exactly where than leave you to wonder:
- Your account and orders
- Held at rest in our Supabase database in Singapore. That is where your name, contact details, address, order history and membership record live.
- The site itself
- Served by Vercel from its global network, so the request that draws a page may be handled at whichever location is nearest you.
- Order emails
- Sent through Resend, which processes them in Japan.
- Assistant messages
- Sent to Anthropic in the United States to generate a reply, and stored back in Singapore with the rest.
- Advertising events
- If you accept the advertising cookie, sent to Meta, which processes them in the United States and elsewhere.
- Site recordings
- If you say yes to Clarity, processed by Microsoft outside India.
The Act permits transfer to any country the Central Government has not restricted. None of the above is restricted as at the date of this policy, and we will stop or move any transfer that later becomes so.
Wherever it is processed, our obligations to you under this policy and under the Act travel with it. A processor abroad holds your data on our instructions and for our purposes only.
How long we keep it
We keep personal data only as long as the purpose it was given for lasts, and as long as the law obliges us to keep the records that contain it. In practice:
- Orders and invoices
- Kept for the period tax and company law require, currently eight years from the end of the financial year. We cannot erase these on request.
- Account and membership
- Kept while your membership stands. Your customer number and tier are the membership, so keeping them is the point of it.
- Referral credits
- Kept while they can still be earned, matured or spent, and then with the order record that used them.
- Assistant conversations
- Kept while they are useful for improving answers and resolving what was escalated, then deleted.
- Analytics events
- Anonymous from the moment they are written, and never linked back to a person.
- Consent records
- Kept while the consent stands and for three years after you change or withdraw it, so we can show what you agreed to.
When you close your account or leave the Orbit, we erase what we are not required to keep, and keep the rest only for that requirement.
Your rights
Under the Act you may ask us to:
- Tell you what we hold, what we have done with it, and who we have shared it with
- Correct, complete or update it, where it is wrong or out of date
- Erase it, where we no longer need it and no law makes us keep it
- Withdraw a consent you have given
- Nominate someone to exercise these rights for you if you die or cannot act
- Complain, and have that complaint answered
Write to legal@soliseparis.com from the address on your account, or ask the concierge. We do not charge for any of this, and we answer within 30 days. If a request would let one person reach another’s data, we will verify who you are before we act.
Through a consent manager
The Act lets you give, manage, review and withdraw consent through a Consent Manager registered with the Data Protection Board, rather than dealing with each company separately.
We accept and act on requests routed through a registered consent manager on your behalf, on the same terms and in the same 30 days as a request made to us directly. We will verify that the manager is registered and that it genuinely acts for you, and we will not treat a request as any less valid for having come that way.
The Act also asks something of you: give us information that is true, do not impersonate anyone else, and do not file a false or frivolous complaint.
If you are not satisfied with how we have handled a request, take it to our grievance officer under clause 15. If you are still not satisfied, you may complain to the Data Protection Board of India.
Children
Our site and our shop are for adults. We do not knowingly collect the personal data of anyone under 18, and we do not track children or direct advertising at them.
Where a person under 18 is to be given a piece, the order belongs to the parent or guardian placing it, whose data we hold rather than the child’s. If you believe a child has given us data, write to us and we will delete it.
Security, and if something goes wrong
We keep what we hold behind reasonable safeguards: access to the database is limited to our servers and to the people who need it, records are protected by row-level rules so one customer’s account cannot read another’s, sign-in is delegated to an established provider, and the site is served over an encrypted connection.
No system is perfect, and we will not pretend otherwise. If a breach affects your personal data, we will tell you and the Data Protection Board, as the Act requires, and we hold ourselves to a clock rather than to a vague promise of promptness:
- You
- Told without undue delay once we know a breach has affected your data, in plain words: what happened, what data was involved, what it may mean for you, what we are doing, and what you can do.
- The Board
- Intimated without delay on becoming aware, and given the fuller account within 72 hours, or such longer period as the Board allows on request.
We will tell you even where the breach turns out to be contained, and we will not wait for certainty about the cause before telling you it happened.
Please help us: keep your email account secure, do not forward your sign-in link, and tell us at once if you think your account has been used by someone else.
Changes to this policy
We will update this policy when what we do changes. The date at the head of the page shows when it last did. Where a change is material, we will tell you before it takes effect, and where it needs your consent, we will ask for it rather than assume it.
Contact and grievances
For anything about your data, or anything else, reach us on any of the below. We reply to every enquiry within 48 hours.
- Telephone / WhatsApp
- +91-7248996318 · WhatsApp +91 7248996318
- Postal
- Solise Designs Private Limited, 14 Blue Hills, NDA Pashan Road, Bavdhan, Pune 411021, Maharashtra, India
Grievance officer
The officer named below answers data complaints as well as consumer ones, and is your point of escalation before the Data Protection Board.
- Name
- Neeraj Varma
- Designation
- Grievance Officer
- Telephone
- +91-7248996318
- Acknowledgement
- Within 48 hours of receipt, with a ticket number.
- Resolution
- Within 30 days of receipt.
The agreement this policy sits inside is our Terms & Conditions. Shipping, returns and company details are in our Policies.