Privacy Policy
Last updated: 25 August 2026 [OWNER: confirm before launch]
The short version
We collect what an order needs: your name, phone, email, address, and what you bought. We do not sell it, we do not run ad trackers, and you can ask us to delete it.
What we collect
- Order data — name, phone, email, delivery address, order items and amounts. Needed to fulfil your order and keep required financial records.
- Payment data — handled entirely by Razorpay. We store only the payment ID, amount and status, never card or UPI credentials.
- Reviews — the name and text you submit with a review. Verified-purchase status is checked by matching your order email; the email itself is not shown publicly.
- Newsletter — your email, only if you ticked the consent box at checkout or signed up in the footer.
- Server logs — our host (Cloudflare) keeps standard request logs for security and uptime.
What we do not do
- No advertising pixels or social-media trackers.
- No selling or renting of customer data.
- No accounts are created unless you ask for one.
Who we share with
- Razorpay — payment processing (they act as the merchant of record for the transaction).
- Our courier partner — name, address and phone on the shipping label, nothing more.
- Resend — order confirmation and dispatch emails, and the newsletter if you opted in.
- Law enforcement or tax authorities, where Indian law requires it.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask us to:
- Send you a copy of your data;
- Correct anything wrong in it;
- Delete it — except what tax law makes us keep (basic invoice records);
- Withdraw newsletter consent anytime, with one click in every email.
Data retention
Order records are kept as long as tax rules require. Newsletter data is deleted immediately on unsubscribe. Everything else goes when you ask.
Security
The site runs entirely on HTTPS. Admin access is password-gated and rate-limited. Payment secrets live in the Cloudflare secret store, not in the codebase.
Contact
Questions, data copies, deletions — email [OWNER: privacy/grievance email] or write to [OWNER: registered address]. We acknowledge within 48 hours.