Privacy Policy

We collect only what we need to run the store and fulfil your orders:

• Account details — your name, email address, and (optionally) phone number when you register.
• Order and delivery details — the shipping address you provide at checkout, along with your order history.
• Payment information — processed entirely by our payment gateway. We receive only a transaction reference and payment status. We never see or store your full card number, UPI PIN, CVV, or net-banking credentials.
• Content you submit — product reviews, wishlist items, and any message you send our support team.
• Technical data — IP address and basic request information, recorded in our server logs for security and debugging.

• To process, fulfil, and deliver your orders.
• To send transactional emails — order confirmations, status updates, and password resets.
• To provide customer support and respond to your enquiries.
• To detect, prevent, and investigate fraud or abuse of the service.
• To meet our legal, tax, and accounting obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We share the minimum necessary data with the providers that operate parts of our service:

• Razorpay — payment processing. Your payment details go directly to Razorpay and are handled under their own privacy policy and PCI-DSS compliance.
• Email delivery provider — to send transactional email such as order confirmations and password resets.
• Hosting and database providers — to host the website and securely store order and account records.
• Delivery partners — your name, address, and phone number, so your order can be delivered.

We use a small number of strictly necessary cookies. The most important is an authentication cookie that keeps you signed in; it is HttpOnly, meaning scripts running in your browser cannot read it. We also store a temporary identifier so that a guest shopping cart survives between visits. Blocking these cookies will prevent sign-in and checkout from working.

• Passwords are stored only as salted bcrypt hashes — never in plain text, and never recoverable by us.
• Traffic between your browser and our servers is encrypted with HTTPS.
• Payment credentials never touch our servers; they go directly to Razorpay.
• Access to production data is limited to those who need it to operate the store.

No system can be guaranteed perfectly secure, but we take reasonable technical and organisational measures to protect your information.

We keep your account information for as long as your account is active. Order, invoice, and payment records are retained for as long as required by Indian tax and accounting law, even if you later close your account.

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:

• Access the personal data we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your account and associated personal data, except records we must retain by law.
• Withdraw consent for non-essential communications at any time.

To exercise any of these rights, write to us at [support@yourdomain.com].

Our store is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

We may update this policy from time to time. The revision date at the top of this page always reflects the current version, and material changes will be notified on this page.

In accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, the contact details of our Grievance Officer are:

[Officer Name]
[Your Registered Business Name]
[Building / Street], [Area / Landmark], [City], [State], [PIN Code], India
Email: [grievance@yourdomain.com]
Phone: [+91 XXXXX XXXXX]

We aim to acknowledge every grievance within 48 hours.