Privacy Policy

Last updated

We collect the least we can, we never sell your data, and we never see your card details. This page explains exactly what happens to your information.

Who is responsible

, , is responsible for your personal data. Contact us at or .

What we collect

• To fulfil an order: your name, email, phone number and delivery address.
• If you create an account: your email and a securely hashed password. We never store your password in readable form.
• Your orders and wishlist, so you can see them again.
• Basic technical data your browser sends, such as approximate location and device type.

What we never collect

We do not receive or store your card number, UPI PIN, CVV or netbanking credentials. Payment details go directly to Razorpay, a PCI-DSS compliant payment provider. We only receive confirmation of whether a payment succeeded and a reference number.

Why we use it

To process and deliver your order, to contact you about it, to handle returns and refunds, to run your account and wishlist, to prevent fraud, and to meet our tax and accounting duties.

We only send marketing email if you asked us to, and every one has an unsubscribe link.

Who else sees it

We share only what is necessary, with:

• Razorpay — to take payment.
• Supabase — our database and login provider. Your data is stored on servers in Mumbai, India.
• Netlify — hosts this website.
• Courier partners — your name, address and phone, so they can deliver.
• Authorities — where the law requires it.

We do not sell or rent your personal data to anybody, ever.

Cookies and local storage

We do not use advertising or tracking cookies. Your browser stores your bag so it survives a refresh, and a login token if you sign in. Clearing your browser data removes both.

How long we keep it

Order records are kept as long as tax and accounting law requires (generally eight years in India). Account and wishlist data is kept until you ask us to delete it.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you may ask us to access, correct, or erase your personal data, or withdraw consent for optional processing. Write to and we will respond within 30 days. We may need to verify who you are first, and we may keep records we are legally required to keep.

Security

Data is transmitted over HTTPS and access is restricted so that a signed-in customer can only ever read their own orders and wishlist. No system is perfectly secure, but we take this seriously and will tell you promptly if a breach affects you.

Children

This site is not intended for children under 18. We do not knowingly collect their data.

Grievances

If you are unhappy with how we handled your data, write to with “Privacy grievance” in the subject line and we will respond within 30 days.

Changes

We will update the date at the top of this page whenever this policy changes.