Privacy Policy

1 — Information We Collect

Personal information you provide

When you create an account, place an order, subscribe to our newsletter, contact support or interact with the website, we may collect:

• Name, email address, phone number and delivery address
• Payment information (processed securely by our payment gateway partners — we do not store full card numbers)
• Order history and product preferences
• Account credentials (email and hashed password or third-party sign-in identifier)
• Communications you send us (support emails, chat messages, feedback)

Information collected automatically

When you browse the website, we may automatically collect:

• Device and browser information (type, operating system, screen resolution)
• IP address and approximate geographic location
• Pages visited, time spent, clicks, scrolls and other usage data
• Referral source (the website or link that brought you here)
• Cookies and similar tracking identifiers (see Section 5 below)

2 — How We Use Your Information

We use collected information to:

• Process and fulfil your orders, including shipping, payment processing and invoice generation
• Communicate with you about orders, deliveries, returns and customer-support requests
• Maintain and improve website functionality, performance and security
• Personalise your shopping experience (product recommendations, saved preferences)
• Send promotional emails and marketing communications — only if you have opted in, and you may unsubscribe at any time
• Detect and prevent fraud, unauthorised transactions and other illegal activities
• Comply with legal obligations and enforce our terms

3 — Information Sharing & Disclosure

We do not sell, rent or trade your personal information. We may share it with:

• Payment processors — Razorpay or other gateways that securely handle transactions on our behalf
• Logistics partners — courier and shipping providers who need your name, address and phone number to deliver orders
• Analytics and infrastructure providers — services that help us understand site usage and maintain performance (e.g. hosting, CDN, error-tracking)
• Legal and regulatory authorities — when required by law, court order or to protect rights, safety or property

Third-party service providers are contractually required to use your data only for the purpose of providing their service and to maintain appropriate security measures.

4 — Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse or alteration. These include encrypted connections (HTTPS), secure authentication, access controls and regular security reviews.

While we strive to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we take commercially reasonable steps to safeguard your information.

5 — Cookies & Tracking Technologies

We use cookies and similar technologies to provide essential website functionality, remember your preferences, authenticate your session and analyse site traffic.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect website functionality.

6 — Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements.

• Order, invoice and refund records are retained for the period required under Indian tax and accounting laws (generally up to 8 years), as permitted by Section 8(7) of the Digital Personal Data Protection Act, 2023 — even after you delete your account
• Account data (profile, saved addresses, wishlist, cart, reviews) is retained while your account exists, including while it is deactivated, and is erased when you delete your account
• Newsletter subscription is retained until you unsubscribe or delete your account
• Consent records (when you accepted our terms) are kept while your account exists, so we can show that consent was given

7 — Your Rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• Access a summary of the personal data we hold about you and how it is processed
• Correct and update inaccurate or incomplete information — most of it directly from My Account
• Erase your personal data by deleting your account, subject to the legal retention described in Section 6
• Withdraw consent at any time, as easily as you gave it — for example via the Unsubscribe link in any newsletter
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity
• Grievance redressal through our Grievance Officer (Section 10), and, if unresolved, a complaint to the Data Protection Board of India

Signed-in customers can do most of this themselves under My Account → Privacy & Data: turn marketing emails on or off, deactivate the account (a reversible pause that keeps your data), or delete it permanently. Deletion is available once no order or refund is still in progress. For anything else, contact us using the details in Section 10.

8 — Children's Privacy

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you are under 18, you may use the website only with the involvement and consent of a parent or legal guardian. If we become aware that we have collected data from a child without appropriate consent, we will take reasonable steps to delete it.

9 — Changes to This Policy

We may update this Privacy Policy from time to time by publishing a revised version on the website and updating the effective date. Material changes will be communicated through a website notice or email where appropriate. Your continued use of the website after changes are published constitutes acceptance of the updated policy, subject to applicable law.