Privacy policy
Privacy policy (under India's Digital Personal Data Protection Act, 2023) Version 1 · Last updated: 8 October 2026
Who we are This website is run by the store named in the footer ("we"). We decide why and how your personal data is used. Under the Act that makes us the "data fiduciary".
What we collect When you order: your name, mobile number, delivery address, e-mail (optional) and any note you write. When you send an enquiry or a privacy request: your name, phone or e-mail and your message. We do not ask for your date of birth, identity documents or card details. UPI payments go straight to our own UPI account; we only see the payment screenshot you choose to send us on WhatsApp.
Why we use it To take, pack, deliver and support your order; to answer your enquiries; to keep the tax and accounting records the law requires; and, only if you tick the separate optional box, to send you offers by WhatsApp or phone. You can withdraw that choice at any time and it will not affect your orders.
Children Orders must be placed by a person who is 18 or older, or by a parent or guardian on a child's behalf. We do not knowingly collect children's data, and we do not track or advertise to children.
Who can see your data Our staff who need it for your order; delivery partners (name, address and phone only); and our website and database providers, who store the data for us on servers in India under contract. If you accept analytics cookies, Google Analytics receives anonymous visit statistics. We never sell your data.
How long we keep it Order records: 8 years, because tax and accounting laws require it (we remove your e-mail and notes earlier on request). Enquiries and requests: 2 years. Marketing choices: until you withdraw them. After that we delete or anonymise the data.
Your rights You can ask us to show you the data we hold, correct it, delete it, stop using it for messages, name someone to act for you, or make a complaint. Use the "Your data rights" page of this website. We reply within 30 days. If you are not satisfied with our answer you may complain to the Data Protection Board of India.
Security Data is encrypted in transit and at rest by our providers, access inside the store is limited by role and recorded, and we keep activity logs without customers' phone numbers or addresses. If a data breach affecting you happens, we will tell you and the Board as the law requires.
Cookies The website itself only stores your cart on your own device. Visitor statistics (Google Analytics) start only after you tap Accept on the cookie notice, and you can change your mind from "Cookie settings" in the footer.
Changes If we change this policy in an important way we will update the version and date above and ask again where the law requires.
