Privacy policy

What we collect

Account details: name, email address, phone number and password (stored only as a one-way hash).

Order details: delivery addresses, the items you buy, GST invoices and order history.

Payment details are collected by Cashfree Payments on their hosted checkout. Card numbers, UPI IDs and bank details never reach our servers; we receive only a payment reference, the amount and the outcome.

Technical data: IP address and browser type in server logs, used for security such as rate limiting and fraud checks.

Why we use it

To take payment, pack and deliver your order, issue a GST invoice, handle returns and refunds, and send order emails (confirmation, shipping, delivery, refund).

To keep accounts safe: email verification, account lockout after repeated failed logins, and audit logs of staff actions.

We do not sell personal data and we do not use it for advertising.

Who we share it with

Cashfree Payments (payment processing and refunds), our courier partners (name, address and phone for delivery), and our email provider (order notifications). Each receives only what it needs for that purpose.

How long we keep it

Order, invoice and payment records are kept for eight years as required by GST and accounting law. Account data is kept while your account is active; you can ask us to delete it, after which only the records we must keep by law remain.

Your rights

You can access and correct your account details from your account page, request a copy or deletion of your data, and withdraw consent for optional communications at any time by writing to the support email in the footer. We respond within 30 days.

Security

Connections are encrypted (HTTPS), passwords are hashed, access to staff tools is role-based and logged, and payment webhooks are cryptographically verified before any order changes state.