Privacy policy

This page explains what data we collect, why, and what you can do about it. We try to keep it short and in plain English. If anything is unclear, message us on WhatsApp at +91 8329 311709.

We honour your rights under India's Digital Personal Data Protection Act, 2023 (DPDP).

What we collect

• Phone number — for sign-in (we send a one-time code) and to reach you about your order.
• Name, email (optional), shipping address — for delivery and order receipts.
• Order history — what you bought, when, and the amount, so we can help with returns and warranty.
• Anonymous browsing analytics via Vercel Analytics. No cookies, no personal IDs, no third-party tracking.

What we don't collect

• Card or UPI details. Razorpay handles payment in their own secure window — your card never touches our servers.
• Location, contacts, microphone, or camera.
• Anything for advertising. We don't run ads, share data with ad networks, or sell anything to anyone.

Why we collect it

• To process orders and deliver pieces to you.
• To message you about order status (placed, packed, shipped, delivered).
• To handle returns, exchanges, and warranty repairs.
• To honour our tax / accounting obligations under Indian law.

How long we keep it

• Active profile and addresses: until you delete your account.
• Order records: 7 years from the order date (statutory requirement).
• One-time codes (OTPs): discarded after verification, within 5 minutes.
• Browsing analytics: 30 days, IP-truncated.

Your rights

You can, at any time:

• See the data we hold about you — sign in and visit /account.
• Correct your details — same place.
• Delete your account — sign in, scroll to the bottom of /account, click Delete account. We pseudonymise old orders (so your name and number disappear) and remove your profile, addresses, and login. Order numbers and amounts are kept for accounting; nothing identifying you remains.
• Withdraw consent for any future communications — message us on WhatsApp.

Who we share data with

Only the providers we need to run the shop:

• Razorpay — handles your payment. They have their own privacy notice.
• Supabase — stores your account and orders (Mumbai, India region).
• MSG91 — sends the one-time code to your phone for sign-in.
• Resend — sends order confirmation and shipping emails.
• Couriers (Delhivery / India Post) — for delivery, with the address you provided.

We don't share your data with anyone else, ever.

Security

Data is stored in a Supabase Postgres database in Mumbai, with row-level security so customers can only access their own records. Payment data is not stored on our servers — Razorpay handles it directly. The site uses HTTPS exclusively, and we use rate limits to protect against abuse.

Children

The site is intended for users aged 18 and over. If you're under 18, please ask a parent or guardian to make purchases on your behalf.

Updates to this policy

If we change anything material, we'll bump the "Last updated" date at the top and, if you have an active account, send you a note.

Contact / grievance officer

Sheetal Chincholkar is the grievance officer for any privacy queries. Reach her on WhatsApp at +91 8329 311709, or write to her at the shop address (visit page).