Last updated: 20 October 2026
What we collect
This policy follows India's Digital Personal Data Protection Act, 2023. We collect only what we need to run the shop.
- Account details: your name, email address, phone number and password (stored only in scrambled form).
- Delivery details: the addresses you save or enter at checkout.
- Order details: what you bought, when, the amount, any coupon used, and the order status.
- Your cart, as you build it.
- Messages you send through the contact page, and your email if you sign up for our newsletter.
- Product reviews you choose to write.
We do not see or store your card number, UPI PIN or netbanking password. Those go straight to our payment provider.
How we use it
We use your data to:
- create and secure your account, and let you sign in;
- take, pack, deliver and support your orders, including refunds and replacements;
- reply to your messages;
- send newsletters, only if you signed up, and you can unsubscribe at any time;
- keep the site safe and prevent fraud or misuse.
Our legal basis is your consent (for example, when you create an account, post a review or join the newsletter) and the need to carry out the order you placed with us. We do not sell your data.
Payments
Online payments (UPI, cards and netbanking) are handled by Razorpay on its own secure page. Razorpay receives the details needed to process your payment and tells us whether it succeeded. Cash on delivery, where available, is paid to the courier and we store only the order itself. Razorpay's own privacy policy applies to the data it handles.
How long we keep it
- Account details: for as long as your account exists, and until you ask us to delete it.
- Order and payment records: up to 8 years, because tax and accounting rules require it.
- Contact messages: up to 2 years after we answer.
- Newsletter email: until you unsubscribe.
Your rights
You have the right to:
- ask for a summary of the data we hold about you;
- correct data that is wrong or out of date (most of it you can edit in your account);
- ask us to erase your data, except what we must keep by law;
- withdraw your consent at any time, for example to stop the newsletter;
- make a complaint to us, and if we do not resolve it, to the Data Protection Board of India.
To make a request or raise a grievance, send a message from our contact page with the subject "Data request". We will reply within 30 days.
Children
This site is meant for adults. We do not knowingly collect data from anyone under 18. If you think a child has given us their data, tell us and we will delete it.
Security
We use encrypted connections, store passwords only in scrambled form and limit who can see order data. No system is perfectly safe, so please choose a strong password and keep it private.
Changes to this policy
If we change this policy, we will post the new version here and update the date at the top. Material changes will also be shown on the site.
Questions? Write to us from the contact page. This page explains how we work and is not legal advice.