Privacy policy
What we collect, why, how long we keep it, and the rights you have over it.
Last updated September 2026
What we collect and why
We collect only what an order needs: your name, delivery address, phone number and email; what you ordered; and payment status. Payment card details are never stored by us — they are handled by our payment gateway, which is PCI-DSS compliant.
We use a phone number as your primary identity because that is how ordering and delivery actually work in India. It is used to verify you at login, to send order updates, and to let a courier reach you.
Your rights
Under the Digital Personal Data Protection Act 2023 you may ask what personal data we hold about you, ask us to correct it, and ask us to erase it. Write to consumer care and we will respond.
Erasure has one limit: invoices and tax records must be retained for the statutory period even if you ask us to delete your account. In that case we restrict the record rather than deleting it, and delete it when the retention period ends.
[VERIFY] A named Data Protection Officer and the consent-notice wording must be confirmed before launch.
Messaging
Transactional messages about an order you placed are sent without separate consent because they are part of fulfilling the order. Marketing messages are sent only if you opt in, and every one carries a way to stop.