Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Contact information: name, email address, phone number, shipping address
• Order information: products ordered, quantities, delivery instructions
• Payment information: we do not store your full UPI transaction details. Payment is processed directly through the UPI gateway, and we only retain the order reference and payment status
• Communications: messages you send us via email, WhatsApp, or Instagram direct messages

1.2 Information Collected Automatically

• Device and browser information: IP address, browser type, operating system
• Usage data: pages visited, time spent on pages, referring URLs
• Cookies and similar technologies: used to maintain your cart and wishlist across page reloads

2. How We Use Your Information

We use your personal information to:

• Process and fulfill your orders, including shipping and delivery
• Communicate with you about your orders, payments, and delivery status
• Respond to your inquiries and provide customer support
• Send marketing communications about new products and offers (only with your explicit consent — you can opt out at any time)
• Improve our website, products, and services
• Detect, prevent, and address technical issues, fraud, or security concerns
• Comply with our legal and regulatory obligations

3. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following grounds:

• For performance of a contract: processing your orders and delivering products you have purchased
• For compliance with legal obligations: maintaining records for tax and consumer protection purposes
• With your consent: sending marketing communications and using cookies for non-essential purposes
• For legitimate interests: improving our services, preventing fraud, and ensuring website security

4. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We share your information only with the following categories of recipients:

• Payment processors: UPI gateway providers to process your payments securely
• Shipping partners: courier services to deliver your orders
• Service providers: Supabase (database hosting), Vercel (web hosting) — all of whom are bound by confidentiality obligations
• Law enforcement: if required by law, court order, or government authority

5. Data Retention

We retain your personal data for:

• Order data: 7 years (for tax compliance and consumer dispute resolution)
• Marketing data: until you opt out or withdraw consent
• Customer support communications: 2 years from the last interaction
• Anonymous usage data: indefinitely (cannot be used to identify you)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Secure database with Row-Level Security (RLS) policies
• Server-side handling of sensitive operations (admin access, payment verification)
• Limited access to personal data — only authorized personnel
• Regular security reviews and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Under the DPDP Act, 2023, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to correction: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your data (subject to legal retention requirements)
• Right to nominate: nominate another individual to exercise your rights in case of death or incapacity
• Right to withdraw consent: opt out of marketing communications at any time
• Right to grievance redressal: file a complaint with our Grievance Officer

To exercise any of these rights, contact us at bagyavathisarees@gmail.com or WhatsApp +91 94868 59807. We will respond within 30 days.

8. Cookies

We use essential cookies to maintain your shopping cart and wishlist across page reloads. These cookies are necessary for the website to function and cannot be disabled. We do not use third-party advertising cookies or tracking pixels.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.

10. Third-Party Links

Our website contains links to third-party platforms (Instagram, YouTube, UPI payment gateways). We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting a notice on our website or sending an email. Your continued use of the website after changes are posted constitutes acceptance of the updated policy.

12. Grievance Officer

As required under the DPDP Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020, we have designated a Grievance Officer to address privacy-related concerns:

We will acknowledge your complaint within 48 hours and resolve it within 30 days, as required by law.