Draft — to be reviewed by the store’s legal adviser before launch. Replace the details in [brackets].
[Registered business name] (“we”) respects your privacy. This policy explains what personal data we collect through this website and how we use it, in line with the Digital Personal Data Protection Act, 2023.
What we collect
- Details you give us: name, email, mobile number, delivery address, and messages you send.
- Order details: items purchased, amounts and payment status. Card and UPI details are handled by our payment partner (Razorpay) and never reach our servers.
- Basic analytics about how the website is used, collected with cookies.
How we use it
- To process and deliver your orders and send order updates by email, SMS or WhatsApp.
- To reply to your enquiries.
- To send offers and new-collection news — only if you have given consent. You can withdraw consent at any time by using the unsubscribe link, replying STOP on WhatsApp, or writing to us.
Sharing
We share data only with partners who help us serve you (payment gateway, courier, messaging and email providers), and only as needed. We never sell your data.
Your rights
You may ask to access, correct or erase your personal data, or withdraw consent, by writing to our Grievance Officer at [email]. We respond within 30 days.
Retention
Order and invoice records are kept for the period required by GST law. Marketing data is deleted when you withdraw consent.
