Privacy Policy

We collect only what we need to run the store:

• Account: your name, email address, phone number (optional), and a securely hashed password. If you sign in with Google, we receive your name and email address from Google instead of a password.
• Addresses: the shipping and billing addresses you save, including the recipient's name and phone number.
• Orders: the items you buy, order amounts, coupons used, payment method, payment status, and the history of cancellations, returns and exchanges.
• Cart and wishlist: the products you add, so they're saved across visits.
• Messages and sign-ups: your name, email and message when you use our contact form, and your email address if you subscribe to our newsletter.
• Pincode checks: pincodes you enter to check delivery, which are sent to our courier partner to look up availability.

• To create and secure your account and keep you signed in
• To process payments, and to pack, ship and deliver your orders
• To handle cancellations, returns, exchanges and refunds
• To send order confirmations, shipping updates, one-time passwords and other account emails
• To respond to your messages and support requests
• To send our newsletter, if you've subscribed
• To prevent fraud and misuse of our website

Online payments are processed by Cashfree Payments. Your card, UPI and bank details are entered with and handled by Cashfree. We never see or store them. We only keep a record of the transaction, such as its reference ID, amount and status.

We never sell your personal data. We share it only with service providers who help us run the store, and only what each one needs:

• Cashfree to process online payments
• Delhivery to check delivery availability and deliver your order (your name, phone number and shipping address)
• Resend to send our emails
• Google if you choose to sign in with your Google account
• Hosting and infrastructure providers that store our data and run our website

We may also disclose information where required by law, or to protect our rights and the safety of our customers.

We use a single essential cookie to keep you signed in. It expires after 24 hours. We don't use advertising or third-party tracking cookies. See our Cookie Policy for details.

We keep your account information for as long as your account is active. We retain order and payment records for as long as required by Indian tax and accounting laws, even if you close your account. Other information is deleted once it's no longer needed for the purpose it was collected for.

Passwords are stored as one-way hashes, never in plain text. Your sign-in session is protected with a secure, HTTP-only cookie, and data is sent over encrypted (HTTPS) connections. No system is completely secure, but we take reasonable measures to protect your information.

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you
• Correct or update inaccurate or incomplete data
• Have your data erased, except where we must keep it by law
• Withdraw consent, for example to our newsletter
• Nominate someone to exercise these rights on your behalf
• Have your grievances addressed

You can update your name, phone number, password and saved addresses any time from your Account page. To request a copy of your data, delete your account, or unsubscribe from our newsletter, contact us using the details below.

Our website is intended for people aged 18 and over. We don't knowingly collect personal data from children. If you believe a child has given us their data, please contact us and we'll delete it.

We may update this policy from time to time. The “Last updated” date above shows when it last changed. Significant changes will be highlighted on this page.

For questions, requests or complaints about your personal data, reach out via our Contact Us page. We'll respond as soon as possible. If you're not satisfied with our response, you may file a complaint with the Data Protection Board of India.