Privacy Policy

Introduction

We respect your privacy and handle your personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable laws. This policy explains what we collect, why, how we use and protect it, and the choices and rights you have. It applies to this website and the orders and communications that flow through it.

What we collect

• Identity and contact details — your name, phone number, WhatsApp number, email address, and delivery and billing addresses.
• Order information — the products you buy, order value, invoices, and your order and communication history with us.
• Verification data — the one-time codes we send to sign you in, and the phone number they are tied to.
• Payment information — we do not store your card, UPI, or bank details; these go directly to our payment partner. We keep only the transaction reference and status needed to confirm and support your order.
• Technical and usage data — device, browser, IP address, and how you use the site, collected through cookies and similar tools to keep the site working and to improve it.

How we use your data

• To process, pack, deliver, and support your orders, and to issue invoices.
• To sign you in and keep your account and cart secure.
• To send order and delivery updates over WhatsApp, SMS, or email.
• To handle returns, refunds, and grievances, and to verify claims fairly.
• To prevent fraud, misuse of our return and refund systems, and abuse of the site.
• To improve our products, range, and website, and — only with your consent — to send offers and marketing.
• To meet our legal, tax, and food-safety obligations.

Consent and legal basis

We process your data on the basis of your consent and for the legitimate purposes permitted by the DPDP Act — chiefly to fulfil the order you asked us to place. Where we rely on consent, such as for marketing, you may withdraw it at any time; withdrawing it does not affect processing already carried out, and some data must be kept to complete an order or meet a legal duty.

Payment data

Payments are handled by PCI-DSS compliant third-party payment gateways over encrypted connections. Your full card number, CVV, UPI PIN, and banking passwords are entered on the payment partner's secure interface and are never shared with or stored by us.

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your cart, understand how the site is used, and improve it. You can control or clear cookies in your browser settings, though some features may not work properly without them.

Who we share it with

We do not sell your personal data. We share it only with the partners who help us run the service, and only to the extent they need it:

• Logistics and courier partners, to deliver your order and share tracking updates.
• Payment gateways, to process and verify payments and refunds.
• Messaging providers (including WhatsApp / Meta), to send verification codes and order updates.
• Professional and IT service providers who support our operations under confidentiality obligations.
• Government or law-enforcement authorities, where we are legally required to disclose.

How long we keep it

We keep personal data only for as long as needed for the purpose it was collected, or as long as the law requires — for example, invoices and tax records for the period mandated by Indian tax law. After that, it is deleted or anonymised.

How we protect it

We use reasonable technical and organisational safeguards — encryption in transit, access controls, and secure infrastructure — to protect your data against unauthorised access, loss, or misuse. No method of transmission over the internet is perfectly secure, but we work to keep our safeguards current and will notify you and the authorities of a significant data breach as required by law.

Your rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Correct or update inaccurate or incomplete data.
• Request erasure of your data where it is no longer needed and the law allows.
• Withdraw consent you previously gave, such as for marketing.
• Nominate another person to exercise your rights in the event of death or incapacity.
• Raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if unresolved.

Children's data

Our website and products are meant for adults aged 18 and over. We do not knowingly collect data from children. If we learn that we have collected a child's data without verifiable consent from a parent or guardian, we will delete it.

Marketing communications

We send order-related messages because they are necessary to your purchase. Promotional messages are sent only if you have opted in, and every one includes a simple way to opt out. You can also tell us at any time to stop marketing to you.

Links to other sites

Our site may link to third-party sites with their own privacy policies. We are not responsible for their practices; please read their policies before sharing data with them.

Changes to this policy

We may update this policy as our practices or the law change. The version on this page, with the “Last updated” date above, is the current one. Material changes will be highlighted on the site.

Grievance Officer

In line with the DPDP Act and the Consumer Protection (E-Commerce) Rules, 2020, we have appointed a Grievance Officer to address your data and service concerns. Their contact details are published on our Contact page and in the site footer. We aim to acknowledge every grievance within 48 hours and resolve it within the timelines the law requires.