Privacy Policy

1. What personal data we collect

• Account details: your name, email address and mobile number.
• Order and delivery details: shipping and billing address, PIN code, and — for a GST invoice — your business name and GSTIN if you provide one.
• Payment information: processed by our payment provider. We receive confirmation of payment, not your full card details.
• Usage data: pages viewed, boards saved or compared, and basic device/browser information, used to run and improve the store.
• Support messages: anything you send us when you contact support or report a problem.

2. Why we use it, and our legal basis

We process your data for specified, lawful purposes and only as needed for those purposes:

• To create your account and let you sign in.
• To take payment, fulfil and deliver your order, and issue a GST-compliant tax invoice.
• To provide support and respond to your questions or complaints.
• To send order updates (transactional messages).
• To keep the store secure and prevent fraud.
• To meet legal and tax obligations (for example, retaining invoices).
• For marketing messages only where you have given consent, which you can withdraw at any time.

3. Consent

Where we rely on your consent, we ask for it clearly, for a specific purpose, and you may withdraw it at any time — withdrawing is as easy as giving it. Withdrawing consent does not affect processing already carried out, and some processing needed to complete an order you placed or to meet the law may continue.

4. Sharing your data

• Service providers who help us run the store — payment gateway, delivery/courier partners, hosting and communication tools — and only the data they need for their task.
• Authorities, where we are legally required to share information.
• We do not sell your personal data.

5. How long we keep it (retention)

We keep personal data only for as long as needed for the purpose we collected it, or as required by law. For example, tax invoices are retained for the period required under Indian tax law. When data is no longer needed and there is no legal reason to keep it, we delete or anonymise it.

6. Your rights

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Ask us to correct or update inaccurate or incomplete data.
• Ask us to erase your data, including deleting your account, where it is no longer needed and the law does not require us to keep it.
• Withdraw consent for processing based on consent.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.

You can delete your account from your account settings, or by writing to our grievance officer below. We will act on valid requests within a reasonable time.

7. Children's data

The store is intended for adults. We do not knowingly process the data of children without verifiable parental consent as required by the DPDP Act.

8. Keeping your data safe

We use reasonable security safeguards — encryption in transit (HTTPS), access controls and trusted providers — to protect your data. If a personal data breach occurs, we will notify the Data Protection Board and affected users as required by law.

9. Grievance officer

For any question, request or complaint about your data, contact our Grievance Officer:

• Name: [Grievance Officer name — to be appointed]
• Email: [grievance@ placeholder — to be confirmed]
• Address: [registered business address — to be confirmed]

If your complaint is not resolved, you may escalate to the Data Protection Board of India.