Privacy Policy

Information we collect

When you place an order, we collect your name, phone number, email address, and delivery address. If you create an account, we store your email and order history — including saved addresses from past orders, so you don’t need to re-enter them. If you verify your phone number by OTP at checkout, we confirm the code through our SMS/verification provider but don’t store the OTP itself. If you subscribe to our newsletter, we store the email address you provide. Like virtually every website, our hosting provider automatically logs basic technical information (such as your IP address and browser type) for security and reliability — we don’t use this to track you for marketing.

How we use your information

We use this information to process and deliver your order, send order and shipping updates, respond to questions you ask us, and (only if you’ve subscribed) send occasional emails about new arrivals and offers. We don’t sell or rent your personal information to anyone.

Your consent

We collect and use your information based on the consent you give us when you place an order, create an account, verify your phone number, or subscribe to updates. You can withdraw consent for optional uses (like marketing emails) at any time using the unsubscribe link, or by contacting us below — withdrawing consent needed to fulfil an order already placed may affect our ability to complete that order.

Who we share it with

We only share what’s necessary to actually run the store, with:

• Razorpay — to process online card, UPI, and netbanking payments. Razorpay is a PCI-DSS compliant payment processor; we never see or store your full card or bank details ourselves.
• MSG91 and/or Google Firebase — to send and verify the one-time password (OTP) used to confirm your phone number at checkout and for mobile sign-in.
• Resend — to send order confirmation, shipping, and account emails on our behalf.
• Firebase (Google Cloud) — to host this website and securely store order, account, and product data.
• Our delivery courier partners, who receive your name, phone number, and delivery address to get your order to you.
• Government or tax authorities, where we’re legally required to disclose information (for example, for GST compliance).

How we protect your information

Our site is served over HTTPS, and Firebase (our hosting and database provider) encrypts data at rest. We don’t store your card or bank details ourselves — those go directly to Razorpay. No online system is 100% secure, but we take reasonable, industry-standard measures to protect your information from unauthorised access.

Cookies & local storage

We use your browser’s local storage to remember things like your cart contents and whether you’ve already seen a popup offer — this stays on your own device and isn’t used to track you across other websites. We don’t currently use third-party advertising or analytics cookies.

Data retention

Order and invoice records are kept for 72 months (6 years) from the due date of filing the relevant GST annual return, as required under GST law — longer if an order is part of an ongoing dispute, audit, or legal proceeding. Account information (like your saved addresses) is kept until you ask us to delete your account. Newsletter email addresses are kept until you unsubscribe.

Your rights

Under Indian data protection law, you have the right to:

• Access — ask what personal information we hold about you.
• Correction — ask us to correct inaccurate or outdated information.
• Erasure — ask us to delete your account and personal data, subject to what we’re legally required to retain (see Data retention above).
• Grievance redressal — raise a complaint about how we’ve handled your information (see Grievance Officer below).
• Nomination — nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

You can unsubscribe from marketing emails at any time using the link in those emails. To exercise any of the rights above, contact us below.

Children’s privacy

This site is not directed at children, and we don’t knowingly collect information from anyone under 18 without verifiable consent from a parent or legal guardian. If you believe a child has provided us with personal information, please contact us so we can delete it.

Changes to this policy

If we change how we handle your information, we’ll update this page with a new effective date.

Grievance Officer & contact us

Questions about this policy, your data, a saree you’ve ordered, or a complaint about how we’ve handled your personal information? Email our Grievance Officer at mayankvastram@gmail.com and we’ll get back to you as soon as we can.