Privacy Policy
What Data We Collect
We collect only what is needed to take and deliver an order: your name, email address, phone number, delivery address, and the details of what you ordered. If you create an account, this information is stored against it so you do not have to enter it again. When you pay, your card details or UPI ID are entered directly into Razorpay's secure checkout and are collected and processed by Razorpay, not by us — we never see or store your card number, CVV, UPI PIN, or any other payment credential. We receive only a confirmation that the payment succeeded and a reference id for the transaction.
How We Use It
Your details are used to fulfil your order, arrange delivery, and contact you about that order — confirmations, dispatch updates, and any cancellation, return, or refund you raise. We do not sell your data, and we do not use it for advertising.
Payments
Payments on this site are processed by Razorpay (Razorpay Payment Solutions Pvt. Ltd.), a third-party payment gateway authorised by the Reserve Bank of India. When you pay, you enter your UPI ID or card details into Razorpay's own secure checkout — that information goes straight to Razorpay and is never seen or stored on our servers. We receive only the payment status and a transaction reference, which we keep against your order to manage delivery, refunds, and support. Razorpay handles your payment data as an independent processor under its own privacy policy, which you can read at razorpay.com/privacy.
Cookies
Functional storage — keeping you signed in, remembering your cart, wishlist, and your choice on the cookie banner — is always used, as the site cannot work without it. If you accept the cookie banner, we additionally load Google Analytics, which sets cookies to give us aggregate statistics about how the site is used. Declining means those analytics cookies are never set. There are no advertising cookies in either case.
Third-Party Services
We rely on a small number of processors to run the store: Razorpay processes payments and handles your card or UPI details directly (see Payments above), Supabase hosts our database and accounts, Resend delivers transactional email, and Google Gemini powers Turbot, our AI stylist. When you send Turbot a photo it is passed to Gemini for analysis and is not stored by us. Vercel hosts the website and provides cookieless page-view analytics, and Google Analytics (only if you accept the cookie banner) gives us aggregate usage statistics. When you enter a delivery pincode, only the pincode itself is checked against India Post's public directory (postalpincode.in) to validate it. Each of these services processes your data only to provide their function to us.
Data Retention
Order records are kept for as long as needed to service the order and to meet tax and accounting obligations in India. Account details are kept while your account is open. You can ask us to delete your account and associated data at any time, apart from records we are legally required to retain.
Contact
For any question about your data, or to request a correction or deletion, reach us on WhatsApp.
Governing Law
This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023. Any dispute arising from it is subject to the exclusive jurisdiction of the courts of Punjab, India.