Privacy policy

When you create an account and place an order, we hold:

• Your name and mobile number
• Your email address, if you give one — it is optional
• The delivery addresses you enter
• Your order history

Your password is never stored. What we keep is a one-way cryptographic hash of it, which cannot be turned back into your password — not by us, not by anyone who obtained a copy of our database.

Payments are handled entirely by Razorpay. Your card number, CVV, UPI PIN and net-banking credentials are entered on Razorpay's own secure payment window and are never sent to us, never pass through our servers, and are never stored by us.

What we receive back is a payment reference, the amount, and the method used — "card" or "UPI" — and nothing more.

• Your name and address, to deliver your order
• Your mobile number, so the courier can reach you
• Your email, to send order confirmations and delivery updates
• Your order history, so you can see what you bought and we can handle returns

Only those who need it to get your order to you:

• Razorpay — to process your payment
• Our courier partners — your name, address and phone number, so they can deliver

We do not sell, rent or trade your personal information to anyone, for any purpose. We do not send marketing messages unless you ask us to.

Our database is hosted on secure cloud infrastructure in Singapore, and all traffic between your device and our servers is encrypted in transit.

We use a single cookie to keep you signed in. It contains a signed session token and nothing else — no tracking, no advertising identifiers, no third-party analytics cookies. It is marked so that scripts running in your browser cannot read it.

You can ask us at any time to:

• Tell you what we hold about you
• Correct anything that is wrong
• Delete your account and personal details

Write to [support email] and we will respond within a reasonable time.

One limit worth stating honestly: where we are legally required to retain invoices and tax records, we must keep the order and payment record even after an account is deleted. Everything not needed for that is removed.

[registered business name]
[registered address]
GST: [GSTIN]
[support email] · [support phone]