Privacy policy

This policy explains what personal data Shayara collects, why, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023.

What we collect

• Account details: name, email, optional mobile number and a securely hashed password (we never store your password itself).
• Delivery addresses you save and the address copied onto each order.
• Order history, reviews you submit and messages you send us.
• Payment status and references from Razorpay. We never see or store your card, UPI PIN or bank credentials.
• Technical data needed to keep the site secure, such as a session cookie and basic request logs.

Why we use it

• To process and deliver your orders, handle returns and refunds, and provide support.
• To keep your account and our store secure (for example, preventing fraud and abuse).
• To meet legal, tax and accounting obligations.

Who we share it with

Only service providers that help us run the store: our payment processor (Razorpay), courier partners, hosting and database providers, file storage for product media, and email delivery. We do not sell your personal data.

Cookies

We use one essential, HTTP-only session cookie to keep you signed in and protect forms against cross-site attacks. Your wishlist is stored in your browser on this device. We do not use advertising cookies.

Retention

We keep account data while your account is active, and order records as long as the law requires for tax and accounting purposes.

Your rights

You can view and update your profile and addresses in My account. To request access to, correction or deletion of your data, or to raise a grievance, email care@shayara.example.