Privacy policy

What we collect

When you place an order we collect your name, email address, postal address and phone number so that we can fulfil and deliver it.

When you sign in, you sign in with your Google account, and Google shares your name and email address with us. We never see or store a password.

Payments are processed by PayU. Card details are entered on PayU's systems and are never seen, transmitted or stored by us.

Your shopping cart lives in your own browser until you check out — nothing in it is sent to us before you place the order.

When you visit, we look at your rough location (the country your internet connection reports) once, only to decide whether to show you Indian or international prices. We do not store it.

How we use it

We use your information solely to process orders, arrange delivery and respond to enquiries. We do not sell your personal information, and we do not use it for advertising.

Cookies

We use only the cookies the store needs to work: keeping you signed in, remembering which market you are browsing, and protecting forms against forgery. There are no analytics or advertising cookies, and no third-party trackers.

Who we share it with

We share your information only with the services that run the store, and only as much as each one needs to do its job:

PayU processes your payment. Google handles sign-in. Supabase hosts our database, where your account and order details are stored. Resend delivers our order emails. Netlify hosts the website. Our courier partners receive your name, delivery address and phone number so they can deliver your order.

Some of these providers store data outside India, including in the United States. Each is bound by its own privacy policy and processes your data only on our behalf.

How long we keep it

We keep order records for as long as Indian tax and accounting law requires. Account details are kept until you ask us to delete them.

Your rights

You can ask us at any time to see the personal information we hold about you, to correct it, or to delete it — just email contact@bytaarish.com from the address on your account and we will act on it promptly. We may need to keep records of completed orders where the law requires it.

If you are in the EU or UK, you additionally have the rights the GDPR gives you — including access, rectification, erasure, portability and objection — and the right to complain to your local data protection authority.

Contact

Questions about privacy can be sent to contact@bytaarish.com.