Privacy Policy

We collect only what we need to serve you, in three broad buckets:

• Account data — your name, email address, mobile number and password (stored only as a salted hash) when you create an account, plus saved delivery addresses.
• Order data — items purchased, order history, invoices, and the phone number used for order confirmation and delivery updates.
• Usage data — pages viewed, products browsed and basic device/browser information, used to improve the store experience.

We do not collect sensitive personal data such as card numbers or UPI credentials — payments are handled entirely by our gateway.

• Fulfilling your orders — processing payments, arranging insured delivery, and handling returns or refunds.
• Transactional emails and messages — order confirmations, shipping updates and receipts.
• Back-in-stock alerts, only if you ask — a one-time email when a sold-out weave you love returns. Nothing else, ever — no marketing lists, no recurring mailers.
• Improving the store — understanding which weaves are loved and where the experience can be smoother.
• Legal and security purposes — preventing fraud and meeting our obligations under Indian law.

We share the minimum necessary, only with partners who help your order reach you:

• Courier partners — your name, address and phone number, solely for delivery.
• Razorpay, our payment gateway — payment processing and refunds. Razorpay handles your card, UPI and net-banking details; they never touch our servers.
• Legal authorities, where we are required to by law or to protect our rights.

We never sell, rent or trade your personal data. We do not share it with advertisers or data brokers — full stop.

• Session cookie — a single httpOnly cookie that keeps you signed in. It contains no personal details and expires when you log out.
• Cart & wishlist — stored in your own browser's local storage so your selections survive a refresh. This data stays on your device until you clear it.

We do not use third-party advertising or cross-site tracking cookies. You can clear cookies and local storage anytime from your browser settings; doing so will sign you out and empty your cart.

Under the DPDP Act and our own commitments, you may at any time:

• Access the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Erase your data or withdraw your consent — we will delete your account and personal data, except records we must retain for tax and legal purposes.
• Nominate another individual to exercise these rights on your behalf, as provided under the DPDP Act.
• Grievance — approach our Grievance Officer (below) if you are unhappy with how your data has been handled.

To exercise any of these rights, write to care@shauryacollections.in or use our contact form. We respond within thirty (30) days.

We keep your data only as long as needed. Account and order records are retained while your account is active. Invoices and transaction records are retained for eight (8) years as required under Indian tax law. Everything else — usage data, contact-form messages, closed support threads — is deleted within 24 months of last activity.

Passwords are stored as salted scrypt hashes, sessions travel in httpOnly cookies over TLS, and payment data is tokenised by Razorpay. Access to customer data inside our team is limited to the colleagues who need it to help you. If a data breach ever affects you, we will notify you and the Data Protection Board as required by the DPDP Act.

In line with the DPDP Act, our Grievance Officer is available for any questions or complaints about this policy or your personal data:

Grievance Officer, Shaurya Collections
1st Floor, 2-75, Above BIG C, Vani Nagar, Malkajgiri, Secunderabad, Telangana 500047
care@shauryacollections.in · +91 79810 96834
Mon–Sat, 10:00 AM – 7:00 PM IST

We aim to acknowledge grievances within 72 hours and resolve them within 30 days. This policy may be updated from time to time; the "last updated" date above will always reflect the current version.