Privacy Policy

What we collect

• Account details — your name and email address. A phone number if you choose to add one to your profile. Passwords are stored only as a cryptographic hash; we never hold the password itself and cannot read it.
• Google sign-in — if you sign in with Google, we receive your name, email address and profile picture from Google. We never receive your Google password.
• Delivery addresses — the addresses you save for shipping.
• Orders — what you bought, when, the amount, and its delivery status.
• Content you submit — product reviews and ratings, wishlist items, and, for wholesale applicants, business details and the shop photo you upload.

What we do not collect

We never see or store your full card number, CVV or UPI PIN. Payment details are entered directly with our payment provider and never reach our servers.

Why we use it

• to process orders, take payment and deliver to you;
• to keep you signed in and secure your account;
• to send order confirmations, delivery updates and password resets;
• to answer your questions when you contact us;
• to meet tax and accounting obligations, which require us to retain order records.

Who we share it with

We do not sell your personal information. In the course of running the store we share the minimum necessary information with the service providers who operate parts of it on our behalf, and they are permitted to use it only for that purpose. Payments and refunds are handled by our payment gateway, which is PCI-DSS compliant and takes your card or UPI details directly. So that your order can reach you, your name, delivery address and phone number are passed to our logistics and courier partners for fulfilment and tracking. Order confirmations, delivery updates and account messages are sent through our communications provider, and images on the site, including any photograph submitted with a wholesale application, are stored with our image hosting provider. If you choose to sign in with Google, that sign-in is handled by Google under its own privacy policy.

We may also disclose information where the law requires it, or to establish or defend a legal claim. If you would like to know which specific providers we currently use, write to aadyakurties@gmail.com and we will tell you.

Cookies

We use a small number of strictly necessary cookies to keep you signed in and to protect your session. These are httpOnly, meaning scripts in your browser cannot read them.

We do not currently use advertising or third-party tracking cookies. If that changes, we'll update this page before turning anything on.

How long we keep it

Order records are retained for as long as tax and accounting law requires. Other account information is kept while your account is open. If you ask us to delete your account, we remove what we are not legally required to keep.

Your choices

• View and update your name and phone number anytime under Profile.
• Add, edit or delete saved addresses under Addresses.
• Ask for a copy of your data, or ask us to correct or delete it, by emailing aadyakurties@gmail.com.

Security

Traffic is encrypted in transit. Passwords are hashed with Argon2id, and password reset links are single-use, expire after 30 minutes, and are stored only as a hash. Resetting your password signs you out everywhere.

No system is perfectly secure, but if a breach ever affected your data we would tell you.

Children

This site is not intended for children under 18, and we do not knowingly collect their information.

Contact and grievances

For any privacy question, or to raise a grievance, write to aadyakurties@gmail.com. We aim to acknowledge within 48 hours and resolve within 30 days.