Privacy Policy

We collect the following categories of personal information:

• •Identity data — full name, email address, mobile number.
• •Address data — delivery address including house number, area, city, state, and pincode.
• •Order data — items purchased, quantities, prices, payment status, and order history.
• •Payment data — transaction reference numbers and payment status. We do not store card numbers, CVV, or UPI PINs. Payments are processed by Razorpay, which has its own PCI-DSS compliant infrastructure.
• •Account data — password hash (for email sign-up) or Google OAuth token metadata. We never store your Google password.
• •Device and usage data — browser type, pages visited, and session duration, collected via standard server logs.
• •Communication data — messages you send us via the support widget, email, or WhatsApp.

• •Process and fulfil your orders, including shipping and delivery updates.
• •Send order confirmations, invoices, and dispatch notifications via email and SMS.
• •Respond to support queries and resolve disputes.
• •Verify your identity during sign-in (Google OAuth or OTP).
• •Improve our website and product offerings based on aggregate usage patterns.
• •Send promotional communications if you have opted in — you can unsubscribe at any time.
• •Comply with legal obligations including GST invoice generation and record-keeping.

We process your personal data under the following bases:

• •Contract performance — processing your order requires your name, address, and contact details.
• •Legitimate interest — fraud prevention, security, and improving our service.
• •Legal obligation — GST reporting and financial record-keeping as required under Indian law.
• •Consent — marketing communications (you may withdraw consent at any time).

We do not sell your personal data. We share it only with the following trusted partners to fulfil your order:

We may also disclose information when required by law, a court order, or a government authority.

• •Order and invoice records are retained for 7 years to comply with GST and tax regulations.
• •Account data is retained as long as your account is active. You may request deletion at any time.
• •Support ticket data is retained for 2 years after resolution.
• •Server logs are purged after 90 days.

We use essential cookies for session management and authentication. We also use first-party, privacy-friendly analytics to understand how our website is used:

• •Marketing attribution — an anonymous cookie records which link or campaign brought you to us, so we can measure which marketing works. It contains no personal data.
• •Anonymous usage analytics — we record anonymous events (page views, add-to-cart) tied to a random session id, not to your identity. This helps us improve the site. We do not sell this data or use third-party advertising trackers.

You can disable cookies in your browser settings, but this may affect your ability to sign in or complete a purchase.

We implement industry-standard security measures including TLS encryption in transit, row-level security on our database, and hashed password storage. However, no system is 100% secure. If you suspect your account has been compromised, please contact us immediately at info@bhoonjawala.com.

Under the Information Technology Act, 2000 and applicable Indian data protection rules, you have the right to:

• •Access the personal data we hold about you.
• •Correct inaccurate or incomplete data.
• •Delete your account and associated personal data (subject to legal retention obligations).
• •Withdraw consent for marketing communications at any time.
• •Raise a grievance with us directly (see Section 10).

To exercise any of these rights, email us at info@bhoonjawala.com. We will respond within 30 days.

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

In accordance with the Information Technology Act, 2000, and the rules made thereunder, the details of our Grievance Officer are:

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of our website after any changes constitutes acceptance of the updated policy.