Privacy Policy

1. A note on how we’re built

We designed Under ₹999 to collect as little personal data as possible. You do not create an account or a password to shop with us — checkout is guest-only. Your shopping cart is stored locally in your own browser and is only sent to us when you place an order.

2. Information we collect

Information you provide

• Order & delivery details: your name, mobile number, delivery address (including city, state, and PIN code), and — if you choose to provide it — your email address, given at checkout.
• Communications: information you share when you contact us for support, returns, or grievances.

Information collected automatically

• Technical & security data: your IP address and basic browser/device information, captured in server logs. We use this to keep the service secure, prevent abuse, and apply rate limits to sensitive actions such as placing orders and searching.

Information stored on your device

• Your cart is saved in your browser’s local storage so it survives page refreshes. It stays on your device and is not transmitted to us until you place an order.

We do not knowingly collect your full payment-card number, UPI PIN, CVV, or bank login credentials — those are handled directly by our payment gateway (see below).

3. How we use your information

• to process, confirm, fulfil, and deliver your orders;
• to communicate with you about your order, including delivery updates and support responses;
• to let you track an order using your order number and mobile number;
• to detect, prevent, and address fraud, abuse, and security issues;
• to comply with legal obligations and enforce our Terms & Conditions.

We rely on the performance of our contract with you (to fulfil orders), your consent (for example, if you provide your email), and our legitimate interests and legal obligations (for security and compliance) as the bases for processing your information.

4. Payment information

Online payments are processed by our payment gateway, Razorpay. When you pay online, your payment details are collected and processed directly by Razorpay under its own terms and privacy policy. We receive only limited information such as whether the payment succeeded and a payment/order reference — not your card or bank credentials. For Cash on Delivery orders, no payment information is collected online.

5. How we share your information

We do not sell your personal information. We share it only as needed to run the store:

• Delivery & logistics partners — to deliver your order (they receive your name, address, and phone number).
• Payment gateway (Razorpay) — to process online payments.
• Service providers — cloud hosting and database providers that store our order data, image-hosting (cloud storage) providers, and a bot-protection provider (Cloudflare Turnstile) used to secure our checkout. These providers process data on our behalf under appropriate safeguards.
• Legal & regulatory authorities — where required by law, court order, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Cookies & local storage

We use minimal cookies and browser storage. This includes essential local storage to remember your cart, and cookies set by our bot-protection provider (Cloudflare Turnstile) to secure the checkout form against automated abuse. We do not use your cart data for advertising. You can clear local storage and cookies through your browser settings, though doing so will empty your saved cart.

7. Data retention period

We keep your personal information only for as long as necessary for the purposes described in this Policy:

• Order & transaction records are retained for up to 8 years, as required under applicable tax, accounting, and company-law obligations in India.
• Support and grievance communications are retained for up to 3 years to help us resolve repeat issues and meet legal requirements.
• Security and server logs (such as IP addresses) are retained for a short period — typically up to 90 days — for fraud prevention and troubleshooting.

Once data is no longer required, it is securely deleted or anonymised. You may request earlier deletion of your data (see “Your rights”), subject to the retention obligations above.

8. Data security

We implement reasonable security practices and procedures to protect your information, including encryption of data in transit (HTTPS), access controls, server-side validation, rate limiting, and restricting who can access order data. Order lookups require both your order number and the matching mobile number, so your order details are not exposed by the order number alone. No method of transmission or storage is fully secure, but we work to protect your information and to address any incident responsibly.

9. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you may:

• request access to the personal data we hold about you;
• request correction or updating of inaccurate data;
• request erasure of your data, where it is no longer required and subject to our legal retention obligations;
• withdraw consent you previously gave (for example, for email);
• raise a grievance about how your data is handled with our Grievance Officer (see below).

To exercise any of these rights, contact us at baliram2506yadav@gmail.com with enough detail (such as your order number) for us to verify your request.

10. Children’s privacy

The Website is intended for users aged 18 and above. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has provided us data without such consent, contact us and we will take appropriate steps to delete it.

11. Third-party links

The Website may link to third-party sites or services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their policies before providing them your information.

12. Where your data is stored

Your information is stored and processed using reputable cloud infrastructure and service providers. Where data is processed on servers located outside India, we take steps consistent with applicable law to protect it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be posted on this page with a revised “Last updated” date. Significant changes will be reflected here; please review the Policy periodically.

14. Grievance Officer & contact

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer for any privacy-related concern or to exercise your rights:

• Grievance Officer: Harsh Pandey
• Email: baliram2506yadav@gmail.com
• Address: 401, Magnus Saptarsinh, Saptarsinh Society, Alkapuri, Vadodara, Gujarat – 390007, India

For general support, reach us at baliram2506yadav@gmail.com or +91 99253 32228 (Monday–Saturday, 10:00 AM – 6:00 PM IST).