Privacy Policy

1. Who We Are

SERVACHI runs this website and decides how your personal data is used, so under India's Digital Personal Data Protection Act, 2023 we are the “Data Fiduciary” responsible for it. Registered address: E-259, Gali No-9, Near Chand Masjid, Shastri Park, Delhi-110053. GSTIN: 07FSHPA6467F1ZN.

2. Information We Collect

• Account: your name, email address, mobile number and password (stored only in scrambled, one-way “hashed” form — nobody, including us, can read it).
• Orders: delivery addresses, what you ordered, order history, and payment and refund status.
• Returns and support: the reason for a return, any photos you attach, and messages you send us.
• Reviews you write about products.
• Technical: your IP address and browser type, used for security (for example, to slow down repeated wrong passwords).
• Only with your permission: which pages and products you view and which ad brought you to us (see Cookies below).

We never see or store your card, UPI or bank details — payments are handled entirely by Razorpay.

3. Why We Use It

• To create your account and process, deliver, return, replace or refund your orders — the purposes you give us your details for.
• To send you emails about your orders, deliveries, refunds and password resets.
• To answer your questions and complaints.
• To keep the website and your account secure and prevent fraud.
• To meet legal duties, such as keeping GST invoices and accounting records.
• With your consent only: to understand how the shop is used and to measure our ads.

We do not sell your personal data, and we do not send promotional emails.

4. Who We Share It With

We share only what each service provider needs to do its job for us. They process it on our behalf:

We may also share information when required by law, for example with tax authorities or in response to a lawful order from a court or government agency.

5. Where Your Data Is Stored

Our database and website are hosted in the United States (Supabase and Vercel, in their US East region). The DPDP Act allows this transfer. Your data is sent over encrypted (HTTPS) connections.

6. How Long We Keep It

• Your account (name, email, phone, password, saved addresses, cart, support messages): until you delete your account.
• Orders, invoices, payments and refunds, including the delivery name and address on them: for as long as Indian tax and accounting laws require us to keep them, even after you delete your account.
• Visitor statistics: kept to understand trends, and unlinked from your account if you delete it.
• Security counters with your IP address: minutes, at most a few hours.
• Backup copies of our database, kept privately by us so the shop can be restored after a technical failure.

7. Your Rights

Under the DPDP Act, you can:

• Access a summary of the personal data we hold about you and who we've shared it with.
• Correct or update it — you can change your profile and addresses yourself from My Account.
• Delete it — yourself, from My Account → My Profile → Delete my account. This removes your name, email, phone number, password, saved addresses, cart and support tickets. Records of past orders, invoices, payments and refunds are kept as the law requires (see section 6) but are no longer linked to an account you can sign in to. Reviews you wrote stay visible under the name “Deleted Customer”. An account can't be deleted while it has an order in progress, an open return or refund, or a wallet balance.
• Withdraw consent for analytics or marketing cookies at any time from “Cookie Settings” at the bottom of every page.
• Nominate someone to exercise these rights for you if you die or become unable to.
• Complain to our Grievance Officer (section 11).

To use any of these rights, email our Grievance Officer. We may ask you to confirm your identity first.

8. Children

Our shop is for adults. To create an account you must confirm you are 18 or older. If we learn that an account belongs to someone under 18 without a parent's or guardian's consent, we will delete it.

9. Security

We protect your data with encrypted connections, hashed passwords, two-step verification and sign-in alerts for our admin accounts, limits on repeated sign-in attempts, and regular backups. No system is completely secure; if a breach ever affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

10. Cookies

We use essential cookies to keep you signed in and to remember your shopping cart. Only if you agree through our cookie banner do we also use analytics cookies (an anonymous first-party visitor ID for our own statistics, and Google Analytics) and marketing cookies (the Meta Facebook/Instagram Pixel and ad-click tracking). Google and Meta set their own cookies, subject to their own privacy policies. You can change or withdraw your choice at any time from “Cookie Settings” at the bottom of every page. Full details are in our Cookie Policy.

11. Grievance Officer

For any question or complaint about your personal data or an order, contact our Grievance Officer. We acknowledge complaints within 48 hours and aim to resolve them within one month.

Name

MOHD ASIF

Designation

Proprietor

Email

servachi056@gmail.com

Phone

8076670637

Address

E-259, Gali No-9, Near Chand Masjid, Shastri Park, Delhi-110053

If you're not satisfied with our response, you can complain to the Data Protection Board of India.

12. Changes to This Policy

If we change how we use your personal data, we will update this page and the “Last updated” date above.