1. Data We Collect
- Contact & order details: name, email, phone number (verified via one-time password), and billing and shipping addresses.
- Account & activity: login credentials (passwords are stored only in hashed form), cart, wishlist and order history.
- Payment data: processed securely by Razorpay. We never collect or store your full card or bank details on our servers.
- Device & usage data: IP address, browser and device information, approximate location (city level, derived from your IP), the pages you view and how you arrived at the Site. This is collected automatically to keep the Site secure and improve it, and includes measurement by Google Analytics 4 — see section 3.
We collect this data directly from you, automatically through cookies and local storage, and from service providers such as Razorpay, Google Analytics, and Google (if you sign in with Google).
2. How We Use Your Data
We process your personal data, with your consent and for legitimate purposes, to:
- create and manage your account, process orders and payments, and arrange delivery;
- send transactional messages such as order confirmations and delivery updates;
- verify your identity and mobile number, and prevent fraud and abuse;
- provide customer support, improve the Site, and comply with law.
Marketing communications are sent only with your consent, and you can opt out at any time.
3. Cookies, Local Storage & Analytics
We use cookies and browser local storage to keep you signed in and to remember your cart and wishlist. These are essential to how the Site works: without them you cannot stay logged in or complete an order.
We also use Google Analytics 4, a measurement service provided by Google, to understand how visitors find and use the Site — which pages are viewed, how long visits last, and which sources bring people here. Google Analytics sets its own cookies and receives your IP address, device and browser details, and the pages you view. Google processes this on our behalf as a data processor, and IP addresses are truncated before storage so we cannot use them to identify you. We use these statistics only in aggregate; we never combine them with your name, email or order history, and we do not use them for advertising or ad personalisation.
You can opt out of analytics at any time by installing Google's Analytics Opt-out Browser Add-on, by enabling “Do Not Track” or blocking analytics cookies in your browser, or by deleting cookies in your browser settings. Opting out affects only these statistics — your account, cart and orders continue to work normally. Google's own handling of this data is governed by its Privacy Policy.
4. How We Share Your Data
We do not sell your personal data. We share it only with:
- Razorpay to process payments;
- Delivery and logistics partners to ship and track your orders;
- Google Analytics for the visit statistics described in section 3;
- Service providers for hosting, sign-in, messaging and media;
- Authorities where required by law; and a successor entity in any business transfer.
5. Retention & Security
We retain your personal data only for as long as your account is active or as needed to provide our services, meet legal obligations and resolve disputes, after which it is deleted or anonymised. We use reasonable security safeguards, including encrypted transmission and hashed passwords, though no online system is fully secure.
6. Your Rights Under the DPDP Act
As a Data Principal under the DPDP Act, 2023, you have the right to:
- access a summary of the personal data we hold about you;
- have inaccurate or incomplete data corrected or updated;
- request erasure of your personal data;
- withdraw your consent at any time, as easily as it was given;
- nominate a person to exercise these rights on your behalf; and
- grievance redressal (see below).
To exercise any right, email support@rjsons.in. We may verify your identity before acting on your request.
7. Children's Data
The Site is not directed at children. In line with the DPDP Act, we do not knowingly process the personal data of anyone under 18 without verifiable parental consent. If you believe a child has provided us data, contact us and we will remove it.
8. Grievance Redressal
For any privacy concern or complaint, contact our Grievance Officer at support@rjsons.in. We will acknowledge and resolve grievances within the timelines prescribed under applicable law. If you remain unsatisfied, you may escalate your complaint to the Data Protection Board of India.
9. Changes & Contact
We may update this Policy from time to time and will revise the "Last updated" date above. The Site may link to third-party websites whose privacy practices we do not control. Questions? Email support@rjsons.in; our postal address is available on request.