Privacy Policy

DRAFT – REVIEW BEFORE LAUNCH

Last updated: [DATE]

This policy explains how [LEGAL BUSINESS NAME], trading as Erayah ("we", "us"), collects and uses your personal information when you visit this website or place an order. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• When you order: your name, phone number, delivery address, email address (optional), gift note, and the details of your order.
• When you contact us: your name, the contact details you give us, and your message.
• On your device: your cart, wishlist and recently viewed pieces are kept in your browser's local storage. They are not sent to us until you check out.

We do not offer customer accounts, and we do not see or store your card, UPI or bank details. Payments are processed by Razorpay under its own privacy policy.

How we use it

• To process, deliver and support your order, including contacting you by phone or WhatsApp about it.
• To issue your invoice and keep the tax and accounting records the law requires.
• To answer your messages.

We do not sell your personal information, and we do not send marketing messages.

Who we share it with

Only the service providers we need to run the shop: Razorpay (payments), our courier partners (delivery), and our hosting and database providers. Each receives only what it needs for its task.

How long we keep it

Order and invoice records are kept for as long as Indian tax law requires. Contact messages are deleted when they are no longer needed.

Your rights

You may ask to see, correct or erase your personal information, subject to records we must keep by law. To make a request or raise a concern, contact our Grievance Officer: [NAME], [EMAIL], [PHONE].

Security

We use reasonable technical and organisational measures to protect your information, including encrypted connections and restricted access.

Changes

We may update this policy. The date at the top shows when it last changed.

Contact

[LEGAL BUSINESS NAME], [REGISTERED ADDRESS]. [EMAIL] · [PHONE]