Privacy

The short version

• We keep your name, email, phone and address so we can print and deliver an order.
• We never see your card. Payment happens on Razorpay’s side and we are told only whether it worked.
• There are no third-party trackers on this site. No Google Analytics, no advertising pixel, no session recorder.
• We do not sell or rent your data. To anyone. Ever.

What we hold, and why

• Your account — email and a password we can never read (it is stored as a one-way hash). Without an account you could not see your own order.
• Your order — name, phone, and the address the parcel goes to. The courier cannot deliver without them.
• Your payment — the amount, the status, and Razorpay’s reference. Not your card number, which never touches our servers.
• Anything you write to us — return requests and complaints, so we can answer them and prove we did.
• How you found us — if you arrive through a campaign link, your browser remembers which one for 30 days so a creator gets credit for a sale. That sits in your own browser, is first-party, and follows you nowhere else.

Who else sees it

Only the companies that make an order actually happen:

• Qikink — prints and ships. Gets your name, address and phone, because a parcel needs them.
• Razorpay — takes the payment. Handles your card details directly; we never receive them.
• Resend — sends your order emails. Gets your email address.
• Cloudflare — serves the site and stores our product images.

Each of them gets the minimum for their one job, and none of them may use it for anything else. Beyond that, we share only when the law requires it.

Where it lives, and for how long

On servers in India. We keep order and invoice records for eight years — that is a tax rule, not a preference. Everything else goes when you ask us to delete your account.

What you can ask for

Under the Digital Personal Data Protection Act 2023 you may ask us for a copy of what we hold, ask us to correct it, ask us to delete it, or withdraw consent for marketing email. Write to the address at the bottom of this page and we will answer within 30 days.

Deleting your account does not delete an invoice we are legally required to keep, and we will tell you plainly which records those are.

Marketing

We email you about an order because you placed one. We only email you about new drops if you ticked the box asking for it, and every one of those has an unsubscribe link that works immediately.

Cookies

We use browser storage for two things: keeping you signed in, and remembering what is in your bag. Both are strictly necessary for the shop to function, and neither is shared with anybody. There is no advertising cookie on this site, which is why there is no consent banner in your way.

Children

This shop is not for under-18s, and we do not knowingly keep data about a child. If you believe we have, write to us and we will delete it.

Security, honestly stated

Traffic is encrypted, passwords are hashed and never stored in a readable form, and card details never reach us. No system is perfect; if one of ours is ever breached in a way that affects you, we will tell you and the Data Protection Board rather than hope you do not notice.

If this page changes

The date at the top moves and the new version replaces this one. If a change affects what we do with data you have already given us, we email you first.