Privacy Policy

Welcome to GhareluShop.com. We value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, and disclose your information when you access or use our website and services.

This policy is designed to comply with applicable data protection laws in India, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. What Information We Collect

We collect the following types of information from you:

A. Personal Identification Information (PII):

• Contact Information: Your name, email address, shipping/billing address, and phone number (for OTP login and delivery updates).
• Account Information: Your username, password (encrypted), and login details if using Google SSO.
• Payment Information: We do not store your credit card, debit card, or net banking details. All payments are processed securely by our third-party payment gateway, Razorpay.

B. Non-Personal Information (NPI):

• Usage Data: Information about how you use our website, such as pages viewed, products browsed, time spent on site, and items added to your cart.
• Technical Data: Your IP address, browser type, device type (mobile/desktop), operating system, and a unique device identifier.
• Cookies: We use cookies and similar tracking technologies to enhance your browsing experience. (See our Cookie Policy).

2. How We Collect Information

• Directly from You: When you create an account, log in (via OTP or SSO), place an order, subscribe to our newsletter, or contact customer support.
• Automatically: As you navigate our website, we collect technical and usage data through cookies, server logs, and other similar technologies.
• From Third Parties: We may receive information from our payment gateway (Razorpay) to confirm payment status or from social login services (Google) to authenticate your login.

3. How We Use Your Information

We use your data for the following purposes:

• To Fulfill Your Orders: To process your payments (via Razorpay), ship your products (via Delhivery), and provide you with order confirmations, invoices, and shipping updates.
• To Manage Your Account: To create and maintain your account, verify your identity (via SMS OTP), and provide customer support.
• To Improve Our Services: To analyze website usage, understand customer preferences, and improve our website layout, product selection, and user experience.
• For Marketing & Communication: To send you information about new products, special offers, and promotions via Email or SMS. You can opt-out of these communications at any time.
• For Safety & Security: To prevent and detect fraud, protect our website from malicious activity, and comply with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We only share your information with trusted third-party partners who are essential to our operations:

• Payment Gateway: We share order details with Razorpay to process your payment.
• Logistics & Shipping Partners: We share your name, address, and phone number with Delhivery (and other courier partners) to deliver your order.
• SMS & Email Providers: We share your phone number (9892805885) with our SMS API provider (for OTPs and shipping alerts) and your email with our email server (for order confirmations and newsletters).
• Legal Compliance: We may disclose your information if required by law, court order, or government request.

5. Data Security

We take the security of your data seriously. Your WordPress application is hosted on a secure GKE (Google Kubernetes Engine) cluster, and we implement a variety of security measures:

• Encryption: We use SSL (Secure Socket Layer) to encrypt all data transmitted between your browser and our server.
• Access Control: Access to your personal data is restricted to employees and third-party partners who have a “need-to-know” basis to perform their duties.
• Secure Payments: All payment transactions are encrypted and processed by Razorpay, a PCI-DSS compliant gateway.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request to update or correct any inaccurate or incomplete data.
• Withdrawal of Consent: Withdraw your consent for marketing communications at any time by clicking the “unsubscribe” link in our emails or by contacting us.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the “Last Updated” date.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone / WhatsApp: +91 9892805885
• Address: Vikhroli Park Site, Mumbai – 400079