This policy explains what personal data AquaBloom GlassGarden collects, why, and what you can do about it. It is written to meet the Digital Personal Data Protection Act, 2023.

What we collect

  • Order data: name, billing and delivery address, pincode, mobile number, email, and GSTIN if you provide one.
  • Account data: username, password hash, order history and saved addresses if you create an account.
  • Payment data: we do not store card numbers, UPI IDs or bank credentials. Those go directly to Razorpay. We keep only the transaction reference and the payment status.
  • Technical data: IP address, browser and device type, and pages visited, collected through cookies.
  • Communications: WhatsApp, email and phone conversations about orders and care advice.

Why we use it

  • To process, pack and deliver your order, and to issue a GST invoice.
  • To send dispatch and delivery updates by email and WhatsApp.
  • To handle live arrival claims, returns and warranty requests.
  • To answer care questions and recommend suitable stock.
  • To meet tax and accounting obligations under Indian law.

We do not sell your data, and we do not send marketing email unless you have asked for it.

Who we share it with

  • Razorpay – payment processing. Razorpay is PCI DSS Level 1 certified and has its own privacy policy.
  • Courier partners – name, delivery address and mobile number, so they can deliver.
  • Our accountants and the tax authorities – invoice data, as required by law.

How long we keep it

  • Order and invoice records: 8 years, as required for GST and income tax.
  • Account data: until you ask us to delete the account.
  • Support conversations: 2 years.
  • Analytics and technical logs: 12 months.

Cookies

We use cookies that are necessary for the site to work: your shopping cart, your login session, and the security tokens that protect checkout forms. Turning these off will break the cart. We do not use advertising or cross-site tracking cookies.

Your rights

You can ask us to show you the data we hold about you, correct it, or delete it. You can also withdraw consent for WhatsApp updates at any time, though we will still need to contact you about an order in progress. Write to aquabloomglassgardens@gmail.com and we will respond within 30 days.

Data we are legally required to retain for tax purposes cannot be deleted until that period expires.

Security

The site runs over HTTPS. Passwords are stored as salted hashes. Payment pages are hosted by Razorpay, so card data never touches our infrastructure. Access to order data is limited to staff who need it to pack and dispatch orders.

Children

This store is not directed at children under 18 and we do not knowingly collect their data. Orders should be placed by an adult.

Contact

Data queries: aquabloomglassgardens@gmail.com, or write to AquaBloom GlassGarden, [ADD REGISTERED ADDRESS].