Privacy Policy

• Checkout details: your name, email, mobile number and delivery address. Nothing is saved while you type. Once you agree to our Terms and ask for a sign-in code, we keep the name, email and mobile number you entered at checkout, even if you don't finish your order, so we can help you complete it.
• Your account: the email address you sign in with (using one-time codes), your sign-in sessions, and a record of your agreement to our Terms and this policy: which version, when, and the IP address and browser it came from.
• Your orders: what you bought, amounts, payment method, delivery and tracking status, the version of our Terms you accepted, and the IP address and browser the order was placed from (to prevent fraud and settle disputes).
• Payments: payment status and Razorpay references. We never receive or store card numbers, UPI PINs or banking passwords.
• Requests you send us: complaints, cancellation and return requests (including the reason you give and, for Cash on Delivery refunds, your UPI ID), and your emails with our support team.
• How you use the site: products viewed, cart activity, how you arrived (advertising campaign tags such as UTM parameters and Facebook click ID, and the referring website), linked to a random visitor ID rather than your name.
• Technical data: IP address and browser or device details, used to serve the site, block abusive traffic and fix errors.

• To process, deliver and support your orders, including cancellations, returns and refunds.
• To contact you about an order, or about a checkout you started but didn't finish, including a reminder or an offer to help you complete it. You can ask us to stop at any time.
• To sign you in securely and keep your account safe.
• To prevent fraud and misuse, including of Cash on Delivery, returns and discount codes.
• To understand which products and ads work, and to improve the site.
• To meet legal, tax and accounting obligations.

We process your data because you give it to us to place an order or make a request (your consent), and for the legitimate uses the law allows, such as fulfilling orders, preventing fraud and keeping records the law requires.

Only with the services that help us run the shop, and only what each needs:

• Razorpay: Processes online payments. Receives your payment details directly; we receive only the payment status and reference.
• Shiprocket and its courier partners: Deliver your order and collect returns. Receive your name, mobile number, delivery address, and what's in the parcel.
• Resend: Sends our emails: sign-in codes, order confirmations, and messages about cancellations, returns and complaints.
• Railway and our other hosting providers: Run our servers and database, where your account and order data are stored.
• Sentry: Error monitoring. Receives technical details when something breaks, which can include an order reference.
• Google and Meta: Analytics and advertising, through tags loaded by Google Tag Manager. They receive browsing activity and set their own cookies.

Some of these services process data outside India, under their own security and privacy commitments. We also share data when the law requires it, for example with tax authorities or in response to a valid legal request.

• Essential: a cart cookie (kept 30 days) so your bag survives between visits, and a sign-in cookie (kept 7 days). The site doesn't work without these.
• Preferences and measurement: your light/dark theme choice and a random visitor ID, kept in your browser's storage.
• Analytics and advertising: cookies set by Google and Meta through Google Tag Manager.

You can clear or block cookies in your browser settings. Blocking essential cookies will stop the cart and sign-in from working.

• Unfinished checkouts: the contact details kept when you asked for a sign-in code are deleted automatically after 90 days.
• Sign-in sessions: expire after 7 days.
• Orders, payments and refunds: kept as long as Indian tax and accounting laws require (generally at least 6 years after the end of the financial year).
• Complaints, cancellations and returns: kept as long as needed to resolve them and to handle any later dispute.

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or update it;
• erase it, except what the law requires us to keep (such as order and tax records);
• withdraw your consent, for example to being contacted about an unfinished checkout or to receiving offers;
• nominate someone to exercise these rights on your behalf.

Email solutions@signaturebharat.com from the address on your account. If you aren't satisfied with our response, you can complain to the Data Protection Board of India.

The site uses HTTPS throughout. Sign-in codes and session tokens are stored only in hashed form, admin access is restricted and logged, and payment details never touch our servers. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

The shop is not meant for children. If you are under 18, please shop with a parent or guardian.

We'll update this policy when what we collect or how we use it changes, and change the date at the top. Questions about how we handle cancellations and returns are covered in our Returns, Refunds & Cancellations policy.