This Privacy Policy explains how Embroo India (https://embroo.in) collects, uses, and protects your information. We follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.
1. Data we collect
- Order data: name, phone number, delivery address, design details, cart total.
- Payment data: transaction references processed by Razorpay. We do not see full card or bank credentials.
- Communication: messages you send us on Instagram, email, or WhatsApp.
- Technical: standard server logs (IP, user-agent, timestamps) and basic Vercel Analytics aggregates. No third-party ad trackers.
- Cookies: a single cookie that remembers if you've dismissed the cookie banner. No advertising or cross-site tracking.
2. How we use it
- To produce, dispatch, and track your order.
- To verify your payment and fulfil the order.
- To respond to your messages and resolve grievances.
- To comply with applicable Indian law.
We do not sell your data to third parties. We do not use it for retargeting ads.
3. Who we share data with
- Courier partners (Delhivery, Shiprocket) for delivery — name, phone, address only.
- Vercel (hosting) and Cloudinary (file storage, when used) — both are SOC2-compliant data processors.
- Razorpay (payments) — payment processing only.
- Government authorities only when required by law.
4. How long we keep it
- Order records: 7 years (statutory requirement under Indian tax law).
- Payment records: as required for accounting and dispute resolution.
- Server logs: 30 days.
5. Security
We use HTTPS everywhere, signed access tokens for order pages, restricted file uploads, and rate-limited APIs. No system is perfectly secure; we follow industry-standard reasonable practices.
6. Your rights
You may, at any time, ask us to:
- show you the data we hold about you,