This Privacy Policy explains how Embroo India (https://embroo.in) collects, uses, and protects your information. We follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023.
1. Data we collect
- Order data: name, phone number, delivery address, design details, cart total.
- Payment data: transaction references processed by Razorpay. We do not see full card or bank credentials.
- Communication: messages you send us on Instagram, email, or WhatsApp.
- Technical: standard server logs (IP, user-agent, timestamps) and basic Vercel Analytics aggregates. No third-party ad trackers.
- Cookies: a single cookie that remembers if you've dismissed the cookie banner. No advertising or cross-site tracking.
2. How we use it
- To produce, dispatch, and track your order.
- To verify your payment and fulfil the order.
- To respond to your messages and resolve grievances.
- To comply with applicable Indian law.
We do not sell your data to third parties. We do not use it for retargeting ads.
3. Who we share data with
- Courier partners (Delhivery, Shiprocket) for delivery — name, phone, address only.
- Vercel (hosting) and Cloudinary (file storage, when used) — both are SOC2-compliant data processors.
- Razorpay (payments) — payment processing only.
- Government authorities only when required by law.
4. How long we keep it
- Order records: 7 years (statutory requirement under Indian tax law).
- Payment records: as required for accounting and dispute resolution.
- Server logs: 30 days.
5. Security
We use HTTPS everywhere, signed access tokens for order pages, restricted file uploads, and rate-limited APIs. No system is perfectly secure; we follow industry-standard reasonable practices.
6. Your rights
You may, at any time, ask us to:
- show you the data we hold about you,
- correct anything inaccurate,
- delete your data (subject to statutory retention obligations),
- withdraw any consent (e.g., for using your design photo on Instagram).
Email pkexportpvtltd@gmail.com with the subject line "Data request" and we will respond within 15 business days.
7. Children
This site is not intended for users under 18. We do not knowingly collect data from minors.
8. International users
We currently ship only within India. If you visit this site from outside India, you do so at your own initiative.
9. Changes
We will post any updates to this policy on this page with a new "Last updated" date.
10. Contact
Privacy questions or grievances: pkexportpvtltd@gmail.com · Embroo India Support, Grievance Officer · Embroo Workshop, Sector 1, Greater Noida, Uttar Pradesh 201318, India.