Privacy Policy

1. Information We Collect

When you place an order, we collect your name, email address, phone number, and shipping address. We also collect payment information — this is processed directly by our payment gateway partner (Razorpay) and is not stored on our servers.

We may also collect non-personal data such as browser type, device type, and pages visited through standard analytics tools (Plausible Analytics, which is cookie-free and GDPR-compliant).

2. How We Use Your Information

We use the information you provide solely to:

– Process and fulfil your order

– Communicate about your order status and shipping updates

– Respond to customer service queries

– Send our journal (only if you explicitly opt in)

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Sharing

We share your name and address with our logistics partners (Blue Dart, Delhivery) strictly for the purpose of delivering your order. We share your email with Razorpay for payment processing and fraud prevention. No other third-party data sharing occurs.

4. Cookies

Our website uses no tracking or advertising cookies. We use Plausible Analytics for aggregate, anonymised traffic data — this tool uses no cookies and does not collect any personal data or track visitors across websites or devices.

5. Data Retention

We retain order information for 7 years as required by Indian tax law (GST compliance). Email addresses collected for our journal are retained until you unsubscribe. You may request deletion of any other personal data by emailing hello@roomofsora.com.

6. Your Rights

Under India's Digital Personal Data Protection Act 2023, you have the right to:

– Access the personal data we hold about you

– Correct inaccurate or incomplete data

– Request erasure of your data (subject to legal retention requirements)

– Withdraw consent for communications at any time

To exercise any of these rights, contact us at hello@roomofsora.com.

7. Security

We use industry-standard SSL/TLS encryption for all data transmitted via our website. Passwords (if any account feature is enabled) are hashed and never stored in plain text. While we take all reasonable precautions, no internet transmission is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered customers of material changes via email. The date at the top of this page reflects the most recent revision.