Privacy policy

• Your account: name, email address, phone number and a password (stored only as a one-way hash), or your Google account name and email if you sign in with Google.
• Your orders: delivery addresses, what you bought, prices, GST details, the coupon or store credit you used, and tracking details.
• Payments: online payments are handled by Razorpay. Your card, UPI or bank details go to Razorpay and are never stored by us; we keep only the payment reference.
• Store credit: your wallet balance and the record of credits and spending.
• Purchases at the shop or stall: your name and phone number, which we need to issue a GST invoice, and what you bought.
• QR codes: when you scan one of our QR codes we set a cookie (kq_vid, kept for one year) so an offer can be tied to your device, and we count the scan.
• Visits: we count page views, add-to-cart actions and similar events to understand what is popular. This does not use cookies or store your IP address: visitors are told apart by a one-way code that changes every day.

• To take payment, pack, deliver and track your order, and to email you about it.
• To issue invoices and credit notes, and to keep the accounting and tax records the law requires.
• To run your account, wallet and the offers you choose to claim.
• To protect the shop and you from fraud and misuse.
• To improve the shop, using the counts described above.

We do not sell your information, and we do not use it for advertising by other companies.

Only the services that help us run the shop, and only what each needs: Razorpay (payments), our courier (Delhivery, Ekart or another, who receive your name, address and phone number to deliver), Gmail (the emails we send you), Cloudinary (product photographs), and our hosting and database providers (Vercel and Neon). We also disclose information when the law requires it.

• Invoices, credit notes and order records are kept for as long as tax and accounting law requires, even if you close your account.
• Your account details are kept while your account is open.
• Visit counts are kept in detail for 90 days and as totals after that; the QR cookie lasts one year.

You can ask us to show you what we hold about you, correct it, or delete your account and the information we are not required to keep. You can also withdraw consent for things that depend on it, and make a complaint to us first if you are unhappy with how your information is handled. Write to kathabyanuupurba@gmail.com. We will reply within a reasonable time, and we may ask you to prove who you are before we act.

We use a sign-in cookie that keeps you logged in, which the site needs to work. Your light or dark theme choice is kept in your browser's own storage, not sent to us. The QR cookie above is set only when you scan one of our codes. Google Analytics, if switched on, is used only after you allow it.

The shop is for adults. We do not knowingly collect information from children.

If we change this policy we will update the date at the top. For significant changes we will tell account holders by email.