Privacy policy

We may collect the following categories of personal data:

• Identity & contact: name, email address, mobile number.
• Delivery details: shipping address, pin code, city, state.
• Order information: products purchased, size, quantity, order ID, payment method, order status.
• Checkout & bag data: items saved in your bag, coupon codes applied, and OTP verification during checkout.
• Communications: messages you send to customer support, return requests, and order-related messages.
• Technical data: device type, browser, IP address, cookies, and pages visited (for security and analytics).

We do not intentionally collect sensitive personal data such as biometric information, financial account passwords, or government ID numbers unless required by law or explicitly provided by you for a specific purpose.

• Process and deliver your orders, including address verification and courier booking.
• Send order confirmations, shipping updates, delivery notifications, and customer support replies.
• Verify your identity during checkout (including OTP at payment).
• Process payments through authorised payment partners.
• Handle returns, refunds, exchanges, and grievances.
• Prevent fraud, abuse, and security incidents.
• Improve our website, product assortment, and customer experience.
• Send marketing communications only where you have opted in; you may opt out anytime.

We process personal data based on your consent, performance of a contract (fulfilling your order), compliance with legal obligations, and our legitimate interests (such as fraud prevention), as permitted under the DPDP Act. You may withdraw consent for optional processing (such as marketing) at any time by contacting us. Withdrawal does not affect processing already completed or processing necessary to fulfil an existing order.

We share personal data only as needed to operate our business:

• Payment processors (e.g. Cashfree) to collect online payments securely.
• Courier and logistics partners to deliver your orders.
• Email and messaging providers (e.g. Resend, SMS gateways) for transactional communication.
• Cloud hosting, image delivery (e.g. ImageKit), and infrastructure providers that host our website and assets.
• Professional advisers or authorities when required by law, court order, or to protect our legal rights.

We do not sell your personal data. Service providers are required to use data only for the services they perform for us and to apply appropriate security safeguards.

We use cookies and similar technologies to run the website, keep checkout secure, and remember basic preferences during your visit. You can control cookies through your browser settings, but some parts of the site may not work properly if you disable them.

• Order and invoice records are retained as required under tax, GST, and accounting laws (typically up to 8 years where applicable).
• Support and grievance records are kept for the period needed to resolve disputes.
• Marketing contact data is kept until you unsubscribe or withdraw consent.
• Other personal data is deleted or anonymised when no longer needed for the purpose it was collected, unless longer retention is required by law.

We implement reasonable technical and organisational measures — including encrypted connections (HTTPS), access controls, and secure payment handoff — to protect personal data. No method of transmission over the internet is completely secure; please provide accurate contact and delivery details when you order.

Under the DPDP Act and applicable rules, you may have the right to:

• Access personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of data where legally permitted.
• Withdraw consent for optional processing.
• Nominate another person to exercise your rights in the event of death or incapacity (as permitted by law).
• Lodge a grievance with us regarding our data processing.

To exercise these rights, email nandankaretha8@gmail.com. We may need to verify your identity before responding.

Our website is intended for users aged 18 and above, or supervised use by a parent or guardian. We do not knowingly collect personal data from children without appropriate consent. Contact us if you believe a child has provided data without consent.

Name: Nandankumar Karetha
Email: nandankaretha8@gmail.com
Phone: +919327684129

We will respond to privacy-related complaints within 30 days. If unsatisfied, you may escalate to the Data Protection Board of India once operational under the DPDP framework.

We may update this Privacy Policy to reflect legal, technical, or business changes. The latest version will always be available on this page. Material changes may be notified by email or a notice on the website where required.

Questions about this policy: support@ritwa.in. See also our Terms of use and Return policy.