Privacy Policy

1. Data Fiduciary and Contact

Balaji Creation is the Data Fiduciary for personal data collected through this website. Full legal name, registered address, support contact, grievance officer, and nodal contact should be finalized before public marketing.

2. Personal Data Collected

• Account information: name, email, and password hash.
• Order information: delivery name, phone, address, PIN code, items ordered, payment UTR/reference, and notes.
• Communications: contact form messages, email, phone, and WhatsApp messages initiated by the customer.
• Technical/security data: IP address, user-agent, timestamps, cookies, and logs for security, debugging, fraud prevention, and analytics.

3. Data We Do Not Collect

We do not collect card numbers, CVV, UPI PIN, OTP, Aadhaar, PAN, bank credentials, biometric data, or unnecessary sensitive personal data.

4. Purpose and Lawful Use

Data is used to create accounts, authenticate users, process orders, verify UTR payments, coordinate shipping, respond to support requests, prevent fraud, maintain audit/security logs, and meet tax, accounting, consumer-protection, and legal obligations.

5. Sharing

Data may be shared with approved infrastructure, storage, email, analytics, CAPTCHA, courier/tracking, and hosting providers only for the stated operational purpose. We do not sell or rent customer personal data.

6. Retention and Rights

Order and invoice records may be retained for tax/accounting/legal obligations. Customers may request access, correction, deletion, consent withdrawal, and grievance redressal subject to lawful retention requirements.

7. Security

Passwords are salted and hashed. Admin sessions use HttpOnly cookies, CSRF protection, rate limits, and audit-oriented server flows. Reportable security incidents require prompt investigation and legal notification review.