Privacy policy

What we collect

Card numbers, UPI credentials and CVV are handled entirely by the payment gateway and never reach our systems. In this demonstration build no payment is taken at all, so no payment data of any kind is collected.

Your name, email address and phone number, so we can confirm the order and reach you about delivery.
Your delivery address or addresses, which are printed on the packing label.
Your order history — what you bought, when, at what price and where it was sent.
Any message you send us through the contact, seller or bulk order forms, and our replies.
Where an order is paid online, a confirmation from the payment gateway that the payment succeeded, along with the last four digits of the instrument used.

Why we collect it

To take and fulfil your order. To give the courier the name, address and phone number it needs to deliver. To handle a return, a replacement or a refund. To answer your questions. To settle with the group that made your order. And to keep the invoice records that tax law requires us to keep.

That is the whole list. We do not build advertising profiles, we do not run behavioural analytics, and we do not use your data to decide what price to show you.

What the groups can see

A group sees the order reference, the products and quantities it must pack, and the delivery address printed on the packing label. It never receives your email address, your phone number, your payment information or your order history with other groups.

If the courier needs to call you about a delivery, that call comes from the courier, not from the group.

Who else we share it with

We do not sell, rent or trade personal data. We do not share it with advertisers, data brokers or list vendors. There are no third-party advertising or analytics scripts on this site.

Courier partners receive the recipient name, delivery address and phone number. They are not permitted to use it for anything else.
The payment gateway receives what it needs to process a payment. It is a regulated entity with its own privacy obligations.
Our accountants and auditors see invoice-level records where the law requires it.
We disclose data to a government or court only where we are legally compelled to, and we will tell you unless we are barred from doing so.

How long we keep it

Order and invoice records: eight years from the end of the financial year in which the order was placed, as required for tax, audit and warranty purposes.
Messages sent through our forms: twelve months, then deleted.
Marketing subscriptions: until you unsubscribe, plus a short suppression record so we do not email you again by accident.
Cart, wishlist and order data held in your own browser: until you clear your browsing data. We never receive it.

Cookies and browser storage

This site sets no advertising, tracking or analytics cookies. There is nothing here to accept or reject, because there is nothing to track you with.

To make a static site behave like a shop, your cart, your wishlist, your order history and any form you submit are stored in your own browser’s local storage. That data stays on your device, is not transmitted to us or to anyone else, and disappears when you clear site data.

The honest consequence is that a cart in one browser is not visible in another, and clearing site data empties it. It also means that, in this demonstration build, a form submission is recorded in your browser rather than being emailed to us.

Your rights

Write to us and we will tell you what we hold about you, correct anything that is wrong, or delete it. We respond within 30 days.

You can withdraw consent to marketing email at any time using the unsubscribe link, or by writing to us. Withdrawing consent does not affect orders already placed.

Deletion is limited where we are obliged to keep invoice records — that obligation survives a deletion request, and we will tell you exactly which records we have to keep and for how long.

Children

This site is not directed at children. We do not knowingly collect personal data from anyone under 18, and if we learn that we have, we delete it.

Grievance officer

Data protection questions and complaints go to our grievance officer, Grievance Officer, at grievance@example.com, available Monday to Friday, 10:00–17:00 IST. Complaints are acknowledged within 48 hours and resolved within one month. You can also write to the registered office: Saahvi Collective, Saahvi Collective, 2nd Floor, Civic Centre Road, Bengaluru, Karnataka 560001.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. Material changes — a new category of data, a new recipient — are announced to subscribers of our monthly email before they take effect.

In short