Privacy Policy

This policy explains what personal data Ali Sparkle collects, why, and the rights you have over it. It is published under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023 and the rules made under it, as they apply.

1. Who is responsible for your data

[Legal business name — add in Admin → Settings], [Business address — add in Admin → Settings], is the data fiduciary for the personal data collected through this website. For any privacy question or request, contact our Grievance Officer, [Grievance officer name — add in Admin → Settings], at [Grievance officer email — add in Admin → Settings].

2. What we collect

• Order details you give us: name, mobile number, email (optional), delivery address, city, state and PIN code, and any order notes.
• Order history: products ordered, amounts, order status and invoices.
• Communications: messages you send us by phone, email or WhatsApp.
• Technical data: basic server logs (such as IP address, browser type and time of visit) kept for security.

We do not collect passwords, card or bank details, biometric or health data. Shoppers do not need an account. We use one essential session cookie to keep your bag while you shop; we do not use advertising or tracking cookies.

3. Why we use it

• to process, confirm, pack, deliver and invoice your order, and to collect cash-on-delivery payments;
• to contact you about your order, deliveries, returns, refunds and complaints;
• to keep the books and records required by tax, GST and accounting laws;
• to prevent fraud and keep the website secure;
• to comply with legal obligations and lawful requests from government authorities.

We use your data only for these purposes. We will send you promotional messages only if you separately agree to receive them, and you can opt out at any time.

4. Your consent

When you place an order you agree to us using your details as described here. Where we rely on your consent, you may withdraw it at any time by writing to the Grievance Officer; this will not affect anything done before you withdrew it, and we may still keep data we are required by law to keep.

5. Who we share it with

We do not sell your personal data. We share only what is needed with:

• courier and logistics partners, to deliver your order (name, phone, address);
• payment service providers, when online payments are introduced;
• service providers that host this website, store our data or send messages for us, under confidentiality obligations;
• our accountants and auditors, and government or law-enforcement authorities when required by law.

6. How long we keep it

We keep order and invoice records for as long as tax and accounting laws require (for GST, generally up to eight years) and other personal data only as long as needed for the purposes above, after which it is deleted or anonymised.

7. Security

We follow reasonable security practices, including encrypted connections (HTTPS), restricted access to order data for authorised staff only, and secured servers. No system is completely secure; if a personal data breach affects you, we will inform you and the authorities as the law requires.

8. Your rights

You have the right to:

• ask for a summary of the personal data we hold about you and how it is used;
• ask us to correct, complete or update it;
• ask us to erase it, unless we must keep it by law (for example, invoices);
• withdraw consent you have given;
• nominate another person to exercise your rights in case of death or incapacity;
• have your grievance addressed by us, and if not resolved, complain to the Data Protection Board of India.

Write to the Grievance Officer at [Grievance officer email — add in Admin → Settings] with your name and the mobile number used for your orders. We will respond within the time required by law, and in any case within 30 days. See also our Grievance Redressal page.

9. Children

This website is meant for adults. We do not knowingly collect data from children under 18. If you believe a child has given us personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy. The latest version is always on this page with its “last updated” date. If we make a significant change to how we use your data, we will tell you before it applies.