Policy · Privacy
Your data, in plain words.
This notice explains what personal data we collect when you use gathri.in, why we collect it, who we share it with, how long we keep it and your rights under the Digital Personal Data Protection Act, 2023. The Data Fiduciary is Gathri Company Private Limited, Indore, Madhya Pradesh — “Gathri”, “we” or “us” below.
What we collect
- When you order: your name, email, phone number, delivery address and pincode, the items you buy and the order value. Payments are handled by Razorpay; we only receive the payment ID and its status. We never see or store your card number, UPI PIN or bank login.
- When you start checkout but don't finish: once you type your email at checkout, we save it with the items in your Gathri so we can send you one reminder about the unfinished order.
- When you browse: pages you view, products you add to your Gathri, checkout steps you reach, device and browser type, and your approximate city. We collect this through cookies and similar identifiers (see “Analytics and ads”).
- When you write to us: the emails and WhatsApp messages you send, and our replies.
We don't collect Aadhaar, PAN or health data. gathri.in is meant for adults (18+) and we don't knowingly collect data about children.
Why we use it
- To take your order, pack it and deliver it, and to send you order, shipping and refund updates.
- To handle cancellations, returns, refunds and complaints.
- To keep the tax, accounting and invoice records the law requires.
- To prevent fraud and misuse of the site.
- To understand which products people look for and where checkout goes wrong, so we can fix it.
- To send a small number of follow-up emails — a reminder if you leave checkout unfinished, and a note after your order. Every one of these has an unsubscribe link; you can also reply “STOP” or write to [email protected] and we'll stop.
We don't sell your personal data to anyone.
Who we share it with
We share only what each service needs to do its job for us:
| Service | What it does for us | Data it gets |
|---|---|---|
| Razorpay | Payments | Name, email, phone, order amount |
| Shiprocket and its courier partners | Shipping and tracking | Name, phone, delivery address, parcel weight |
| Resend | Sends our order and reminder emails | Name, email, order details |
| Supabase | Our order database | Order and delivery details |
| Netlify | Hosts the website and some order data | Technical logs (IP address, browser), order details |
| Google Analytics 4 (Google) | Site analytics | A random browser ID, pages viewed, order value and order ID — no name, email or phone |
| Meta Pixel and Conversions API (Meta) | Measuring whether our Instagram and Facebook ads lead to orders | A browser ID, pages viewed and purchases, and your email and phone in scrambled (hashed) form |
Some of these services store data on servers outside India. We use them under their standard data-protection terms and will follow any transfer restrictions the Government of India notifies. We may also share data when the law requires it — for example, with tax authorities or on a lawful order.
Analytics and ads
Google Analytics and the Meta Pixel set cookies or similar identifiers in your browser. On your first visit we show a short notice at the bottom of the page telling you this; it stays until you tap “OK”. To opt out, block or clear these cookies in your browser settings, use your browser's tracking protection, or install Google's Analytics Opt-out add-on. Blocking them doesn't stop you from ordering.
How long we keep it
- Order and invoice records: for as long as the Companies Act and GST law require (Companies Act and GST law).
- Unfinished-checkout emails: deleted after the reminder has been sent.
- Support emails and messages: kept only as long as needed to resolve your request.
- Analytics data: kept for the retention period set in Google Analytics.
Your rights
You can ask us to:
- tell you what personal data we hold about you and who we've shared it with;
- correct, complete or update it;
- erase it (except records we must keep by law, such as invoices);
- stop sending you follow-up emails;
- let someone you nominate use these rights for you if you die or can't act yourself.
Email [email protected] with the subject “My data” from the email address you ordered with. We'll acknowledge within 48 hours and act within 30 days.
Security
Data travels over HTTPS. Access to order data is limited to the people who need it to fulfil your order. If a data breach ever affects you, we'll tell you and the Data Protection Board of India as the law requires.
Grievance officer
Grievance officer
Gathri Company Private Limited, Indore, Madhya Pradesh
Email: [email protected]
Hours: Mon–Sat, 10 am–6 pm IST
We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.
If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Changes
When this policy changes we'll update the date below. If a change is significant, we'll also email customers with open orders.
Last updated: 2026-09-25. Gathri Company Private Limited, Indore, Madhya Pradesh.
