Privacy

This notice is given under the Digital Personal Data Protection Act, 2023. The business responsible for your data is Rashmi Tibrewal, trading as Panchhe, 15, Canal East Road, Maniktala, Kolkata 700067.

What we collect, and why

• When you order — your name, email, phone number and delivery address, the sizes you choose, and any note you add. We use them to make your order, deliver it, send you a receipt and updates about it, and keep the record of the sale the tax law requires.
• If you make an account — your name, email and a password, stored only as a one-way hash that nobody can read. We use them to let you sign in and see your orders and saved pieces.
• If you make a complaint — your name, email, optionally a phone number and order number, and what you tell us. We use them to handle the complaint and keep the record the consumer protection rules require.
• If you write a review — the name you give, your rating and your comment, which are published on the product page once we have read them.
• Automatically — your IP address and basic technical data such as browser type, which our hosting records to keep the site running and to block abuse such as repeated password guessing.

We never see your card details. Payments go directly to Razorpay; we receive only a confirmation that the payment succeeded and a reference number.

We send no marketing email and use no advertising or tracking cookies.

Who else handles it

Only the services that make the shop work, and only the part each needs:

• Razorpay (India) — to take payment and issue refunds.
• Our courier partner — your name, address and phone number, so the parcel reaches you.
• Supabase — our database and image storage, hosted in Mumbai.
• Netlify — hosts the website. Requests to the site may pass through its servers outside India.
• Resend — sends our order and complaint emails, from servers outside India.

That is the whole list. Each processes your data only on our instructions. We do not sell, rent or trade it, and we do not share it for anyone else’s advertising.

Cookies and what your browser stores

One cookie, set only when you sign in, keeps you signed in. It is strictly necessary for your account to work and is not used to track you. Your basket is kept in your own browser’s storage and is not sent to us until you place an order.

How long we keep it

• Orders and invoices — six years, the period tax law requires them to be available. This includes the name and delivery address on each invoice, even if you delete your account.
• Complaints — six years from the date of the complaint, so the record exists if the matter is taken further.
• Accounts — until you delete yours, which you can do at any time from your account page.
• Sign-in and security records, which include IP addresses — deleted after one year.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• ask what personal data we hold about you and how we use it;
• have it corrected, completed or brought up to date;
• have it erased — except the bare record of a past order, which the law requires us to keep;
• withdraw consent you have given, as easily as you gave it;
• nominate someone to exercise these rights for you if you die or become unable to;
• have a grievance about any of this addressed.

If you have an account, you can do the first and third yourself: your account page has Download my data and Delete my account. For anything else, or if you ordered as a guest, write to panchhe.official@gmail.com from the email address you used with us. We will respond within 30 days. If you are not satisfied, you may make a complaint to our Grievance Officer, and after that complain to the Data Protection Board of India.

Keeping it safe

The site runs only over HTTPS, passwords are hashed, access to customer data is limited to the shop owner’s admin account, and every sign-in form is protected against password guessing. If a breach ever affected your data, we would tell you and the Data Protection Board without delay, with what happened and what you can do.

Children

We make clothes for children, but the shop is for adults. Accounts, orders, reviews and complaints must be made by someone aged 18 or over, and we do not knowingly collect personal data from children.

Questions

Get in touch — panchhe.official@gmail.com, Mon–Sat, 10am – 6pm.