Legal
Privacy policy
We collect only the information needed to operate the shop, support customers and improve our service. This policy explains exactly what, why and for how long.
Who we are
Sharira (an India-registered business) operates this store. You can reach us about anything in this policy at admin@thesharira.com.
Information we collect
- Account details — name, email and password (stored only as a secure hash) when you register.
- Order and shipping details — delivery address, phone number and order contents, needed to fulfil your purchase.
- Payment references — the payment ID and status returned by our payment gateway, Razorpay. Card numbers, UPI IDs and bank details are processed by Razorpay and are never stored on our servers.
- Usage data — basic device, browser and page-usage information that keeps the site secure and helps us improve it.
How we use it
We use your information to fulfil and deliver orders, send order and payment confirmations, prevent fraud, provide customer support, and meet tax and legal record-keeping obligations. With your consent we may also send offers and news; every marketing email includes an unsubscribe option.
We do not sell, rent or trade your personal information to anyone.
Who we share it with
Only the service providers needed to run the shop: Razorpay (payments), our email service (order confirmations and receipts), and our courier partners (name, address and phone for delivery). Each receives only the minimum data required for its role.
How long we keep it
Order and invoice records are retained as required under Indian tax law. Account data is kept while your account is active; tracking-page lookup attempts are rate-limited and retained briefly for abuse prevention, then discarded.
How we protect it
The site is served over HTTPS, access to order data is restricted by row-level security rules, administrative actions are audit-logged, and payment verification happens server-side with signature checks.
Your rights and choices
You may request access, correction or deletion of your personal data, or withdraw marketing consent, at any time by writing to admin@thesharira.com. We respond to privacy requests within 30 days. Deleting order records may be limited where tax law requires retention.
Changes to this policy
If we change this policy we will update this page and, for material changes, notify account holders by email. The current version always applies to new orders.
