Privacy Policy

• Account data: name, email and any details you provide when you create a customer account.
• Order data: billing and shipping address, items ordered, order value, and order status, stored by our commerce platform to fulfil your order.
• Cart and session data: the contents of your cart and your active session, kept so your cart persists as you browse and checkout.
• Payment data: handled directly by our payment processor, Razorpay, at checkout - see "Payments" below. We do not receive or store your full card number.
• Communications: messages you send us (for example over WhatsApp or email), so we can respond to your enquiry or order.

We use cookies that keep your cart and session working as you move between pages - for example, remembering the items in your cart and keeping you signed in. These are functional cookies needed for the storefront to operate, not third-party advertising trackers.

• To process and fulfil your order, including sharing your shipping details with our courier for delivery.
• To communicate with you about your order, account, or an enquiry you raised.
• To maintain your cart and account across visits.
• To meet legal, tax and accounting requirements.

We do not sell your personal data. We do not use your data for purposes beyond those listed here without asking you first.

Payments are processed by Razorpay, a third-party payment gateway. When you pay, your card, UPI or netbanking details are submitted directly to Razorpay under its own security and privacy practices. Pahadi Sunaar does not access, transmit, or store your card number, CVV, or UPI PIN. We receive only the payment status and a transaction reference needed to confirm your order.

• Our commerce platform (Medusa) and its hosting infrastructure, which stores account, cart and order records on our behalf.
• Razorpay, for processing payments (see "Payments" above).
• Our courier/delivery partner, limited to the shipping details needed to deliver your order.
• Any authority we are legally required to share data with.

We do not share your data with third parties for their own marketing.

Under the DPDP Act, you can ask us to confirm what personal data we hold about you, correct inaccurate data, or request erasure of your data (subject to records we must legally retain, such as tax and order records). To exercise these rights, contact us - see Contact.

The DPDP Act requires us to name a Grievance Officer you can contact about how your data is handled. That name and contact detail are being finalised by the business owner and will be published here once confirmed.

We may update this policy as our practices, platform, or the law changes. Material changes will be reflected on this page.