Privacy Policy | Aurima Indian Sarees

1. Who we are

This Privacy Policy explains how Aurima Sarees Pvt. Ltd. ("Aurima", "we", "us") handles personal data collected through this website. We are the data fiduciary for that data under India's Digital Personal Data Protection Act, 2023. You can reach us at [email protected], or by post at B-3/145, II Floor, Paschim Vihar, New Delhi 110063, India.

2. What we collect

We collect only what an order actually requires:

Identity and contact data — your name, email address and mobile number.
Shipping data — delivery address, city, state and PIN code.
Order data — the items, sizes and quantities you buy, and the order total.
Payment reference data — the Razorpay order id, payment id and payment status.
Technical data — IP address, browser type and pages visited, in server logs.
Cart data — item ids, sizes and quantities, stored in your browser's local storage on your own device.

3. What we never collect

We never see or store your card details, UPI PIN, CVV, or net banking credentials. Payment credentials are collected directly by Razorpay inside their own checkout window and never pass through our servers. We receive only a payment reference and a success or failure status.

4. Why we use it

To process, pack, ship and deliver your order.
To confirm payment and, where necessary, issue a refund.
To send transactional messages — order confirmation, dispatch and tracking.
To answer customer care queries and handle returns.
To meet tax, accounting and other legal obligations.
To detect and prevent fraudulent orders.

We do not sell your personal data. We do not send marketing email unless you have separately opted in, and every marketing message carries an unsubscribe link.

5. Who we share it with

Razorpay Software Private Limited — to process payments and refunds. Razorpay is a PCI DSS Level 1 certified payment gateway with its own privacy policy.
Logistics partners — your name, address and phone number, so the parcel can be delivered.
Our hosting provider — which stores server logs on our behalf.
Government authorities — only where we are legally required to disclose.

6. Cookies and local storage

This site sets no advertising or third-party tracking cookies. Your cart is kept in your browser's local storage on your own device, and is cleared when you complete an order or clear your browser data. Razorpay may set its own cookies within its checkout window, governed by its privacy policy.

7. How long we keep it

Order and invoice records are retained for eight years, as required by Indian tax law. Customer care correspondence is kept for three years. Server logs are kept for 90 days. Data no longer needed for any of these purposes is deleted.

8. Your rights

Under the DPDP Act, 2023 you may:

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is inaccurate or incomplete.
Ask us to erase data we no longer need to retain by law.
Withdraw a consent you previously gave, at any time.
Nominate another person to exercise these rights on your behalf.
Complain to the Data Protection Board of India.

Write to [email protected] to exercise any of these. We respond within 30 days.

9. How we protect it

The site is served over HTTPS. Payment confirmations are verified with an HMAC-SHA256 signature before an order is marked paid, so a tampered payment response cannot be accepted. Access to order data is limited to staff who need it to fulfil orders.

10. Children

This store is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will delete it.

11. Changes to this policy

We may update this policy as the business or the law changes. The revision date at the top of this page always reflects the current version. Material changes affecting existing orders will be emailed to affected customers.

12. Contact and grievances

For any privacy question or complaint, contact our grievance officer at [email protected] or +91 98103 72726. We acknowledge within 48 hours and resolve within one month. Full contact details are on the Contact Us page.