Privacy Policy

We collect only the information we need to run our store and serve you well:

• Account details — your name, email address, mobile number and password (passwords are stored in encrypted, hashed form and are never visible to us).
• Order and delivery details — shipping and billing addresses, items purchased, order history, and return or refund requests.
• Payment information — payments are processed securely by our payment partner. We do not store your full card number, CVV, UPI PIN or net-banking credentials.
• Communications — messages you send us through the contact form, live chat, support tickets, reviews and ratings.
• Technical information — IP address, device and browser type, pages viewed and similar information collected automatically when you use our website.

We use your personal data to:

• Process, deliver and track your orders, and handle returns, exchanges and refunds.
• Create and manage your account and keep it secure, including OTP verification.
• Send order confirmations, shipping updates and service messages by email, SMS or WhatsApp.
• Respond to your questions and provide customer support.
• Personalise your experience, such as showing recently viewed and recommended products.
• Detect and prevent fraud, abuse and security incidents.
• Comply with our legal, tax and accounting obligations.
• Send offers and promotions — only where you have agreed to receive them. You can opt out at any time.

We process your personal data with your consent, and for legitimate uses permitted by law — for example, to complete an order you have placed or to meet a legal requirement.

You may withdraw your consent at any time by contacting us. Withdrawal does not affect processing already carried out, but we may no longer be able to provide some services, such as completing an order.

We use cookies and similar browser storage to keep you signed in, remember your cart and wishlist, save preferences such as recently viewed products, and understand how our website is used so we can improve it.

You can clear or block cookies through your browser settings. Some parts of the website, such as checkout, may not work properly without them.

We do not sell or rent your personal data. We share it only when needed to serve you:

• Delivery and logistics partners — your name, phone number and address, so they can deliver your order.
• Payment gateways and banks — to process payments and refunds securely.
• Service providers — such as hosting, image storage, email, SMS and messaging providers, who act on our instructions and are bound to keep your data confidential.
• Authorities — where required by law, court order or a lawful request from a government agency.
• Business transfers — if our business is merged, acquired or restructured, your data may be transferred subject to this policy.

We keep your personal data only for as long as your account is active or as needed for the purposes described in this policy. Invoices and transaction records are retained for the period required by tax and accounting laws. When data is no longer needed, we delete it or anonymise it so it can no longer identify you.

We use reasonable security practices to protect your data, including:

• Encrypted connections (HTTPS) across our website.
• Hashed passwords and OTP-based verification.
• Access to personal data limited to authorised staff who need it for their work.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password confidential and let us know immediately if you suspect any unauthorised use of your account. If a data breach affects you, we will inform you and the relevant authorities as required by law.

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how it is used.
• Correct or update inaccurate or incomplete information.
• Request erasure of your personal data, unless we must keep it by law.
• Withdraw consent you have given us.
• Raise a grievance and have it addressed.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity.

You can update most details yourself under My Account. For anything else, write to us at info@abnaya.com. We may need to verify your identity before acting on a request.

We send promotional messages only if you have agreed to receive them. You can unsubscribe at any time using the link in our emails, by changing your notification preferences in your account, or by contacting us. You will continue to receive essential messages about your orders and account.

Our website is not intended for children under 18. We do not knowingly collect personal data from children without verifiable consent from a parent or legal guardian. If you believe a child has shared personal data with us, please contact us and we will delete it.

Our website may contain links to third-party websites, such as payment pages or social media. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top shows when it was last revised. For significant changes, we will notify you by email or through a notice on our website.

If you have any questions about this Privacy Policy or how we handle your personal data, write to us at info@abnaya.com or call +91 7309851526. You can also reach us through our Contact page.