Privacy Policy
Privacy Policy
Last updated: 2026-06-29
The Exotic Basket ("we", "us") takes your privacy seriously. This page explains what personal information we collect when you use this store, why we collect it, and what rights you have under the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000.
What we collect
When you place an order, here is the information we ask for and store:
- Your contact details, including name, mobile number, and delivery address. We need these to fulfil and deliver your order.
- Payment information, such as the payment method, transaction reference, amount, and status. We do not store your full card number or CVV. Those are handled directly by our payment gateway.
- Your order details, including the items you bought, quantities, and any special instructions you shared with us.
- Basic browser data, such as your IP address, user agent, and session info. This is collected automatically and used for security and basic analytics.
We do not knowingly collect personal information from anyone under 18.
Why we use it
We use your information to:
- Process and deliver your orders.
- Stay in touch about your order, including delivery updates, queries, and issues.
- Handle refunds and warranty claims.
- Detect and prevent fraud.
- Improve how the store works, based on anonymous usage patterns.
We do not sell your personal information to anyone.
Who we share it with
We share your information only with the people we need to share it with:
- Our delivery partners get your name, address, and phone number so they can deliver your order.
- Payment gateways receive the payment details needed to process your transaction. They have their own privacy policies.
- Law enforcement or regulatory authorities, but only when we are legally required to share.
How long we keep it
We hold on to your order and contact information for as long as Indian tax law requires us to keep invoice records, which is usually about eight years, or as long as we need it to resolve disputes. If you want us to delete your data earlier, you can ask, and we will do what we can within those legal limits.
Your rights
Under the DPDP Act 2023, you have the right to:
- Ask us what personal data we hold about you.
- Ask us to correct any information that is wrong.
- Ask us to delete data we no longer need to keep.
- Withdraw consent for anything you opted into. (We do not currently send marketing communications, so this mostly applies if that changes in future.)
- Raise a complaint with the Data Protection Board of India.
To exercise any of these rights, please contact us at 7030954870.
Cookies and tracking
We use a small amount of browser storage so that your cart survives between sessions on the same device. We do not use third-party advertising trackers.
Security
We follow standard security practices to keep your information safe. That said, no online transmission is fully secure, so please share data with us knowing that small risk exists.
Changes to this policy
We may update this policy from time to time. When we make significant changes, we will highlight them on this page. If you continue using the store after a change, that counts as accepting the updated policy.
Contact
If you have any privacy questions, you can reach us at 7030954870. Our Contact page lists every way to get in touch.
This page is based on a Zsite starter template. Edit any section to match how your business actually works. If you sell regulated goods, deal with B2B contracts, or serve customers outside India, please have a lawyer review it before publishing.