Privacy policy
What follows is the whole of it – what Calvera Society holds about you, why it is held, who else sees it, and how to get it changed or removed.
Your rights
The Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000) give you four practical rights here: see what is held, have it corrected, have it erased where no legal duty requires us to keep it, and withdraw consent where processing rests on consent. Email [email protected] with your Order ID to use any of them.
What is collected
- Order details: name, delivery address, phone number and email address – needed to pack the order, hand it to a courier and contact you about it.
- Order history: what was ordered and when, so returns and queries can be checked.
- Technical data: the minimum your browser sends when loading pages.
What is not collected
What is not here counts too. Because this store does not accept cards, no card details are collected or stored – there is simply no such data. UPI payments are authorised inside your own banking app, so your PIN never touches our systems.
Cookies
Only essential cookies are set, for the cart and the checkout. There is no advertising or profiling tracking on this site.
Who it is shared with
Sharing is limited to what running the shop requires: the courier needs the delivery address, the payment processor needs to settle the transaction, the host stores the site. Beyond those, information is disclosed only where the law requires it. It is never sold or rented, and never passed on for marketing.
How long it is kept
Order records are kept for as long as is reasonably necessary to handle returns, queries and accounting, and for as long as applicable law requires them to be kept.
Grievance contact
Privacy complaints go to the grievance contact: [email protected]. Being a small operation, Calvera Society has not appointed a separate named officer – the person who runs the shop deals with these directly and acknowledges within one business day.
Security
The site is served over HTTPS. Access to order records is limited to the people who need it to fulfil and support orders. No system is perfectly secure, and we do not claim otherwise.
Changes
If this policy changes, the updated version is published on this page.
Marketing
We do not run a marketing list. If you receive email from us it will be about an order you placed or a question you asked, not a promotion.
If something goes wrong
If order data is exposed in a way that could affect you, we will contact the people affected at the email address on the order and describe what happened and what we have done about it.