Last updated: [Effective date]
Draft template pending legal review. Highlighted items are to be confirmed by BRAZO.
Who we are
[Placeholder] Registered company name (“BRAZO”) is the data fiduciary responsible for personal data collected through this website, in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
Data we collect
- Account details: name, email address and a securely hashed password.
- Order details: name, phone number, email, shipping address, products ordered and order history.
- Payment details: processed directly by Razorpay. We receive only a payment reference, never your full card, UPI or bank details.
- Messages: information you send through the contact form or newsletter sign-up.
- Technical data: a session cookie to keep you signed in and items saved in your cart on your own device.
How we use it
- to process, deliver and support your orders
- to manage your account and show your order history
- to respond to your questions and complaints
- to send newsletters, only if you subscribe (you can unsubscribe at any time)
- to prevent fraud and keep the website secure
- to meet legal, tax and accounting obligations
Retention
We keep order records for as long as required by tax and accounting laws [typically 8 years], and account data until you ask us to delete your account. Newsletter data is deleted when you unsubscribe.
Your rights
You can ask us to access, correct or erase your personal data, withdraw consent for newsletters, or nominate another person to exercise your rights. To make a request, contact our Grievance Officer below.
Security
Passwords are stored using strong one-way hashing, connections are encrypted, and payment data is handled by a PCI-DSS compliant payment provider. No online service is completely risk-free, but we take reasonable measures to protect your data.
Children
Our website is not intended for children under 18. Parents or guardians should place orders on their behalf.
Grievance officer
In accordance with the Information Technology Act, 2000, the Consumer Protection (E-Commerce) Rules, 2020 and the Digital Personal Data Protection Act, 2023, the details of our Grievance Officer are:
- Name: [Grievance Officer name]
- Designation: [Designation]
- Email: [grievance email]
- Address: [Placeholder] Office address, City, State, PIN
- Working hours: [Monday–Friday, 10:00–18:00 IST]
We acknowledge complaints within 48 hours and aim to resolve them within one month of receipt.