Skip to content
WackyBird
0

Privacy policy

Last updated: [Add: Effective date]

The short version

  • We collect only what we need to deliver your socks and look after you.
  • We never sell your data. We share it only with the partners who process payments, ship orders and send messages for us.
  • Marketing messages only if you say yes, and you can stop them any time.
  • You can ask to see, correct or delete your data by writing to us.

1. Who we are

This website is run by [Add: Registered business name], [Add: Registered address] ("Wacky Bird", "we", "us"). For your personal data we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). This policy also follows the Information Technology Act, 2000 and its rules.

2. What we collect

  • When you order or sign up: name, email, phone number, delivery and billing address, and your account password (stored only in encrypted form).
  • About your orders: what you bought, prices, payment method, delivery status, returns and support conversations.
  • Payments: handled by our payment gateway, Razorpay. We receive a confirmation and a reference number. We never see or store your full card number, CVV or UPI PIN.
  • COD confirmation: your phone number, to send the one-time code that confirms a cash on delivery order.
  • Technical data: IP address, browser and device type, and the pages you visit, which our servers log for security and to keep the site working.

3. Why we use it

  • to take, deliver and support your orders, returns and refunds,
  • to verify COD orders and prevent fraud,
  • to send order updates by WhatsApp, SMS and email,
  • to issue GST invoices and keep records the law requires,
  • to improve the website and our products, and
  • to send offers and new drops, only if you have agreed.

We use your data because you gave us consent when placing an order or signing up, or where the DPDP Act allows it without consent (for example, to meet a legal duty).

4. Who we share it with

We never sell or rent your personal data. We share only what each partner needs to do its job for us:

  • Razorpay, to process payments and refunds,
  • Shiprocket and its courier partners, to pick up and deliver parcels,
  • our hosting provider, which runs the servers this website lives on,
  • email, SMS and WhatsApp messaging providers, to send you updates, and
  • government or law enforcement bodies, only when the law requires it.

Some of these providers may process data outside India, as the DPDP Act allows. They are bound to keep it confidential and use it only for our work.

5. Cookies

We use only the cookies the shop needs to work: one keeps you signed in and one remembers your cart. We don't use advertising cookies. If we ever add analytics or advertising tools, we will update this policy and ask for your consent where needed.

6. How long we keep it

We keep order and invoice records for as long as tax laws require (currently up to 8 years). Account details stay until you delete your account. Marketing consent lasts until you withdraw it. After that we delete or anonymise the data.

7. Your rights

Under the DPDP Act you can:

  • ask what personal data we hold about you and who we've shared it with,
  • ask us to correct, complete or update it,
  • ask us to delete it (we'll still keep what the law says we must, such as invoices),
  • withdraw consent for marketing at any time, by replying STOP or using the unsubscribe link,
  • nominate someone to use these rights for you in case of death or incapacity, and
  • raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

To use any of these rights, email [Add: Support email] from the email or phone linked to your orders. We reply within 7 days and act on the request within the time the law allows.

8. Children

The shop is meant for adults. If you are under 18, please ask a parent or guardian to order for you. We don't knowingly collect data from children; if you think we have, write to us and we'll delete it.

9. Keeping it safe

We use HTTPS, encrypted passwords, sign-in tokens that browser scripts can't read, and access controls on our systems. No system is perfectly secure, so if a breach ever affects your data, we'll inform you and the Data Protection Board as the law requires.

10. Grievance officer

For any privacy question or complaint, contact our grievance officer: [Add: Grievance officer name], [Add: Grievance officer designation], [Add: Support email], [Add: Support phone / WhatsApp], [Add: Registered address].

11. Changes

If we change this policy we'll update the date at the top, and tell you by email for any important change.