Privacy Policy — ROSAAYA

Last updated: 4 August 2026

This policy explains what personal data we collect, why we collect it, who we share it with, and what control you have over it.

What we collect

Name, delivery address, PIN code — to deliver your order
Email address — order confirmation, tracking and support replies
Mobile number — delivery updates and courier contact
Order history — to handle returns, refunds and support queries
Payment reference (transaction or UTR number) — to confirm and reconcile your payment
IP address, browser and device type — security, fraud prevention and analytics

What we do not collect

We never see or store your card number, CVV, UPI PIN or bank password. Payments are handled entirely by our payment partners on their own secure systems. We receive only a success or failure result and a transaction reference.

You can shop without creating an account. We do not require you to register, and we do not store passwords for customers.

How we use your data

To process, pack, deliver and invoice your order
To contact you about your order
To handle returns, refunds and customer support
To detect and prevent fraudulent orders
To meet our tax and accounting obligations
To send marketing email — only if you opted in, and you can unsubscribe at any time

We do not sell your personal data, and we do not rent or trade our customer list.

Who we share it with

Payment gateways — to process payments and refunds
Courier partners — your name, address and phone number, to deliver your parcel
Email provider — to send order confirmations and updates
Hosting provider — which stores the site and its database
Government authorities — where we are legally required to disclose

Cookies and analytics

Essential cookies keep your shopping bag and session working and cannot be turned off without breaking the site. We also use analytics and advertising tools to understand how the site is used; these may set their own cookies. Embedded videos from Instagram and YouTube load only when you choose to play them, so their trackers are not set unless you do.

How long we keep it

Order and invoice records are kept for as long as tax and accounting law requires. Marketing contact details are kept until you unsubscribe.

Your rights

You can ask us for a copy of your data, to correct it, to delete it where we are not required to keep it, or to stop sending you marketing email. Email us and we will respond within 30 days. We may ask you to confirm your identity first.

Children

Our products are not directed at children and we do not knowingly collect data from anyone under 18.