Privacy policy
Effective date
On this page
A home is a private place, and what you tell us about yours should stay that way. This policy explains what NAISH INTERNATIONAL (“we”, “us” or “our”), which runs the NAISH INTERNATIONAL online store (the “Platform”), collects, why we need it and the choices you have. It is written to meet the Digital Personal Data Protection (DPDP) Act, 2023 and the Information Technology Act, 2000.
What we collect
- Account details: your name, email address, mobile number and a securely hashed password. We never see or store the password itself.
- Delivery details: the addresses you save or use for an order, including the contact number for that address.
- Order details: what you bought, the amounts, any coupon used, your delivery status and the date you accepted our terms at checkout.
- Payment references: transaction IDs and the status details our payment gateways send back. Card, UPI and bank details are entered with the gateway, not with us, and we never store full card numbers.
- Saved items: your cart and wishlist, kept against your account.
- Messages: your name, email, optional phone number and message when you use our contact form, plus anything you send us by email.
- Technical details: the IP address and browser details recorded with your signed-in session. For the contact form we keep a scrambled form of the IP address to stop spam, not the address itself.
Why we use it
We use your personal data only to:
- run your account and keep it secure, including verifying your email;
- take payment for, pack and deliver your orders;
- send order updates by email and WhatsApp;
- answer your questions and handle cancellations and refunds;
- prevent fraud and misuse of the Platform;
- meet our legal, tax and accounting duties.
We do not send marketing messages through the Platform. If that ever changes, we will ask for your consent first.
Cookies and browser storage
We use only what the store needs to work: a session cookie that keeps you signed in, and a small note in your browser so a popup you closed does not keep coming back.
We do not use advertising cookies, tracking pixels or third-party analytics. Blocking cookies in your browser will stop you from signing in or checking out.
Who we share it with
We do not sell your personal data. We share only what each service provider needs to do its job for us:
- Payment gateways (Razorpay, Cashfree or Paytm, whichever handles your payment): the amount, your contact details and an order reference.
- Logistics partners (Shiprocket and its couriers): your name, delivery address, phone number, email and the parcel’s contents and value.
- WhatsApp messaging provider (MyOperator): your phone number, name and order details, to send order updates and verification codes.
- Email delivery provider: your email address and the content of the order or account email being sent.
- Authorities: where the law or a valid legal order requires it.
How long we keep it
We keep account details while your account is open. Order and payment records are kept for as long as tax and accounting laws require, even if you close your account. We delete or anonymise other personal data once it is no longer needed for the purpose it was collected for.
How we protect it
We use encrypted connections, hashed passwords and restricted staff access, and payments run through PCI-DSS compliant gateways. No system is perfectly secure, so please keep your password private and tell us straight away if you suspect misuse of your account.
Your rights and controls
Under the DPDP Act, 2023 you can:
- Access a summary of the personal data we hold about you and who we have shared it with.
- Correct or erase it, unless we must keep it by law. You can change your mobile number, password and addresses yourself in your account.
- Withdraw consent at any time. We may then be unable to serve you, and withdrawal does not affect what was done before it.
- Nominate someone to exercise these rights if you die or become unable to do so.
- Complain to us, and then to the Data Protection Board of India if you are not satisfied with our answer.
To use any of these rights, write to ashnaarahomes@gmail.com.
Children
The Platform is for adults. We do not knowingly collect data from anyone under 18; if you believe a child has given us their details, tell us and we will delete them.
Changes to this policy
When this policy changes, we update it here along with the effective date at the top of the page.
Grievance Officer and Data Protection Officer
In accordance with the Information Technology Act, 2000 and the rules under it:
- Name
- Arushi Aggarwal
- Designation
- Grievance Redressal & Data Protection Officer
- Address
- KHASRA NO. 21/7, PLOT NO-71, GALI NO 7, Saroop Nagar, New Delhi, North Delhi, Delhi, 110042
- Phone
- +91 9910092001
- Response time
- We acknowledge complaints within 48 hours and resolve them within 1 month of receipt.
Questions? Contact us.