1. What we collect

To fulfil orders: name, phone (+91), delivery address, pincode and email. On-device (browser storage): your cart, wishlist, recent orders and cookie-consent flag. If you sign in: your email and a session token.

2. Why we collect it

Delivering your order, COD verification, order updates (SMS/WhatsApp/email), and — only if you join the newsletter — drop announcements. We don't sell your data. Full stop.

3. Cookies & local storage

We use a consent banner on first visit (per the Digital Personal Data Protection Act, 2023). Essential storage keeps your cart and session working; nothing tracks you across other sites.

4. Third parties

Pincode serviceability uses India Post's public lookup. Transactional email is sent through Resend. Couriers receive your name, address and phone — that's how parcels work.

5. Your rights

Under the DPDP Act you can request access, correction or erasure of your personal data, and withdraw consent. Email hello@shor.pro with the subject “DPDP request” — we respond within 30 days.

6. Data retention

We keep personal data only as long as needed for the purpose it was collected:

• Account data (email, profile): until you delete your account or request erasure.
• Order & transaction records (address, phone, invoices): up to 8 years, as required by Indian tax and company law, then deleted or anonymised.
• Marketing preferences: until you unsubscribe.
• Technical & security logs: up to 12 months.

7. Security

Data in transit is encrypted (HTTPS); sessions are signed tokens, never plaintext. Payments are processed by a PCI-DSS-compliant gateway — we never store your full card details.

8. Grievance officer

Grievance Officer, LHAKAR TECHNOLOGIES PRIVATE LIMITED, Registered office: No. 5, Varthur Hobli, Challagatta Village, Whistling Greens, Bengaluru, Karnataka — 560071 — hello@shor.pro · +91 87228 38757.