Search Bag

Privacy policy

Effective 21 September 2026. This policy explains how [TODO: LEGAL_NAME] ("JUJU", "we") handles your personal data when you visit this store or buy from it, as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

What we collect

  • Order details — your name, delivery and billing address, email address, phone number, the pieces you order and your order history.
  • Payment confirmation — whether a payment succeeded and its reference. Card, UPI and bank details are handled by the payment provider and never reach us.
  • Messages — what you send through the contact form or by email.
  • Account details — if you create an account: your email address and saved addresses.
  • Device and usage data — collected by our e-commerce platform, Shopify, through cookies: pages viewed, the contents of your bag, and your device and browser type.

Why we use it

  • To take, confirm, pack, ship and deliver your order, and to handle returns and refunds.
  • To answer your messages and complaints.
  • To prevent fraud and keep the store secure.
  • To meet our legal obligations, including tax and accounting records.

We do not sell your personal data, and we do not use it for advertising profiles. We send marketing email only if you ask for it, and every such email has an unsubscribe link.

Who receives it

Only the service providers an order needs, each for that purpose only:

  • Shopify, which hosts this store and processes order data on our behalf. Shopify may store data outside India.
  • The courier delivering your parcel: your name, address and phone number.
  • The payment provider (Razorpay (cards, UPI, net banking and wallets, once enabled) and Cash on Delivery): what it needs to process and refund a payment.
  • Government authorities, where the law requires it.

Cookies

The store uses cookies that it needs to work — your bag, checkout and sign-in — and Shopify's analytics cookies to understand how the store is used. You can clear or block cookies in your browser; the bag and checkout will not work without the essential ones.

How long we keep it

Order records are kept for eight years, as Indian tax and accounting law requires. Messages are kept for as long as it takes to resolve them and then for up to one year. Anything else is deleted once it is no longer needed for the purpose it was collected for.

Your rights

Under the DPDP Act you can ask us to:

  • give you a summary of the personal data we hold about you and who we have shared it with;
  • correct, complete or update it;
  • erase it, where we no longer need it for an order or a legal obligation;
  • withdraw any consent you have given, as easily as you gave it;
  • nominate someone to exercise these rights on your behalf.

Write to jujuintownthoothukudi@gmail.com. We will answer within 30 days.

Grievances

Our Grievance Officer for data protection and consumer complaints is [TODO: GRIEVANCE_OFFICER_NAME], [TODO: GRIEVANCE_OFFICER_DESIGNATION], [TODO: GRIEVANCE_OFFICER_CONTACT]. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Security

The store runs over HTTPS, payments are processed by PCI-DSS compliant providers, and access to order data is limited to the people who fulfil orders. No system is perfectly secure; if a breach affects your data, we will tell you and the Data Protection Board as the law requires.

Children

The store is not meant for anyone under 18. We do not knowingly collect data from children; if you believe a child has given us their data, write to us and we will delete it.

Changes

If we change this policy, the effective date above changes with it. Significant changes will be announced on this page before they take effect.

Contact

[TODO: LEGAL_NAME], [TODO: ADDRESS] · jujuintownthoothukudi@gmail.com · [TODO: PHONE]