Privacy
Policy

We collect personal information to fulfil your orders and improve your experience. Here's what we collect and why:

Your information is used only for legitimate purposes directly related to running GudSecrets:

Order fulfilment — processing, shipping, and delivering your orders; sending confirmations, tracking updates, and invoices.

Customer support — responding to your questions, resolving issues, and processing returns or refunds.

Account management — creating and maintaining your account, saving your address, and storing order history.

Marketing — sending promotional emails and offers, but only with your explicit consent. You can unsubscribe anytime.

Product improvement — analysing trends, browsing behaviour, and feedback to improve our website and product offerings.

Legal compliance — maintaining records as required by Indian tax and business laws.

Fraud prevention — detecting and preventing fraudulent transactions and abuse of our platform.

We use cookies and similar technologies to improve your experience and understand how people use our site.

You can control cookies through your browser settings. Disabling essential cookies may affect site functionality.

We work with trusted partners to operate our business. Each has its own privacy policy:

Razorpay — payment processing. We share your transaction data (amount, order ID) but not your card details.

Shiprocket — shipping and logistics. We share your name, phone, and delivery address to ship your order.

Resend — transactional email delivery (order confirmations, OTPs).

Google Analytics — anonymised website usage analytics. No personally identifiable data is shared.

WhatsApp Business — optional order notifications and support messages (only if you opt in).

We never sell your personal data to third parties. We only share what's strictly necessary for service delivery.

We take the security of your personal data seriously and implement appropriate technical and organisational measures:

Encryption — all data transmitted between your browser and our servers is encrypted using TLS/HTTPS.

Hashed passwords — passwords are never stored in plain text. We use secure one-way hashing algorithms.

Access controls — only authorised GudSecrets personnel can access personal data, on a need-to-know basis.

Secure infrastructure — our backend runs on Cloudflare's global network, with enterprise-grade DDoS protection and data residency controls.

Despite these measures, no online transmission is 100% secure. If you suspect unauthorised access to your account, contact us immediately at [email protected].

Under India's Digital Personal Data Protection (DPDP) Act 2023, you have the following rights:

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

We retain your personal data only as long as necessary for its original purpose or as required by law:

Account data — retained for 2 years after your last activity. You may delete your account at any time.

Order records — retained for 7 years as required by Indian GST and taxation laws.

Marketing data — retained until you unsubscribe. Unsubscription is effective within 24 hours.

Support communications — retained for 1 year to resolve any follow-up queries.

GudSecrets is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will promptly delete it.

Users between 13–18 should use GudSecrets with parental consent.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we'll notify registered users by email and update the "Effective from" date at the top of this page.

Your continued use of GudSecrets after updates constitutes acceptance of the revised policy.