Privacy Policy

What we collect

• Order details: your name, email address, phone number, shipping address and what you bought.
• Account details, if you create one: email address and an encrypted password managed by our authentication provider. We never see your password.
• Payment data is collected and processed by Razorpay on their own systems. We store only the Razorpay order and payment reference, never your card, UPI or bank details.
• Basic technical data your browser sends to our host (IP address, user agent, pages requested) which is used for security and rate limiting.

How we use it

• To take payment for, pack and deliver your order.
• To send order confirmations, dispatch and tracking updates, and to answer your support messages.
• To let you look up your own orders on the Track Order and account pages.
• To detect and prevent fraud and abuse of the store.

Who we share it with

We do not sell your personal data and we do not share it for advertising. We share the minimum necessary with the service providers that make the store work:

• Razorpay — payment processing.
• Supabase — the database and authentication that hold your order and account records.
• Vercel — website and API hosting.
• Courier partners — your name, address and phone number, so your parcel can be delivered.
• Email and SMS providers — to send order and tracking notifications.
• Government authorities, where we are legally required to disclose information.

Cookies and local storage

• Your cart is kept in your browser’s local storage so it survives a page refresh. It never leaves your device until you check out.
• If you sign in, an authentication token is stored in your browser to keep you signed in.
• We do not run third-party advertising or cross-site tracking cookies.

Retention and your rights

• Order records are retained for as long as needed for accounting, tax and warranty purposes.
• You can ask us to access, correct or delete your personal data, or to delete your account, by emailing hello@golposutra.com. We respond within 30 days.
• Deleting your account does not delete completed order records we are required to keep.

Children, changes and contact

• The store is not directed at children under 13 and we do not knowingly collect their data.
• If this policy changes we update the date at the top of this page.
• Questions about privacy: hello@golposutra.com, or write to 12A, Shakespeare Sarani, Kolkata — 700071, West Bengal, India.