Loading
LoadingLoadingLast updated 7 August 2026
This policy explains what personal data Arimaa Products collects when you use this website or order from us, why we collect it, who it is shared with and what rights you have over it. We are the data fiduciary for that data under India’s Digital Personal Data Protection Act, 2023.
The short version: we collect what we need to send you your order and nothing else. We do not run advertising or analytics trackers, we never see your card or UPI details, and we do not sell or rent your data to anyone.
Information you give us when you order. Your name, email address, phone number and delivery address including PIN code. You do not need to create an account to shop with us, and we do not ask you to set a password.
Order details. The items you bought, quantities, prices, delivery charge, order status, and the tracking number and courier once your parcel is dispatched.
Payment references only. We never see or store your card number, UPI ID, CVV, PIN or bank credentials. Payments are handled entirely by Razorpay, our payment gateway. All that reaches us is a transaction reference, the payment method used (for example “UPI” or “card”) and whether the payment succeeded, so that we can match a payment to an order.
Messages you send us. If you contact us over WhatsApp or by email, we keep that correspondence so we can deal with your query and any later question about the same order.
Technical information. Our hosting provider records standard server logs when a page is requested — IP address, browser type, the page requested and the time. These are generated automatically for security and troubleshooting, and we do not use them to build any profile of you.
We do not knowingly collect sensitive personal data. Please do not send us health or medical information, and never send us card details, UPI PINs, OTPs or passwords — we will never ask for them.
We do not send marketing email unless you have specifically asked us to, and we do not use your data for automated decision-making or profiling.
We process your data on the basis of the consent you give when you submit an order or message us, and for the legitimate uses permitted under the Digital Personal Data Protection Act, 2023 — principally performing the contract you have entered into with us and complying with our legal obligations. You may withdraw consent at any time (see “Your rights” below), though we may still need to keep records of a completed order to meet those obligations.
We do not sell, rent or trade your personal data. We share it only with the service providers we need to run the shop, and only with what each of them needs:
We may also disclose data where we are legally required to — for example to a court, tax authority or law enforcement agency — or where it is necessary to establish or defend a legal claim.
Our hosting and database are provided by Google Cloud, and our email and payment providers operate their own infrastructure. Some of these servers are located outside India. Where data is transferred outside India it is done under the terms of our agreements with those providers and in accordance with applicable Indian law.
Your basket is stored in your own browser’s local storage so that it survives a page refresh. Nothing about it is sent to us until you place an order, and you can clear it by emptying your basket or clearing your browser’s site data.
Payment and security cookies. When you reach the payment step, Razorpay’s checkout window is loaded from Razorpay’s own servers and may set cookies necessary to process and secure the payment. A session cookie is also used to keep our staff signed in to the shop’s admin area — it is never set for customers.
No tracking or advertising. We do not use analytics, advertising, retargeting or social media tracking cookies, and there are no third-party trackers on our storefront pages. Our fonts are served from our own domain rather than from a third party.
Order records — including your contact and delivery details — are kept for as long as needed to answer questions about past purchases and to satisfy tax, accounting and legal record-keeping requirements, which under Indian law is generally up to eight years from the end of the relevant financial year. Correspondence is kept for as long as it is useful in supporting you, and then deleted. Write to us if you would like your details removed and we will erase whatever we are not required to retain.
This website is served over HTTPS, so what you submit is encrypted in transit. Order data is held in access-controlled Google Cloud infrastructure, and the shop’s admin area is restricted to authorised staff accounts protected by an expiring, HTTP-only session cookie. Payment credentials never reach our systems at all.
No system can be guaranteed completely secure. If a personal data breach affecting you occurs, we will notify you and the Data Protection Board of India as required by law.
Under the Digital Personal Data Protection Act, 2023 you have the right to:
To exercise any of these, write to us at arimaaproducts@gmail.com or message us on WhatsApp. We will respond within 30 days. We may ask you to confirm your order number or other details so that we can be sure we are dealing with the right person.
You are also expected to give us accurate information and not to impersonate anyone else when placing an order.
Our shop is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy as our shop or the law changes. The revision date is shown at the top of this page, and the version published here is the one that applies. This policy should be read together with our Terms & Conditions.
For any question about this policy, or to raise a grievance about how we have handled your personal data, contact us below. We will acknowledge your complaint within 48 hours and aim to resolve it within 15 days. If you remain unsatisfied, you may complain to the Data Protection Board of India.