Privacy Policy

Information You Provide

When you create an account, place an order, or contact us, we collect: • Full name • Email address • Phone number • Delivery address(es) • Payment information (processed securely by Razorpay — we never store your card details) • Any messages or correspondence you send us

Information Collected Automatically

When you browse our website, we automatically collect: • IP address and approximate geographic location • Browser type and version • Pages visited, time spent, and navigation patterns • Device type and operating system • Referring URLs This information is collected via cookies and similar technologies to improve your experience and for analytics purposes.

We use the information we collect to: • Process and fulfil your orders, including shipping and delivery via Shiprocket • Send order confirmations, shipping updates, and receipts by email • Manage your account and respond to your enquiries • Process returns, refunds, and exchanges • Improve our website, products, and customer experience • Detect and prevent fraud or unauthorised activity • Send you promotional communications (only with your consent — you may opt out at any time) • Comply with legal obligations under Indian law

We do not sell your personal data. We share it only with trusted third-party service providers who help us operate our business: • Razorpay — payment processing. Your payment data is governed by Razorpay's Privacy Policy. • Shiprocket — shipping and logistics. Your name, address, and phone number are shared to fulfil delivery. • Cloudinary — secure image storage and delivery for product assets. • Resend — transactional email delivery (order confirmations, shipping updates). • MongoDB Atlas — secure cloud database hosting for your account and order data. • Vercel — website hosting and analytics. All service providers are contractually obligated to handle your data securely and only for the purposes specified. We may also disclose your information if required by Indian law, court order, or government authority.

We use cookies and similar technologies to: • Keep you signed in to your account (session cookies) • Remember items in your cart • Understand how visitors use our website (analytics) • Improve site performance You can control cookie settings through your browser. Disabling cookies may affect certain functionality such as staying logged in or maintaining your cart.

We take the security of your personal data seriously. Our measures include: • HTTPS encryption for all data transmitted between your browser and our servers • Passwords hashed using bcrypt — we never store plaintext passwords • Payment data processed exclusively by Razorpay via PCI-DSS compliant infrastructure — we do not store card numbers or CVVs • Access to personal data limited to authorised personnel only • Regular security reviews of our systems and dependencies No system is entirely immune to risk. If you suspect unauthorised access to your account, please contact us immediately at hydekraftinfo@gmail.com.

We retain your personal data for as long as necessary to: • Maintain your account and order history • Comply with legal, accounting, and tax obligations under Indian law (typically 7 years for financial records) • Resolve disputes and enforce our agreements If you request account deletion, we will delete your personal profile data within 30 days, subject to any legal retention obligations.

Under applicable Indian data protection law, you have the right to: • Access — request a copy of the personal data we hold about you • Correction — request correction of inaccurate or incomplete data • Deletion — request deletion of your personal data (subject to legal retention obligations) • Opt-out — unsubscribe from marketing communications at any time via the unsubscribe link in any email or by contacting us • Portability — request your data in a structured, machine-readable format To exercise any of these rights, email us at hydekraftinfo@gmail.com with the subject line "Data Request". We will respond within 30 days.

Our website is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: HydeKraft F206, Gardenia Gateway, Sector-75 Noida, Uttar Pradesh – 201301, India Email: hydekraftinfo@gmail.com Phone: +91-9709075039