Privacy Policy

This policy explains what personal information odiaROASTS collects when you use this website, why we collect it and how you can control it. We follow the Digital Personal Data Protection Act, 2023.

What we collect

• Orders: your name, email, mobile number, delivery address, gift message and the items you buy.
• Account: if you create one, your email, name, optional mobile number and a securely hashed password.
• Enquiries and newsletter: the details you type into our forms, and your email if you subscribe.
• Payments: handled by Razorpay. We receive a payment reference and status — never your card, UPI PIN or bank credentials.

How we use it

To process and deliver your orders, issue GST invoices, reply to your enquiries, send updates you asked for, prevent fraud and meet legal and tax obligations. We don’t sell your data.

Cookies and storage

We use a secure, HttpOnly sign-in cookie, a cookie that lets this browser show orders you placed as a guest, and your browser’s local storage to remember your cart (product codes and quantities only). We do not use advertising trackers.

Sharing

Only with service providers needed to run the shop — payment processing (Razorpay), delivery partners (name, phone and address for delivery) and our hosting and accounting systems — and when required by law.

Retention

Order and invoice records are kept as required under GST and accounting law. You can ask us to delete your account and marketing data at any time.

Your choices

You can access, correct or delete your information, withdraw consent for marketing, or raise a concern by writing to [email protected]. Every newsletter has an unsubscribe option.