4.1 Information We Collect

Information you provide directly

• Name, email address, phone number, delivery and billing address
• Account credentials (where you create an account)
• Order history, product preferences (e.g., firmness quiz responses), and communications with our support team
• Payment-related details you enter at checkout (see Section 4.2 on payment data)

Information collected automatically

• Device and browser information, IP address, and approximate location
• Pages viewed, time spent, referral source, and interactions on the Platform, via cookies and similar technologies
• Cart and wishlist activity, for personalisation and cart-recovery communications

4.2 Payment Information

We do not store your full card, UPI, or net-banking credentials on our servers. Payments are processed through PCI-DSS-compliant payment gateway partners ([e.g., Razorpay/Stripe/PayU]) who handle and secure your payment data directly, in accordance with their own privacy and security standards.

4.3 How We Use Your Information

• To process, fulfil, and deliver your orders, including sharing necessary details with logistics partners
• To manage returns, exchanges, refunds, and warranty claims
• To communicate order updates, respond to support requests, and provide customer service
• To send marketing communications, offers, and product recommendations, where you have opted in — you may opt out at any time (see Section 4.7)
• To improve the Platform, personalise your shopping experience, and conduct analytics
• To detect and prevent fraud, abuse, and security incidents
• To comply with applicable legal, tax, and regulatory obligations

4.4 Legal Basis for Processing

We process your personal data on the basis of: (a) your consent, given at the point of collection or through your continued use of the Platform; (b) the necessity of processing to perform our contract with you (e.g., fulfilling an order); and (c) our legitimate interests in operating and improving our business, balanced against your rights.

4.5 Sharing of Information

We do not sell your personal data. We share personal data only with:

• Logistics and delivery partners, to fulfil and track your order
• Payment gateway and financing/EMI partners, to process transactions
• Manufacturers/brand partners, where necessary to process a warranty claim on your behalf
• IT, hosting, analytics, and marketing service providers, bound by confidentiality and data-processing agreements
• Law enforcement or regulators, where required by applicable law or to protect our legal rights

4.6 Cookies & Tracking

We use cookies and similar technologies to keep you logged in, remember your cart, understand how the Platform is used, and personalise content and ads. You can control cookies through your browser settings; disabling some cookies may affect Platform functionality. Where required by law, we will request your consent before setting non-essential cookies via a cookie banner.

4.7 Your Rights and Choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data, subject to our legal/record-keeping obligations (e.g., invoices for warranty and tax purposes)
• Withdraw consent to marketing communications at any time, via the "unsubscribe" link in emails, WhatsApp opt-out, or by contacting us
• Request a copy of your data in a portable format, where technically feasible
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, where applicable under law

To exercise any of these rights, contact our Grievance Officer / Data Protection point of contact at [privacy email]. We will respond within the timeframe required by applicable law.

4.8 Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, including order, warranty, and statutory record-keeping requirements (typically [7] years for financial/tax records under Indian law), after which it is securely deleted or anonymised.

4.9 Data Security

We use industry-standard technical and organisational measures — including encryption in transit, access controls, and regular security reviews — to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

4.10 Children's Privacy

The Platform is intended for users who are 18 years of age or older, or who otherwise have the legal capacity to contract. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

4.11 International Data Transfers

If you access the Platform from outside India, your data may be transferred to and processed in India or other countries where our service providers operate, which may have different data-protection laws than your home jurisdiction. We take steps to ensure such transfers are subject to appropriate safeguards.

4.12 Grievance Officer

In accordance with applicable Indian law, the Grievance Officer for the Platform is: [Name], [Designation], [Company Legal Entity Name], [Address], Email: [grievance email], Phone: [phone number]. Complaints will be acknowledged within [48] hours and resolved within [30] days.

4.13 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the Platform, and the "Last updated" date will be revised accordingly.