Privacy
Policy

When you visit Sakhy, sign up for an account, place an order, or contact us, we may collect the following categories of personal information:

• Identity Data — your name, email address, and phone number.
• Contact Data — billing and shipping address (line 1, line 2, city, state, pincode).
• Transaction Data — details of products you purchase, order history, and payment provider references. We do not store full payment card numbers or UPI identifiers on our servers.
• Technical Data — IP address, browser type, time zone, and how you interact with the site (pages visited, products viewed, referrer).

We use your personal information only for the following purposes:

• Processing and fulfilling your orders.
• Communicating with you about your orders and our products.
• Improving your shopping experience and personalising product recommendations.
• Detecting, preventing, and addressing fraud or technical issues.
• Complying with legal obligations and responding to lawful requests from public authorities.

We do not sell, rent, or trade your personal information with third parties for their own direct marketing purposes.

We partner with a limited number of trusted service providers to operate the store:

• Razorpay (razorpay.com) — payment processing for UPI, cards, net banking and wallets.
• Supabase (supabase.com) — database, authentication and file storage.
• Lovable (lovable.dev) — hosting and deployment platform.

Each third party operates its own privacy policy. We encourage you to review their policies for details about how they handle your data when using those services.

Sakhy uses minimal essential cookies to keep you signed in to your account and remember things like your cart and wishlist across visits. We also use:

• Session cookies — deleted when you close your browser. These let you stay authenticated and navigate the site smoothly.
• LocalStorage — your cart, wishlist and preferences are stored on your device and are never shared with third parties.

We do not set any third-party tracking or advertising cookies. You may disable cookies through your browser settings, but some features of the site may not function as intended.

We retain your personal data only for as long as it is necessary to fulfill the purposes described above, or as required by applicable law. This generally means:

• Account information — until you choose to delete your account or request erasure.
• Order records — retained for at least 7 years for tax and financial compliance under Indian law.
• Analytics and session data — retained in aggregate for up to 26 months.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct any incomplete or inaccurate information.
• Erasure — request that we delete your personal data, subject to our legal retention obligations.
• Restriction — request that we limit how we use your data.
• Portability — receive your data in a structured, commonly used format.

To exercise any of these rights, please email us at the contact address below. We will respond within 30 days of receiving your request.

We implement appropriate technical and organisational measures to protect your personal information. All data in transit is encrypted using TLS (Transport Layer Security). Access to personal data is restricted to authorised personnel who need it for the purposes described above. However, no method of electronic storage or transmission over the internet is 100% secure — therefore we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. The “last updated” date at the top will indicate the most recent revision. We encourage you to bookmark this page and check it periodically.

If you have any questions, concerns, or wish to exercise your rights, please reach out to us at: