Scope
This policy sets out what Bramley Store collects when you shop at bramleystore.shop, why it is held and for how long, under the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000).
What we collect
Name, delivery address, PIN code, phone number and email; the contents and value of the order; any gate-access note left for the freight driver; and basic technical data such as pages viewed and device type.
What we never keep
We never store card numbers, CVV codes or your UPI PIN. UPI payments are authorised inside your own bank’s app and only a reference number reaches us.
Why we hold it
To stage and deliver the consignment, answer support messages, process returns and refunds, keep the accounting records the law requires, and detect fraudulent ordering. We do not sell personal data or rent mailing lists.
Who else sees it
The freight partner receives the name, address, phone number and access notes; the payment provider handles the UPI authorisation; hosting and email providers store the site and its messages. Nobody else.
Cookies
Cookies keep the cart and session working, and aggregate analytics show which pages are read. You can block or clear them; the cart will forget its contents.
Your rights
Ask for a copy of your data, ask us to correct it, or ask for erasure once the order and its return window are closed and no accounting duty requires us to keep it. Write to [email protected]; we act within thirty days.
Retention and security
Order records are kept for the period Indian accounting rules require, then deleted. The site runs over HTTPS and only the proprietor can reach the order database.
Children
This shop is not intended for anyone under eighteen and we do not knowingly collect data from children. Tell us if you believe a child has given us data and it will be erased.
Grievance Officer
The proprietor of Bramley Store acts as Grievance Officer for the purposes of the IT Act 2000 and DPDP 2023, reachable in writing at the registered address on our Contact page. Privacy complaints and stalled replacement requests are acknowledged within forty-eight hours and resolved within thirty days.