Skip to main content

Privacy Policy

Draft — not yet approved

This policy was prepared for Sahaji's review and is not yet in effect. Highlighted text marks information still to be provided or confirmed.

Version 0.1-draft · Last updated 14 October 2026

This policy explains what personal data Sahaji collects, why, and the choices and rights you have under the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

Who is responsible for your data

Sahaji, Basirhat, North 24 Parganas, West Bengal, India To be confirmed: full address with PIN code, decides how your personal data is used (we are the "Data Fiduciary"). Contact for privacy questions: To be confirmed: Grievance Officer: name, designation, phone and email.

Data we collect

  • When you browse this website: technical data such as your IP address, browser type and pages visited, collected by our hosting and security provider and — only if you accept analytics cookies — by Google Analytics.
  • When you order on WhatsApp or by phone: your name, phone number, delivery address, the products you order, and payment confirmation details (for example a payment screenshot or reference number).
  • When you contact us: the messages you send and our replies.

This website has no forms and no login. We do not ask for or store card or bank passwords.

Why we use your data

  • To confirm, pack, deliver and support your orders.
  • To reply to your questions and complaints.
  • To keep records required by tax and other laws.
  • To keep this website secure and working, and — with your consent — to understand how visitors use it.

We do not sell your personal data. We do not send you marketing messages unless you ask us to.

Who we share it with

Only as needed for the purposes above:

  • Courier partners — name, phone number and address, to deliver your parcel.
  • WhatsApp (Meta Platforms) — when you chat with us on WhatsApp.
  • Banks and payment apps — to receive and confirm your payment.
  • Cloudflare — our website hosting and security provider.
  • Google — Google Fonts (used to display the website text; your browser connects to Google to load fonts, which shares your IP address) and Google Analytics (only with your consent).
  • Government authorities — when the law requires it.

How long we keep it

To be confirmed: Retention schedule to be approved: order and invoice records for as long as tax law requires (period to be confirmed by the CA); customer details from inactive customers removed after 3 years; WhatsApp chats and payment screenshots for no longer than needed for the order and any complaint.

Your rights

You can ask us to: tell you what personal data we hold about you; correct or update it; delete it (unless the law requires us to keep it); and withdraw any consent you gave. You can also nominate a person to exercise these rights on your behalf if you are unable to. To make a request, contact To be confirmed: Grievance Officer: name, designation, phone and email. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Cookies

See our Cookie Policy for details of the cookies used on this website and how to change your choice.

Security

We use reasonable security measures, including encrypted (HTTPS) connections and restricted access to order records. No system is completely secure, but we work to protect your data and will inform you and the authorities as required by law if a breach affects you.

Children

Our website and products are intended for adults (18 and over). We do not knowingly collect data from children.

Changes to this policy

We may update this policy. The version and date at the top of this page show the latest change.