Privacy Policy
Last updated: 26 July 2026
HairPatchShop.com ("we", "us", "our") respects your privacy. This policy explains what personal information we collect when you use this website, why we collect it, and the choices you have. By using this website or placing an order, you agree to the practices described here.
1. Information We Collect
- Account information: name, email address, and phone number when you register.
- Order information: shipping address, phone number, and order/product details when you place an order.
- Payment information: we do not collect or store your card, UPI, or netbanking details. Payments are processed directly by our payment partner, Cashfree Payments, on their secure, PCI-DSS compliant systems.
- Communications: messages you send us via WhatsApp, email, or our contact form.
- Technical information: IP address and browser/device information, collected automatically for security (e.g. rate-limiting abusive login attempts) and basic site analytics.
2. How We Use Your Information
- To process and deliver your orders, and to send order confirmations, shipping updates, and receipts.
- To create and manage your account, and to authenticate you when you log in.
- To respond to your enquiries, including via WhatsApp and email.
- To detect and prevent fraud, abuse, and security incidents.
- To improve our website, products, and customer experience.
3. Sharing Your Information
We share personal information only with the third parties needed to run our business, specifically:
- Cashfree Payments — to process your payment securely.
- Courier/logistics partners — to deliver your order to you.
- SMS/WhatsApp notification providers — to send order updates.
- Email service providers — to send transactional emails such as order confirmations and password resets.
We do not sell your personal information to third parties.
4. Data Security
Passwords are stored using industry-standard one-way hashing (bcrypt) — we cannot see or recover your actual password. Account sessions use secure, HTTP-only cookies. Payment card data never touches our servers. While we take reasonable technical and organizational measures to protect your data, no method of transmission or storage is 100% secure.
5. Data Retention
We retain order records for as long as needed to comply with tax, accounting, and legal obligations under Indian law. You may request deletion of your account at any time (see Section 6); we may retain certain order records even after account deletion where required by law.
6. Your Rights
You can:
- Access and update your profile information from your Account page.
- Request a copy of the personal information we hold about you.
- Request correction or deletion of your personal information, subject to our legal obligations (e.g. tax records).
To exercise these rights, contact us at hi@rikularora.com.
7. Cookies
We use essential cookies required for core functionality — for example, keeping you logged in and remembering items in your cart. We do not currently use third-party advertising cookies.
8. Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, the contact details of the Grievance Officer are:
Email: hi@rikularora.com
Phone: +91 95555 56570
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.
This page is a general template and does not constitute legal advice. We recommend having it reviewed by a qualified professional for your specific business circumstances.
