Privacy Policy

This Privacy Policy explains how EKK SUUTRAA (“EKKSUUTRAA.”, “we”, “us”) collects, uses, shares and protects your personal data when you use our website and services. It is published in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them. By creating an account or signing in, you agree to this policy and our Terms & Conditions.

1. Data we collect

• Account details: name, email address and password (stored only in hashed form, never readable by us), plus the date you accepted our Terms and Privacy Policy.
• Optional profile details: phone number, gender and date of birth — only if you add them in your profile. You can change or remove them at any time.
• Sign-in and security data: one-time sign-in codes (deleted after use or expiry), and IP address and sign-in attempts, used briefly to block password-guessing and abuse.
• Order details: shipping and billing addresses, items purchased, order history and invoices.
• Payment details: payments are processed by Razorpay. We never see or store your full card number, CVV, UPI PIN or net-banking credentials.
• Usage data: device and browser type, pages visited and approximate location derived from IP address — collected only if you accept analytics cookies.
• Communications: messages you send us through the contact form, email or WhatsApp, and product reviews you post.
• Newsletter: your email address, only if you subscribe.

2. Why we use your data

• To create and manage your account and verify your identity (including OTP login).
• To process, ship and deliver orders, and to handle returns, refunds and exchanges.
• To send order confirmations, shipping updates and service messages.
• To prevent fraud, abuse and unauthorised access.
• To improve our website and product range (only with your analytics consent).
• To comply with tax, accounting and other legal obligations.

We do not sell your personal data. Sale and new-arrival emails are sent only to newsletter subscribers, and each one has a one-click unsubscribe link. Coupon emails may be sent to selected customers who have an account with us.

3. Who we share it with

• Payment processor (Razorpay) — to complete payments and refunds.
• Courier and logistics partners — your name, phone and address, to deliver your order.
• Technology providers — hosting, Cloudflare (website security, content delivery and image storage) and email delivery services that process data on our behalf.
• Analytics provider (Google Analytics) — only if you accept analytics cookies.
• Authorities — where required by law, court order or to protect our legal rights.

4. Cookies

We use essential cookies to keep you signed in, remember your cart and keep the site secure. These cannot be switched off. With your consent, we also use analytics cookies to understand how the site is used. You can change your choice at any time by clearing your browser’s site data for this website, after which the cookie banner will be shown again.

5. How long we keep it

We keep account data while your account is active. Order and invoice records are retained for the period required by Indian tax laws (currently up to 8 years). Other data is deleted or anonymised when it is no longer needed.

6. Security

We take reasonable steps to protect your data, including:

• Encrypted HTTPS connections for every page, with traffic filtered by Cloudflare.
• Passwords stored only as secure hashes; sign-in codes that expire and work only once.
• Limits on sign-in attempts, after which sign-in is paused, to stop password guessing.
• Signing you out of all other devices when you change or reset your password; blocked accounts are signed out automatically.
• Payments handled entirely by Razorpay, a PCI-DSS compliant processor, with every payment verified on our server.
• Access to personal data restricted to authorised staff.

No method of transmission or storage is completely secure. If a breach affecting your data occurs, we will inform you and the Data Protection Board of India as required by law.

7. Your rights

• Access a summary of the personal data we hold about you.
• Correct or update inaccurate data (most details can be edited from your account dashboard).
• Request erasure of your data, subject to legal retention requirements.
• Withdraw consent for analytics or marketing at any time — use the unsubscribe link in any newsletter email.
• Nominate another person to exercise these rights in the event of death or incapacity.

To exercise any of these rights, email [email protected].

8. Children

Our services are intended for users aged 18 and above. We do not knowingly collect data from children.

9. Grievance Officer

Grievance Officer, EKK SUUTRAA
Email: [email protected]
We will acknowledge complaints within 48 hours and aim to resolve them within 30 days.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it was last changed. Questions? Contact us.