Privacy Policy

Last updated 16 August 2026

1What we collect

When you buy from us or create an account, we collect:

  • Your name, email address and phone number
  • The shipping address you enter at checkout
  • Your order history — items, sizes, quantities and amounts
  • Basic technical data such as IP address and browser type

We do not collect card numbers, UPI IDs or bank credentials. Those go directly to our payment processor and never reach our servers.

2Why we collect it

To take payment, ship your order, email you a confirmation, handle returns and support requests, and keep the store secure. We do not sell your data, and we do not send marketing email unless you ask us to.

3Who we share it with

Only the services needed to run the store:

  • Cashfree Payments — processes your payment and handles your payment credentials directly
  • Clerk — manages sign-in and your account credentials
  • MongoDB Atlas — stores order and product records
  • Vercel — hosts the site and stores product images
  • Our email provider — delivers order confirmations

We also disclose information where the law requires it. We do not share your data with advertisers.

4Cookies

We use cookies that are necessary for the site to work — keeping you signed in and holding your session. Your cart and wishlist are stored in your own browser's local storage, not on our servers, and are cleared when you clear your browser data.

5How long we keep it

Order records are retained for as long as tax and accounting law requires. Account data is kept until you ask us to delete your account.

6Your rights

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and associated personal data. Email us and we will action it within 30 days. We may need to retain order records where the law requires it, even after account deletion.

7Security

The site is served over HTTPS and payments are handled by a PCI-compliant processor. No system is perfectly secure, but we take reasonable steps to protect your information and limit who can access it.

8Children

The store is not intended for anyone under 18. We do not knowingly collect data from children.

9Contact and grievances

For privacy questions, data requests or complaints, email support@carroarmato.in. We acknowledge within 48 hours and resolve within 30 days, in line with the Consumer Protection (E-Commerce) Rules, 2020.