Privacy Policy

aarohi.shop maintains a comprehensive Privacy Policy to ensure transparency in handling user data as an Indian ecommerce platform. This draft follows standard practices for compliance with the Information Technology Act, 2000, and related rules, covering data collection, usage, and user rights.​


1. Introduction and Scope


This Privacy Policy ("Policy") applies to all users ("you", "your") who access or use aarohi.shop ("Platform", "we", "us", "our"), including browsing products, creating accounts, placing orders, or contacting support.

We are committed to protecting your personal information and handling it responsibly in line with applicable Indian laws, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.​

By using the Platform, you consent to the practices described herein.


2. Information We Collect


We collect information to provide services, process orders, and improve user experience:​

  1. Personal Information you provide: Name, email address, mobile number, billing/shipping address, payment details (processed via gateways), order history, and support communications.
  2. Automatically collected information: IP address, device type/ID, browser details, location data (approximate), pages visited, time spent, and search queries.
  3. Cookies and tracking data: Session cookies, persistent cookies, pixels, and similar technologies for cart management, analytics (e.g., Google Analytics), and personalized ads.​

We do not collect sensitive personal data (e.g., health, financial details beyond basics) unless necessary for specific services.


3. How We Use Your Information


Your information is used solely for legitimate business purposes:​

  1. Account creation, order processing, delivery (1-2 days target), payments, and customer service.
  2. Sending order confirmations, shipping updates, promotional emails/SMS (with opt-out).
  3. Fraud prevention, security monitoring, and compliance with laws.
  4. Analytics to enhance Platform performance, product recommendations, and user experience.
  5. Marketing, where you have consented or it is permitted under law (e.g., TRAI regulations for SMS).


4. Cookies and Similar Technologies


  1. Essential cookies: Enable core functions like login and cart
  2. Analytics cookies: Track usage (e.g., Google Analytics).
  3. Marketing cookies: Personalize ads across sites.

Manage preferences via browser settings or our cookie consent banner. Disabling may limit functionality.​


5. Sharing Your Information


We do not sell your data. Sharing occurs only with:​

  1. Service providers: Payment gateways (e.g., Razorpay, Paytm), logistics (e.g., Delhivery), cloud hosts (e.g., AWS), and analytics tools – bound by confidentiality.
  2. Legal requirements: Courts, police, or regulators if required by law.
  3. Business transfers: In mergers/acquisitions, with notice where possible.
  4. Affiliates: For operational support, if any.

All recipients must protect data per our standards.


6. Data Security


We employ industry-standard measures: encryption (SSL for site/transactions), firewalls, access controls, regular audits, and secure servers in India.​

Despite efforts, absolute security cannot be guaranteed; you use the Platform at your own risk.


7. Data Retention and Storage


  1. Personal data retained only as needed: orders (7 years for accounting), accounts (until deletion request), logs (90 days).
  2. Stored on secure Indian servers; backups encrypted.
  3. Deleted/anonymized post-retention or upon request, except for legal obligations.​

8. Your Rights and Choices


Under Indian law and best practices, you can:​

  1. Access, correct, or update your data.
  2. Request deletion (subject to legal holds).
  3. Opt-out of marketing (unsubscribe links, Do Not Disturb registry).
  4. Withdraw consent (may limit services).


9. Third-Party Links and Services


Links to external sites (e.g., payment pages) are not covered by this Policy. Review their policies separately.​


10. Children's Privacy


Platform for users 18+. No knowing collection from children; contact us for any concerns.​


11. International Data Transfers


Data primarily stored in India; minimal transfers abroad only to compliant providers with safeguards.​


12. Changes to This Policy


Updates posted here with December 31, 2025 Continued use implies acceptance.​