Privacy policy

This policy explains what personal data Red Betta ("we", "us") collects when you visit our store or place an order, why we collect it, who we share it with and the rights you have. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• Account details: your name, email address, phone number and a securely hashed password (we can never see your password).
• Order details: shipping address, items purchased, order value and payment status.
• Payment details: card, net banking and wallet payments are handled entirely by Razorpay. We never receive or store card numbers, UPI PINs, CVVs or bank credentials. If you pay by scanning our UPI QR code, we keep the transaction ID (UTR) you give us so we can match your payment.
• Reviews and messages: product reviews you post and anything you send us through the contact form or by email.
• Newsletter: your email address, only if you join the list.
• Technical data: basic server logs (such as IP address and browser type) used to keep the store secure and prevent abuse.

Why we use it

• To take, ship, deliver and support your orders, including returns and refunds, and to send order and shipping updates.
• To run your account, wishlist and saved addresses.
• To send drop announcements and offers, only if you subscribe. Every email has an unsubscribe option.
• To detect fraud, stop abuse and keep the store secure.
• To meet legal duties, such as keeping tax and accounting records.

We collect only what these purposes need. By placing an order, creating an account or joining the newsletter you consent to this use, and you can withdraw consent at any time (see "Your rights").

Who we share it with

We share only what is needed with the partners who help us run the store:

• Razorpay, to process online payments and refunds.
• Courier partners, who receive your name, phone number and address to deliver your order.
• Email delivery provider, to send order and shipping emails.
• Hosting and database providers, who store the store's data securely on our behalf.

We never sell or rent your personal data. We may disclose data when the law requires it, for example to a court or a government authority with legal power to ask for it.

Cookies and local storage

We use one essential cookie to keep you signed in, and your browser's local storage to remember your bag. We don't use advertising or third-party tracking cookies.

How long we keep it

• Account data: for as long as your account is open. You can ask us to delete it at any time.
• Order and payment records: for 8 years, as Indian tax and accounting law requires.
• Contact messages: up to 2 years. Server logs: up to 90 days.

How we protect it

Your data travels over encrypted HTTPS connections. Passwords are hashed with bcrypt, sign-in sessions are signed and can be revoked, and access to order data is limited to authorised staff. No system is perfectly secure, but if a breach ever affects your data we will tell you and the Data Protection Board of India as the law requires.

Your rights

Under the DPDP Act you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it (you can also edit your details in your account);
• ask us to delete it, unless we must keep it by law (for example order records);
• withdraw your consent, for example to marketing emails;
• nominate someone to exercise these rights for you in case of death or incapacity;
• raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.

Email redbettaofficial@gmail.com from the address on your account and we'll respond within 30 days.

Children

Our store is meant for adults. If you are under 18, please shop with a parent or guardian. We don't knowingly collect data from children without verifiable parental consent.

Grievance Officer

Nivas, Grievance Officer, RetailJinny, Kolkata, West Bengal, India. Email: redbettaofficial@gmail.com. We acknowledge complaints within 48 hours and resolve them within 30 days.

Changes to this policy

If we change this policy we'll update the date at the top, and tell you by email if the change is significant. Also see our terms of service.