Privacy Policy

“SAHSHA” is the “Data Fiduciary” under the DPDP Act for the personal data collected through this Website — meaning we determine the purpose and means of processing your personal data.

• Registered Address: Bhat, Gandhinagar, Gujarat, India.
• Contact Email: support@sahsha.co.in

We collect only the data necessary to provide our services. This includes:

We do not knowingly collect any special category data such as health information, religious beliefs, or biometric data through this Website.

• Directly from you — when you create an account, place an order, sign up for our newsletter, or contact customer support.
• Automatically — through cookies, web beacons, and tracking tools (Google Analytics, Meta Pixel, Google Tag Manager) when you browse the Website.
• From third parties — such as our payment gateway (confirming payment status) or courier partner (confirming delivery status).

We process your personal data strictly for the following itemized purposes:

1. To fulfil orders — processing payments, generating invoices, and arranging delivery via our courier/logistics partner.
2. To verify your identity — for account security and fraud prevention (e.g., OTP/phone verification).
3. To communicate with you — order confirmations, shipping updates, and responses to support queries.
4. To send marketing communications — only if you have opted in; you may withdraw this consent at any time.
5. To improve the Website — analyzing browsing behaviour to improve product listings, site performance, and user experience.
6. To run advertising campaigns — measuring ad performance via tools such as Meta Pixel/Conversions API and Google Analytics, with your consent where required.
7. To comply with legal obligations — such as tax records, consumer protection requirements, or law enforcement requests.

We do not use your data for any purpose beyond what is stated above without seeking fresh consent.

We seek your consent before collecting personal data for purposes that require it (such as marketing communications). Consent is:

• Free, specific, informed, and unambiguous — given through a clear affirmative action (e.g., checking a box, signing up for our newsletter).
• Itemized — you may consent to order processing without being forced to consent to marketing communications.

Withdrawing Consent: You can withdraw your consent at any time by emailing support@sahsha.co.in, using the “unsubscribe” link in marketing emails/SMS, or through your account settings (if applicable). Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and will not affect our ability to complete an order you've already placed (e.g., we may still need to process shipping data to deliver a product already paid for).

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, remember your cart, and measure marketing performance. Specifically, we use:

• Google Analytics (GA4) — to understand site traffic and user behaviour.
• Meta Pixel & Conversions API — to measure the effectiveness of our advertising and show you relevant ads on Meta platforms (Facebook/Instagram).
• Google Tag Manager — to manage the above tracking scripts on our Website.

You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of the Website, such as your shopping cart.

We do not sell your personal data. We share data only with trusted service providers (“Data Processors”) strictly to the extent necessary to operate our business:

These providers are contractually bound to use your data only for the purpose we've engaged them for, and not for their own independent purposes.

We may also disclose your data if required by law, court order, or government request, or to protect our legal rights.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Policy, including:

• Order & transaction data — retained for the duration required under applicable tax and consumer protection laws (typically up to 7 years for financial records).
• Account data — retained while your account remains active, or until you request deletion.
• Marketing data — retained until you withdraw consent or unsubscribe.

Once data is no longer required, we take steps to securely delete or anonymize it.

We implement reasonable security safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for data transmitted through the Website.
• Secure cloud storage with access controls (Google Cloud / AWS).
• PCI-DSS compliant payment processing — we do not store your full card details on our servers; this is handled directly by our payment gateway partner.
• Two-step verification and OTP-based authentication for account/order security.

While we follow leading industry security standard practices, no method of transmission over the internet can guarantee absolute security.

Under the DPDP Act, you have the right to:

1. Access — request a copy of the personal data we hold about you.
2. Correction — request correction of inaccurate or incomplete data.
3. Erasure — request deletion of your personal data, where it is no longer necessary for the purpose it was collected for.
4. Withdraw Consent — at any time, for any consent-based processing (e.g., marketing).
5. Grievance Redressal — raise a complaint regarding how we handle your data.
6. Nominate a Representative — to exercise your rights on your behalf in case of death or incapacity.

To exercise any of these rights, contact us at support@sahsha.co.in. We will respond within a reasonable timeframe, and in any case as required under applicable law.

In accordance with applicable law, we have designated a Grievance email & Contact Number for any concerns regarding this Privacy Policy or the handling of your personal data: Email: support@sahsha.co.in · Contact: +91 6352109106.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last Updated” date at the end of this page will indicate when the latest revision was made. We encourage you to review this page periodically. Material changes will be notified to you via email or a prominent notice on the Website where required by law.

For any questions about this Privacy Policy or how we handle your data, reach out to us at: