Privacy Policy
Last updated 3 November 2026.
Who we are
Radhe Krishna Handcrafts is a home-run handcraft business in India, run by R Sowmya Narayanan. We decide how the information on this website is used. For any question about your information, email contact@radhekrishnahandcrafts.store.
What we collect
- Your account: your full name, email address and a password, or your Google account’s name and email if you sign in with Google. Passwords are handled by Supabase, which stores only a scrambled form; we can never see your password. Google sign-in shares only your basic profile and email, never your Gmail messages or Google password.
- Your order: your mobile number, delivery address, the greedams and quantities, your size, design notes and each change you mark on a photo (what you typed, where you marked it, and a picture of that area), the amounts, the order steps and their dates, and the courier and tracking details.
- Your payment: Razorpay collects your card, UPI or bank details on its own secure page. We never see them. We receive only the payment reference, amount, method and status.
- Your location, only if you ask: if you choose “Use my current location”, your browser asks your permission, and the position is used once to suggest an address. It is not saved with your order.
- Messages you send us, with any photos you attach.
- Technical information that the website’s providers record for security, such as your IP address, browser type and the time of each request.
How we use it
- To make your greedam to your size and changes, deliver it and keep you updated.
- To run your account, keep your bag across devices and show you your orders.
- To take payment and send refunds through Razorpay.
- To send the emails your order needs: confirmation, dispatch, delivery and cancellation. We do not send newsletters or advertising.
- To keep the website safe from misuse, and to keep the records the law requires.
We never sell your information, and we do not use advertising trackers.
Who we share it with
Only with the services that run the shop, and only what each one needs:
- Courier or India Post: your name, mobile number and delivery address, to deliver your parcel.
- Razorpay: your name, email, mobile number and the amount, to take your payment and send refunds.
- Supabase: stores your account, bag and orders. Pictures of your marked changes are kept in private storage.
- Resend: sends the sign-in and order emails.
- Netlify: hosts the website. Cloudflare Turnstile: the security check at sign-in. Google: Google sign-in and the website fonts.
- Ola Maps (Krutrim) and OpenStreetMap: the address suggestions, only when you use them.
These services may store information outside India, under their own privacy terms. We also share information if the law requires it.
Who can see your orders
You can see only your own orders. The shop owner’s verified account can see every order, to make and send it. The owner receives a copy of each order and cancellation email, and keeps a copy of the order details in a private spreadsheet on the owner’s own computer for running the shop.
How long we keep it
- Your account and saved bag: until you delete your account.
- Your mobile number and full address on an order: 3 months after it is delivered or cancelled. After that we keep only the city and state.
- Paid orders and payment records: as long as tax and accounting law requires, even after you delete your account, but no longer linked to it.
Your rights
Under India’s Digital Personal Data Protection Act, 2023, you can:
- Ask what information we hold about you and who we have shared it with.
- Ask us to correct or complete it.
- Ask us to delete it, unless the law requires us to keep it.
- Name another person to act for you if you die or cannot act.
- Complain to us, and then to the Data Protection Board of India if you are not satisfied.
To delete your account yourself, open My account and choose Delete my account. We email you a code to confirm it is you. For anything else, email contact@radhekrishnahandcrafts.store. We reply within 48 hours and resolve requests within one month.
Storage on your device
The website keeps a few items in your browser’s local storage so it works: your sign-in, your bag and sizes, a safe-retry key for placing an order, and your light or dark display choice. It does not set its own cookies. The security check (Cloudflare) and the payment window (Razorpay) may set their own cookies to prevent fraud. Sign out on a shared device; clearing your browser removes these items but does not delete your account.
Children
This shop is meant for adults. If you are under 18, please ask a parent or guardian to place the order.
Security
The website uses HTTPS. Orders and pictures can be read only by the order service and the owner’s verified account. No online service is perfectly secure, so keep your password and email codes private. We will never ask for your password, card details or UPI PIN.
Changes to this policy
If we change how we use your information, we will update this page and its date. Where the law needs your consent for a new use, we will ask you for it separately.
