Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains how DIARA by Deepthi ("DIARA", "we", "us") collects, uses, and safeguards your personal information when you use our website, place orders, or communicate with us. We are based in Bengaluru, India.

1. Information we collect

• Account & order data — name, email, phone, shipping and billing addresses, order history, wishlist.
• Payment data — processed by Razorpay; we do not store card or UPI credentials on our servers.
• Device & usage data — IP address, browser, device type, pages visited, referral source, cookies.
• Optional data — WhatsApp number (for order updates), marketing preferences, product reviews, and anything you send us through the contact form, a video call request or the newsletter sign-up.
• Sign-in with Google or Facebook — if you choose this, we receive your name and email address from them. We never see your password for those services.

2. How we use it

• Fulfil orders, arrange delivery via our courier partners (Shiprocket), and process returns.
• Send transactional emails (order confirmation, shipped, delivered, refund).
• Send marketing emails and WhatsApp messages only where you have opted in.
• Personalise product recommendations and site experience.
• Detect fraud, secure the site, and meet legal, tax, and accounting obligations.

3. Sharing

We share personal data only with:

• Payment processors (Razorpay) to complete transactions.
• Logistics partners (Shiprocket, couriers) to deliver your order.
• Email & hosting providers acting as data processors under contract.
• Law-enforcement or government agencies where legally required.

We never sell your personal data.

4. Your rights (DPDP Act 2023 & GDPR)

You have the right to access, correct, delete, or export your personal data, withdraw consent for marketing communications, and lodge a complaint with the Data Protection Board of India. Email diaraboutiqueblr@gmail.com to exercise any of these rights; we respond within 30 days.

5. Data retention

Order and tax records: 8 years (Indian tax law). Account data: until you delete your account. Marketing consent logs: 3 years after last activity. Anonymised analytics: indefinite.

6. Cookies

We use essential cookies for keeping you signed in and remembering your bag. We do not use advertising cookies.

7. Security

We use HTTPS for all data in transit, hashed passwords (bcrypt), and industry-standard access controls. No system is 100% secure; report suspected incidents to diaraboutiqueblr@gmail.com.

8. Children

Our services are not directed to children under 18. We do not knowingly collect their data.

9. Browsing data

We keep an anonymous record of which pieces are opened, added to a bag and searched for, so we can improve the shop. It holds no name, email, address or IP address, and it is deleted after 180 days. Browsers that send a Do Not Track or Global Privacy Control signal are left out. The list of pieces you viewed recently is kept only in your own browser, and you can clear it at any time.

10. Contact