Privacy policy

Last updated: 12 October 2026

Who is responsible for your data

SK Enterprises ("we"), Chatrapati Shivaji Maharaj Complex, Satara Bridge, near Bholane Hospital, Kanhaya Kunj, Bhusawal, Maharashtra 425201, is the data fiduciary for personal data collected through this store.

What we collect and why

  • Order and delivery details (name, address, phone, email, items, order history): to take, print, deliver, exchange or refund your order, and to keep GST and tax records.
  • Payment status: payments are processed securely by our payment gateway, Cashfree Payments. We do not store your card or UPI details, and we never see your full card number, CVV or UPI PIN. The gateway may show us limited details, such as the payment method, the last digits of a card, the UPI ID used and the transaction reference. We ask for bank or UPI details only if you are due a Cash on Delivery refund (see "Cash on Delivery refunds" below).
  • Messages, photos and complaints you send us: to answer you and resolve issues.
  • Account sign-in details, if you create an account: customer accounts are secured by Shopify.
  • Reviews you choose to post: shown publicly with your first name.
  • Device and usage data (pages viewed, device and browser, approximate location from IP address, cookie identifiers): to run and secure the store and, only with your consent, for analytics and advertising (see "Cookies, pixels and advertising").
  • Marketing by email, SMS or WhatsApp: only if you opt in. The box is never pre-ticked, and you can opt out at any time.

Who we share it with (our processors and partners)

  • Shopify (store platform, checkout, forms and customer accounts; customer accounts are secured by Shopify), which may process data outside India.
  • Our payment gateway, Cashfree Payments, to process payments and refunds securely.
  • Our printing partner and its courier partners in India, to print, pack, deliver and pick up orders.
  • Judge.me, to request and publish reviews.
  • Google (Gmail) and Meta (WhatsApp), which may process data outside India.
  • Our bank or payment provider, only to send a Cash on Delivery refund.
  • Government authorities, only where the law requires.

We do not sell your personal data.

Third-party service providers

We use third-party service providers to run this store, including Shopify (store platform and checkout), our printing partner and its courier partners, payment partners, and other technology tools. We choose them with care, share only what they need, and remain responsible to you for your order and for personal data they process on our behalf, as the law requires. Services you use directly under their own terms (for example, your bank, card issuer or UPI app) are governed by those terms, and to the extent the law allows we are not responsible for their acts or omissions.

Cookies

We use only the cookies set by our store platform, Shopify. They keep the store, cart and checkout working, remember your preferences, help keep the site secure, and give us basic statistics about how the store is used. We do not use advertising cookies. Shopify explains these cookies at https://www.shopify.com/legal/cookies. You can block or delete cookies in your browser settings, but the cart and checkout may not work without them.

Data processed outside India

Shopify, Google and Meta may store and process data on servers outside India. Under section 16 of the Digital Personal Data Protection Act, 2023, this is allowed unless the Government restricts transfers to a country; if it does, we will stop sending data there.

How long we keep it

  • Order, invoice and payment records: 8 years from the end of the financial year they relate to.
  • Support messages and complaints: 3 years after the last contact.
  • Bank or UPI details for COD refunds: 1 year after the refund, then deleted.
  • Marketing consent records: while you are subscribed, plus 1 year.
  • Analytics data: 14 months.

After that, we delete or anonymise it.

Cash on Delivery refunds

If you paid by Cash on Delivery and are due a refund, we ask for your UPI ID or bank account details by email or WhatsApp. We collect them only with your written consent: sending them to us in reply to our request is that consent. Gmail and WhatsApp may process them outside India. We use them only to send your refund, and share them only with our bank or payment provider for that purpose. We keep them for 1 year after your refund is completed, and then delete them. After that, our payment records keep only the refund reference, for as long as tax law requires. You can withdraw your consent before the refund is sent, and you can ask us to delete the details sooner once your refund is complete, unless the law requires us to keep them. If you would rather not share bank details, tell us and we will find another way to refund you.

Your rights

You can ask us to: give you a summary of the personal data we hold and who we shared it with; correct, complete or update it; erase it (unless the law requires us to keep it); withdraw any consent (as easily as you gave it, without affecting what was done before); and nominate another person to exercise your rights if you die or become unable to. You can also raise a grievance with us. Write to our Grievance Officer. We acknowledge within 48 hours and respond within one month. If you are not satisfied, you may complain to the Data Protection Board of India once it accepts complaints.

Children's data

We do not knowingly collect personal data of children without verifiable consent from a parent or lawful guardian, and we do not track, monitor the behaviour of, or target advertising at children. If you believe we hold such data without that consent, write to our Grievance Officer and we will delete it.

Security and breaches

We maintain reasonable security practices and procedures to protect your data. No system is completely secure. To the extent the law allows, we are not liable for unauthorised access, hacking, or loss of data caused by cyber attacks or other events beyond our reasonable control, provided we have maintained those reasonable safeguards. If a breach affects your data, we will tell you and report it to CERT-In and, from when the law requires, to the Data Protection Board.

Your statutory rights

Nothing in these terms or this notice limits or excludes any right you have, or any liability we have, that cannot be limited or excluded under Indian law, including the Consumer Protection Act, 2019 and the Digital Personal Data Protection Act, 2023.

Grievance Officer

Neeta Khare, Grievance Officer, SK Enterprises, Chatrapati Shivaji Maharaj Complex, Satara Bridge, near Bholane Hospital, Kanhaya Kunj, Bhusawal, Maharashtra 425201, ecom.skenterprises@gmail.com.

Changes

We will post any change here with a new date and, for important changes, tell customers by email.