Privacy Policy
Last updated: November 2026
This policy explains what personal data Festify collects, why, and the choices you have. It is written to align with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
Who is responsible
Festify.
What we collect
- Account details: mobile number, name, and (optionally) email.
- Delivery details: recipient name, phone, address and PIN code for each order.
- Order information: items, amounts, coupon used, payment status and references (we do not receive your card/bank details — Razorpay handles them).
- Usage information: pages viewed, items added to cart or wishlist, and a random session ID, used to run the shop and improve it. This is stored in your browser (local storage) and on our servers.
- Messages: if you contact us on WhatsApp or email, the content of that conversation.
Why we use it
- To create your account, verify you by OTP, and keep you signed in.
- To process, deliver, invoice and support your orders, and handle your support requests.
- To send you your order confirmation and to sign you in with a one-time code.
- To prevent fraud and abuse, and to meet legal and tax obligations.
- To send offers only if you subscribe to them; you can opt out at any time.
We process your data on the basis of your consent and to perform the contract of sale you enter into when you order.
Who we share it with
Only service providers who need it to serve you: payment gateway (Razorpay), courier and logistics partners (name, phone and address for delivery), SMS providers (to send one-time login codes), image hosting (Cloudinary — product images only), and email delivery. We do not sell your personal data.
How long we keep it
Account and order records are kept for as long as your account is active and for the period required by tax and consumer laws afterwards. You can ask us to delete your account; we will erase data we are not legally required to retain.
Security
We use encrypted connections (HTTPS), restrict staff access, and verify every sign-in with an OTP. No system is perfectly secure; if a breach affecting you occurs we will notify you and the authorities as the law requires.
Your rights
You may ask to access, correct or erase your personal data, withdraw consent, or nominate someone to act for you. Write to festifywithcdi@gmail.com and we will respond within a reasonable time. You may also complain to the Data Protection Board of India once it is operational.
Children
The Site is meant for adults. We do not knowingly collect data from children under 18 without a parent's consent.
Cookies and local storage
We use your browser's local storage to keep your cart, sign-in and preferences. We do not use third-party advertising cookies.
Changes
If we change this policy in a material way we will update this page and, where required, ask for your consent again.
Grievance Officer
In accordance with the Consumer Protection (E-Commerce) Rules, 2020 and the Information Technology Act, 2000, complaints can be addressed to our Grievance Officer:
Name: Prashant Jain
Email: festifywithcdi@gmail.com
Phone: +91 7011961916
We acknowledge every complaint within 48 hours and aim to resolve it within one month of receipt.