Privacy Policy

1. Data we collect

We may collect the following categories of personal data:

• Account data: name, email, phone number, password (stored securely by our auth provider)
• Order data: shipping address, order history, products purchased, payment status
• Payment references: Razorpay order and payment IDs (we do not store full card or UPI details)
• Communications: messages you send via contact forms or support channels
• Marketing preferences: newsletter subscription choices where you opt in
• Technical data: device/browser information, IP address, and cookies necessary for site operation

2. How we use your data

We use personal data to:

• Create and manage your account
• Process orders, payments, shipping, and customer support
• Send transactional emails such as order confirmations and account messages
• Prevent fraud, abuse, and policy violations
• Send marketing communications only where you have given consent
• Improve website performance and security

3. Legal basis and consent

We process data as necessary to perform our contract with you (fulfilling orders), comply with law, and pursue legitimate business interests such as fraud prevention.

Marketing emails and optional communications require your consent, which you may withdraw at any time.

4. Sharing with service providers

We share data with trusted processors only as needed to operate our store:

• Supabase — authentication and database hosting
• Cloudflare — website hosting and security
• Razorpay — payment processing
• Zoho Mail — transactional email delivery
• Shiprocket or similar logistics partners — order fulfilment where applicable

5. Retention

We retain account and order records as long as needed to provide services, meet legal/accounting obligations, and resolve disputes.

Marketing consent records are retained to demonstrate compliance with your preferences.

6. Your rights

Subject to applicable law, you may request access, correction, or deletion of your personal data, or withdraw marketing consent.

To exercise these rights, contact hello@ursignature.com. We may need to verify your identity before responding.

7. Security

We use industry-standard measures including encrypted connections (HTTPS), access controls, and reputable infrastructure providers.

No method of transmission or storage is completely secure; please use a strong, unique password for your account.

8. Children

Our services are not directed to individuals under 18. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected on this page with an updated date and policy version.

10. Grievance contact

For privacy-related questions or complaints, email hello@ursignature.com. We will acknowledge and respond within a reasonable timeframe as required by applicable law.