This Privacy Policy explains what personal data GHSquare Enterprise ("Soni De Nakhre", "we", "us") collects through https://sonidenakhre.in, why we use it, who we share it with, how long we keep it, and the choices and rights you have. For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here.
1. Information We Collect and Why
We only collect the information described below. We do not collect information we don't need to run the store.
Account information
When you create an account we collect your first name, last name and email address, and optionally your phone number. You can also set a display name. Your password is handled by our authentication provider (Supabase Auth), which stores it only in a securely hashed form — we never see or store your password in readable form.
We also record when you accepted our Terms & Conditions and Privacy Policy (and which versions), and whether you chose to receive marketing messages and when.
Why: to create and manage your account, sign you in securely, help you recover access, provide customer support, and connect your orders, reviews, saved addresses and cart to your account.
Saved addresses
If you save delivery addresses in your account, we store the recipient's name, phone number, address, city, state, PIN code and country, and an optional label (such as "Home").
Why: to make checkout quicker and deliver your orders.
Cart
If you are signed in, the items in your cart (products and quantities) are saved to your account so they are available on your other devices. If you are not signed in, your cart is stored only in your browser.
Order information
When you place an order we process your order number, the products, quantities and prices, discounts, shipping charges, the order total, payment status, order status, delivery status, delivery address, and your name, phone number and email address. After dispatch we also record the courier name, tracking number and tracking link.
Why: to process and deliver your order, send you updates, handle cancellations, returns and refunds, provide support, keep accounting and tax records, prevent fraud, and meet legal obligations.
Payment information
Online payments are processed by a third-party payment provider. We do not receive or store your full card number, CVV, UPI PIN or net banking password. From the payment provider we may receive the payment status, transaction/reference ID, payment method type, amount, and refund or failure status.
Why: to confirm payment, process refunds, resolve payment issues and keep financial records.
Reviews
When you submit a product review we process your rating, review title and text, the product reviewed, the date, your display name, and whether the review is a verified purchase (checked against your orders).
Why: to publish customer reviews, moderate content and keep reviews genuine. Only your display name, rating, review text, date and verified-purchase status are shown publicly. Your email address, phone number and order details are never published.
Support requests
When you contact us through the contact, grievance or privacy request forms, or by email, we collect your name, email address, phone number (optional), order number (if relevant), your message and any photos or videos you send us.
Why: to respond to you, resolve complaints, and investigate delivery, damage, return and refund issues.
Technical and security information
When you use the website, our hosting and authentication providers automatically process technical information such as your IP address, browser and device type, operating system, the pages requested, referring page, and date and time, including in error and security logs. To protect sign-in, sign-up and password reset forms from abuse, we keep short-lived counters based on a one-way scrambled (hashed) version of your IP address and email address; these are deleted automatically after about a day.
Why: to run and secure the website, prevent fraud and abuse, and fix errors.
Analytics (only with your consent)
If you accept analytics cookies, we use Google Analytics and Microsoft Clarity to understand how the website is used — for example, which pages are visited, how visitors navigate, device and browser type, and approximate location (city/region, derived from IP address). Microsoft Clarity may also record anonymised session replays of how pages are used; areas that show your account, order, checkout or personal details are masked, and what you type into forms is not recorded.
Why: to improve the website. You can decline or withdraw consent at any time using Cookie preferences in the website footer. See our Cookie Policy.
Information stored only in your browser
Your wishlist, recent searches and (if you are not signed in) your cart are stored only in your browser's local storage. We do not receive this information.
2. Marketing Communications
We only send you promotional messages (offers, new collections) if you opt in, for example by ticking the box when you create an account. Creating an account does not by itself mean you agree to marketing. You can change your choice at any time in My Account → Profile, or by contacting us.
Service messages — such as account verification, password reset, order, payment, shipping, delivery and refund updates — are part of providing our service and are sent regardless of your marketing choice.
3. Who We Share Information With
We share personal data only where needed for the purposes above, with service providers who process it on our behalf:
| Recipient | What they do | Why they receive data |
|---|---|---|
| Supabase | Database, authentication and backend | To store your account, orders and other data and to sign you in |
| Vercel | Website hosting | To serve the website; processes technical request data |
| Email delivery provider | Sends account emails | To send verification, password reset and account emails |
| Payment provider | Processes online payments | To take payments and process refunds |
| Courier / shipping partners | Deliver parcels | Your name, phone number and delivery address, to deliver your order |
| Google (Google Analytics) | Website analytics — only with your consent | To measure website usage |
| Microsoft (Clarity) | Website analytics — only with your consent | To understand how pages are used |
We may also disclose information where required by law, a court or a government authority, or to protect our rights, customers or the public from fraud or harm. We do not sell your personal data.
Some of these providers may store or process data on servers located outside India.
4. How Long We Keep Information
We keep personal data only for as long as reasonably necessary for the purposes above:
- Account and profile data: while your account is active. If you ask us to delete your account, we delete or anonymise it, except information we must keep as described below.
- Orders, payments and invoices: for as long as required by tax, accounting and other applicable laws, even if you delete your account.
- Support requests: for as long as needed to resolve the request and any related dispute.
- Security counters: about one day. Server and security logs: for a limited period set by our hosting providers.
- Analytics data: according to the retention settings of Google Analytics and Microsoft Clarity.
5. Your Rights and Choices
Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you can:
- access a summary of the personal data we process about you and how we use it;
- correct, complete or update your information — you can edit your name, display name, phone number and addresses yourself in My Account;
- request erasure of your personal data, where we are not required by law to keep it;
- withdraw consent where we rely on your consent (for example, marketing or analytics cookies) — this does not affect processing that happened before you withdrew;
- nominate another person to exercise your rights in the event of your death or incapacity, as permitted by law; and
- raise a grievance about how we handle your data.
To make a request, use My Account → Privacy (signed-in customers) or contact our Grievance Officer below. We may need to verify your identity before acting on a request.
6. Security
We use reasonable security measures, including encrypted (HTTPS) connections, hashed passwords handled by our authentication provider, access controls that stop customers from seeing each other's data, and restricted administrative access. No method of transmission or storage is completely secure, but we work to protect your information.
7. Children
This website is intended for adults. If you are under 18, please use the website only with the involvement of a parent or legal guardian. We do not knowingly collect personal data from children without verifiable parental consent; if you believe we have, please contact us and we will delete it.
8. Grievance Officer and Contact
If you have questions, requests or complaints about your personal data, contact our Grievance Officer:
- Name: Heet Gabani
- Designation: Founder | Developer
- Email: gabanihh@gmail.com
- Phone: +91 9099495891
- Address: 105, Khodiyar Building, Near Torrent Power Katargam, Surat, 395004
If you are not satisfied with our response, you may be able to complain to the Data Protection Board of India, as provided under applicable law.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page shows when it last changed. If we make significant changes, we will notify you on the website or by email and, where required, ask for your consent again.