Privacy policy

This policy explains what personal data Yoga Site collects, why, and the choices you have. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

• Account details — name, e-mail address, mobile number, password (stored only as a one-way hash).
• Order details — delivery addresses, items bought, payment method and payment reference. We do not receive or store card numbers, CVV or UPI PINs; these go directly to Razorpay.
• Activity — products viewed, searches, cart and wishlist, reviews and questions you post.
• Device data — IP address, browser or app version, used for security and fraud prevention.

How we use it

• To process and deliver orders, handle returns and refunds, and issue GST invoices.
• To send order updates and security messages (these are not optional).
• To show recently viewed and recommended products, and send offers if you have opted in.
• To prevent fraud and abuse, and to meet legal obligations.

Who we share it with

Only with service providers who need it to serve you: courier partners (name, address, phone), Razorpay (payment processing), and e-mail delivery providers. We do not sell personal data.

How long we keep it

Account data is kept while your account is open. Order and invoice records are kept for eight years as required by tax law. You can ask us to delete your account; data we are legally required to keep is retained and then deleted.

Your rights

You can access, correct and update your details in your account, withdraw consent to marketing at any time, and ask for a copy or deletion of your data by writing to privacy@yogasite.client-link.in. You may also nominate another person to exercise your rights.

Security

Data is encrypted in transit, passwords and one-time codes are hashed, access to customer data is restricted by role and every staff action is logged. If a breach affects you we will tell you and the Data Protection Board without delay.

Cookies and local storage

We use local storage to keep you signed in and remember your cart. We do not use third-party advertising cookies.

Children

Yoga Site is not directed at children under 18. We do not knowingly collect their data without verifiable parental consent.

Contact

Data Protection Officer, Yoga Site, 4th Floor, Marigold Chambers, 21 MG Road, Bengaluru 560001 · privacy@yogasite.client-link.in