Privacy Policy

This Privacy Policy explains what personal data Dhareena Furnitures collects when you visit our website, buy from us or get in touch, why we collect it, who we share it with and the choices you have. We've kept it as plain as we can. If anything is unclear, please ask us.

Who we are

Dhareena Furnitures ("we", "us" or "our") is a furniture maker based in New Delhi.

• Address: Plot No. 868, VPO Mundka, Rajendra Lakra Marg, New Delhi – 110041, India
• Email: info@dhareenafurnitures.com
• Phone: +91 83685 38276 and +91 99719 12166
• GSTIN: 07BKEPK5734Q1ZL

Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described here: we decide why and how it is used. This policy is also our privacy policy under the Information Technology Act, 2000 and its rules.

What we collect

When you place an order

• Your name, email address and mobile number
• Your delivery address: address lines, city, state, PIN code and country
• Any order notes you add and any coupon code you use
• What you ordered, the amounts, how you chose to pay, and the progress of your order, payment and delivery
• The IP address the order was placed from, which our system records for security

When you pay

Online payments are handled by Cashfree Payments on its own secure payment page. We never receive your full card number, CVV, card expiry date, UPI PIN or net banking password.

To set up a payment, we send Cashfree your name, email address, mobile number, a customer reference, the order number and the amount. Cashfree sends us back a record of each payment attempt: the payment mode (such as UPI or card), the amount, whether it succeeded, transaction and bank reference numbers and, depending on how you paid, limited details such as your UPI ID or a masked card number with the card network and issuing bank. We keep this record with your order.

If you pay by Cash on Delivery, we record when your payment was collected.

When you sign in

You sign in with your email address and a one-time code that we email to you. There's no password. We keep:

• Your email address, and the name and mobile number you give us or that we take from your latest order
• The one-time code, stored only in a scrambled (hashed) form, which expires after 10 minutes and works only once
• The IP address a code was requested from, to prevent misuse
• When you confirmed your email address and when you last signed in

When you sign in, your browser receives a sign-in token that lasts up to 30 days, or until you sign out.

When you track an order or check a PIN code

To track an order without signing in, you give us your order number and the email address or mobile number used for the order. We use them only to find your order.

When you check a PIN code, we look it up with a public PIN code lookup service based on India Post's directory. Only the PIN code is sent to that service.

When you write a review

After your order is delivered, we email you an invitation to review what you bought. If you write a review, we keep your rating, title and comments, linked to your order so that we can show it as a verified purchase. We check reviews before publishing them, and we publish them under your first name and the initial of your last name.

When you contact us

When you email, call, WhatsApp or message us on Instagram, we receive your contact details and whatever you choose to share. If our checkout can't be reached and you send us your order on WhatsApp instead, the message contains your order, contact and delivery details.

When you browse our website

• Like most websites, our servers may record technical details such as your IP address and browser when they handle your requests, to keep the site secure and working.
• Our website loads fonts from Google Fonts and images from Cloudinary. Your browser fetches them from those services' servers, which shares your IP address and browser details with them.
• When we have switched them on, Google Analytics and the Meta Pixel collect information about your visit, as described under "Analytics and advertising" below.

How we use your data

• To process and deliver your order: confirming it, arranging delivery, contacting you about it by email, phone or WhatsApp, and handling returns, refunds and cancellations
• To take payment and issue your GST invoice
• To send you emails about your orders and account: order confirmations with a link to your invoice, order and delivery updates, sign-in codes, refund updates and an invitation to review your purchase after delivery
• To run your account and show you your orders when you sign in
• To publish verified reviews
• To answer your questions and requests
• To keep our website and customers safe: preventing fraud and misuse, limiting repeated requests, and keeping a record of important actions
• To understand how our website is used and to measure our advertising, when analytics are switched on
• To meet our legal obligations, such as tax, accounting and consumer protection laws

We only send emails about your orders and your account, plus an invitation to review your purchase. We don't send newsletters or promotional emails without your consent, and we never sell your personal data.

Analytics and advertising

When we have switched them on, our website uses these tools:

• Google Analytics 4 counts visits and shows us how people use our website: the pages you view, the products you look at, adding to cart, starting checkout and purchases, together with your device, browser, approximate location and how you reached us. We don't send your name, email address, phone number or address to Google Analytics.
• The Meta Pixel helps us measure and improve our ads on Facebook and Instagram. It records the pages you visit and actions such as viewing a product, adding to cart, starting checkout and purchasing, together with your IP address, browser details and Meta's cookie identifiers. If automatic advanced matching is switched on in our Meta account, it can also send hashed versions of the contact details you enter at checkout.
• The Meta Conversions API tells Meta about a purchase directly from our server, so that our ads can be measured even when the Pixel is blocked. For each confirmed order, we send Meta the order number, value and products, your IP address, browser details and Meta's cookie identifiers, and hashed (scrambled) versions of your email address, mobile number, name, city, state, PIN code, country and customer ID. Meta uses the hashed details to match the purchase to its users; it doesn't receive them in readable form. We delete our copy of your IP address, browser details and cookie identifiers kept for this purpose once the purchase has been sent to Meta.

Google and Meta use this information under their own privacy policies:

• Google: https://policies.google.com/privacy
• Meta: https://www.facebook.com/privacy/policy

To opt out, you can install Google's opt-out browser add-on from https://tools.google.com/dlpage/gaoptout and manage how Meta uses your activity for ads in your Facebook or Instagram settings. You can also block or delete cookies in your browser, as explained below.

Cookies and browser storage

Our website doesn't set cookies of its own. It keeps a few things in your browser's local storage or session storage so that it works smoothly:

• Your cart: the products, colours and quantities you've added (local storage, until you clear it)
• Orders placed on this device: for your 10 most recent orders, the order number, a secret access code that reopens the order page, how you chose to pay, when you ordered and whether payment is still due (local storage)
• Your checkout details: what you've typed into the checkout form, so that it survives a page reload, and a random code that stops the same order being placed twice (session storage, cleared when you close the tab)
• Your sign-in: your sign-in token, name, email address and mobile number (local storage, removed when you sign out or your sign-in expires)
• Purchase tracking: a note of which orders have already been reported to Google Analytics and Meta, so that a purchase isn't counted twice (local storage)

Cookies are set by these services:

• Google Analytics, when switched on: cookies whose names begin with "_ga", which tell visits apart
• The Meta Pixel, when switched on: the "_fbp" cookie, which identifies your browser to Meta
• The Meta Pixel, when you arrive from a Meta ad: the "_fbc" cookie, which records the ad click
• Cashfree, on its own payment page

When you place an order, we read the two Meta cookies, if present, and send them with the purchase through the Conversions API. If you arrived from a Meta ad and the "_fbc" cookie is missing, we send the ad click identifier from the link you followed instead.

You can block or delete cookies and site data in your browser settings. Clearing site data removes your cart and the list of orders on this device; your orders are still safe with us, and the links in your order emails still work. If you block browser storage altogether, some features, such as keeping your cart between visits, won't work.

Who we share your data with

We share personal data only when it's needed to run our store:

• Cashfree Payments, to process online payments and refunds
• Delivery and courier partners, who receive your name, mobile number and delivery address so that they can deliver your order
• Our email service provider, which sends our emails
• Our website hosting provider, whose servers run our website and store its data
• Google, for Google Analytics (when switched on) and Google Fonts, and for the Google reviews shown on our website: our server fetches reviews of our business from Google, and reviewers' profile photos load from Google's servers
• Meta, for the Meta Pixel and Conversions API (when switched on), and for WhatsApp and Instagram when you message us there
• Cloudinary, which hosts the images on our website
• A public PIN code lookup service, which receives only the PIN codes you check
• Professional advisers, such as accountants, when we need their help with tax, accounting or legal matters
• Government authorities, courts and regulators, when the law requires it

Some of these providers, such as Google and Meta, may process data outside India.

How long we keep your data

• Orders and invoices: as long as tax and accounting laws require (under GST law, until 72 months after the due date of the annual return for the year they relate to)
• Your account: until you ask us to delete it, apart from order records that we must keep by law
• Sign-in codes and tokens: codes expire after 10 minutes; sign-in tokens expire after 30 days, or when you sign out
• Reviews: as long as they are published, or until you ask us to remove them
• Messages and support requests: as long as we need them to help you and to keep a record of what was agreed
• Security and activity logs: as long as they are needed for security and record-keeping, and at least as long as the law requires
• Data in your browser: until you clear it, as explained above

When we no longer need personal data, we delete it or make it anonymous.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: ask for a summary of the personal data we hold about you, what we do with it and who we have shared it with
• Correction: ask us to correct, complete or update your personal data
• Erasure: ask us to delete your personal data, unless we need to keep it to complete your order or to comply with the law, for example invoices that we must keep for tax purposes
• Withdraw consent: where we rely on your consent, withdraw it at any time (this doesn't affect anything we did before, but we may no longer be able to provide some services)
• Grievance redressal: complain to us about how we've handled your personal data
• Nomination: name another person to exercise these rights on your behalf if you die or become unable to do so

To use any of these rights, email info@dhareenafurnitures.com from the email address you used with us, or contact our Grievance Officer. We may need to confirm your identity before acting on a request, and we'll reply within one month.

If you're not satisfied with how we've handled your complaint, you can complain to the Data Protection Board of India.

Children

Our website is meant for adults. You must be 18 or older to place an order or create an account, and we don't knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we'll delete it.

Keeping your data safe

We follow reasonable security practices to protect your personal data, including encrypted connections, restricted access to our admin panel, and one-time sign-in codes instead of customer passwords.

Every order has a secret access code, which is part of the order and invoice links that we email you. Anyone with one of those links can see your order details and invoice, so please don't share them.

No system is completely secure. If a personal data breach affects you, we'll inform you and the authorities as the law requires.

Grievance Officer

If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer:

• Email: info@dhareenafurnitures.com
• Phone: +91 83685 38276
• Address: Plot No. 868, VPO Mundka, Rajendra Lakra Marg, New Delhi – 110041, India
• Hours: Monday to Saturday 10am–7pm, Sunday 11am–5pm

We acknowledge complaints within 48 hours and resolve them within one month of receiving them.

Changes to this policy

We may update this policy when our website, our services or the law changes. The "Last updated" date on this page shows when it last changed. If we make significant changes, we'll highlight them on this page.

Contact us

If you have any questions about this policy or your personal data, email info@dhareenafurnitures.com or call +91 83685 38276.