Privacy policy

Last updated: 1 October 2026

Draft policy. Have these reviewed by a lawyer before launch.

BEEPO (“we”) respects your privacy. This policy explains, in plain words, what personal data we collect, why, how long we keep it and how you can control it, as required by India's Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

  • Order details: name, phone, email, delivery address, and GSTIN if you give one.
  • Account details: name, email and a securely hashed password, if you create an account.
  • Payment status: whether a payment succeeded. Card, UPI and bank details are handled by our payment gateway; we never see or store them.
  • Messages you send us, reviews and questions.
  • Analytics (only if you click “Accept analytics”): pages visited and device type.

Why we use it

  • To deliver your order, issue GST invoices and handle returns.
  • To send order and delivery updates.
  • To answer your questions.
  • To send offers, only if you subscribed. Every message has an unsubscribe option.

Who we share it with

Only the services needed to run the store: the payment gateway (e.g. Razorpay), courier partners (e.g. Shiprocket, Delhivery), our email provider and hosting provider. We never sell your data.

How long we keep it

  • Orders and invoices: 8 years, because Indian tax law requires it.
  • Accounts: until you delete your account.
  • Marketing lists: until you unsubscribe.
  • Analytics: up to 14 months.

Your rights

You can ask to see, correct or delete your personal data, withdraw consent, and nominate someone to act for you. Write to hello@beepo.store. We reply within 30 days. Data we must keep by law (like invoices) is kept only for that purpose.

Children

Many of our customers are students. If you are under 18, a parent or guardian should place the order or give consent, as the DPDP Act requires. We do not track children or show them targeted ads.

Cookies and storage

We store your cart, wishlist and preferences in your browser so the store works. Analytics cookies load only after you accept them. You can change your choice by clearing site data.

Grievance officer

TODO: name, email and address of the Grievance Officer / Data Protection contact. If you aren't satisfied with our reply, you can complain to the Data Protection Board of India.