Privacy policy
Draft for review. Please have this page checked by a lawyer before launch, then delete this line in Admin → Pages.
This policy explains what personal data burabura collects, why, and your choices, in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. burabura is run by Vedant Indurkar, Baner, Pune, Maharashtra, India ("we", "us").
What we collect
When you place an order: your name, email address, mobile number, delivery address, the items you buy, the amount, how you paid, any coupon you used, and whether you'd like WhatsApp updates.
When you contact us: what you write to us, and your phone number or email.
Payments: card, UPI and net banking payments are handled by Razorpay. We never see or store your card or bank details. We receive only a payment reference and the method (for example "UPI").
Security: to stop spam and abuse, we store a scrambled (hashed) version of your internet address, not the address itself.
We don't need an account to shop, and we don't collect any data about children.
Why we use it
- To process, pack and deliver your order, and send order updates by email and, if you agree, WhatsApp.
- To answer your questions and handle replacements, refunds and complaints.
- To keep accounting and tax records as the law requires.
- To protect our website from fraud and abuse.
We do not sell or rent your data, and we don't use it for advertising.
Cookies and storage on your device
We don't use advertising or tracking cookies. Your browser keeps only what the site needs to work: your shopping bag and a note that you've seen our welcome message. Staff logins use a secure cookie that only applies to our admin area.
Who we share it with
Only what's needed to serve you:
- Courier partners, to deliver your order.
- Razorpay, to process payments and refunds.
- Companies that run our website for us: Vercel (hosting and photos), Neon (database) and Resend (emails). Some of them may process data outside India, under their own security and privacy commitments.
- Government authorities, when the law requires it.
How long we keep it
Order and payment records are kept for as long as tax and accounting laws require (usually up to 8 years). Other messages are deleted when they're no longer needed.
Your rights
You can ask us to see, correct, update or delete your personal data, or withdraw your consent, by emailing vin.nanded@gmail.com. We'll reply within a reasonable time. Some records, such as invoices and payment records, must be kept by law even after a deletion request.
Security
Our website uses HTTPS encryption, staff logins need a password and a second code on their phone, and only people who need your details to fulfil your order can see them.
Children
Our toys are for children, but this website is for adults. If you are under 18, please shop with a parent or guardian.
Contact and grievances
Grievance officer: Vedant Indurkar, vin.nanded@gmail.com, +91 72491 29886, Baner, Pune, Maharashtra, India. We acknowledge complaints within 48 hours.
We may update this policy from time to time; the date at the top shows the latest version.