Privacy Policy

1. What we collect

Depending on how you use the website, we may collect your name, mobile number, optional email address, order details, branch selected, payment status, reviews and account activity. Information you enter into an order, such as packing or preparation instructions, may also be stored with that order.

2. Why we use it

We use this information to authenticate customers, create and fulfil orders, provide order status and account features, process payments, prevent fraud and abuse, provide customer support, maintain business records, and operate and improve the website.

3. Service providers

We use service providers where needed to operate the website. These may include our managed database/hosting providers, Firebase for phone verification, Google reCAPTCHA for abuse prevention, and the payment provider used for a transaction. Those providers may process information according to their own privacy terms.

We do not sell customer personal data.

4. Cookies & local storage

The website uses essential session cookies to keep customers and authorised staff signed in. The shopping cart and certain interface preferences may also be stored locally in your browser. We do not use advertising cookies on this website.

5. Security & abuse prevention

We use access controls, signed sessions, server-side validation, database permissions, rate limiting and other technical safeguards. Security-related requests may also be processed by third-party services such as reCAPTCHA and Firebase.

6. Retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including order fulfilment, customer support, accounting, tax and other legal obligations. When information is no longer required, we may delete or anonymise it, subject to lawful retention requirements.

7. Your requests

You may contact us to request access to, correction of, or deletion of personal information, subject to applicable law and legitimate retention requirements. We may need to verify your identity before completing a request.

India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 have a phased commencement framework. We will provide the rights-request and grievance mechanisms required under applicable provisions as they come into force.

8. Privacy & grievance contact

For privacy requests or data-related complaints, use the contact method published on our Contact Us page. The named privacy/grievance contact details will be published before the corresponding statutory requirements apply to Shook It.

9. Data incidents

If a personal-data incident occurs, we will assess it and make any notifications required by applicable law and regulatory directions.