Privacy policy

Written to be read. What we collect, why we collect it, and what you can make us do about it.

Last updated 27 July 2026

Not ready to publish. The registered entity details, GSTIN and grievance officer below are unset. They are statutory disclosures and must be filled in before this site goes live.

What we collect

If you join the waiting list, we collect the name and email address you provide. We use them to contact you about Siumora opening. Our staff may also see whether that email appears on a customer account or order, so they can avoid treating an existing customer as new.

To send you an order: your name, phone number, delivery address and email. To take payment: nothing you would recognise as card details — those go straight to our payment gateway and never touch our servers.

To understand what works on the site: pages viewed, items opened, and what was bought. This is analytics, and it only runs if you accept cookies. Declining changes nothing about your order.

Why we are allowed to

We use waiting list details because you asked to hear when we open. You can withdraw that request by contacting the grievance officer below.

Order data we process because you asked us to send you something — performing that contract is the lawful basis, and it does not depend on consent. Analytics and advertising run on consent alone, and you can withdraw it at any time by clearing the cookie choice in your browser.

Who else sees it

Our courier, to deliver the parcel. Our payment gateway, to take the money. Our messaging providers, to send order updates. Analytics and advertising platforms, but only after you accept, and only ever as an irreversible hash of your phone or email — never the raw value.

Data is stored in India. We do not sell it, and we do not share it for anyone else’s marketing.

How long we keep it

Order and tax records for as long as GST law requires us to. Everything else for as long as it is useful and no longer.

Your rights

You can ask what we hold about you, correct it, or have it erased. Erasure does not extend to records we are legally required to retain, such as a tax invoice. Write to the grievance officer below; we resolve these within 90 days as the Digital Personal Data Protection Act requires.

Grievance officer
To be filled in
Email
To be filled in

If something goes wrong

If your data is ever exposed, we notify the Data Protection Board and everyone affected within 72 hours, and we tell you what happened rather than what we would prefer you knew.