Privacy policy

This policy explains how The Upahar Box ("we") handles your personal information when you use this website, place an order or ask for a quote. We follow India's Digital Personal Data Protection Act, 2023.

What we collect

• Contact details: your name, email address and phone number.
• Delivery details: the recipient's name, address and PIN code.
• What you'd like printed: names, messages, gift-card text and any logo you upload.
• Order and payment records: what you ordered, amounts, and payment references such as a UPI transaction number (UTR). We don't receive your card number, CVV or UPI PIN.
• Business details for corporate orders: company name, GSTIN, number of kits and anything you tell us in the quote form.
• Sign-in details: if you sign in, your email or phone number, or your name and email from Google if you use Google sign-in.

Why we use it

• to make, personalise, pack and deliver your order, and send you proofs and updates about it;
• to take payments, issue bills and invoices, and keep the records Indian tax law requires;
• to reply to quotes and questions;
• to keep the site secure and stop misuse.

We don't send marketing messages unless you ask us to, and you can stop them any time.

Who we share it with

Only the services we need to run the shop, and only what they need:

• courier partners to deliver your parcel (the recipient's name, address and phone);
• an email provider to send order updates;
• our hosting and database providers, which store the website and order records;
• Google, only if you choose to sign in with Google.

We don't sell or rent your information. We share it with authorities only when the law requires it.

Cookies and storage on your device

We use a small number of cookies and browser storage that the site needs to work: to keep you signed in, to remember your cart and the box you're building, and to remember your colour theme. We don't use advertising or tracking cookies.

How long we keep it

We keep order and billing records for as long as Indian tax and accounting law requires. Uploaded logos and print details are kept with the order so we can reprint or fix a problem; we delete them on request once the order is complete. Quote requests that don't become orders are deleted after 2 years.

Your rights

You can ask us to show you the personal information we hold about you, correct it, or delete it (except records we must keep by law). You can also withdraw consent to any optional use. To do any of this, or to raise a concern, email info@theupaharbox.com. We reply within 7 days and resolve requests within 30 days.

If you aren't satisfied with our answer, you can complain to the Data Protection Board of India.

Keeping it safe

The site uses HTTPS, sign-in codes expire quickly, and only the shop owner can see orders in the admin dashboard. No system is perfectly secure, but if we ever learn of a breach that affects you, we'll tell you and the authorities as the law requires.

Children

This site is for adults. If you're under 18, please ask a parent or guardian to order for you.