Privacy Policy

What we collect

When you order: your name, delivery address, email address and phone number. We need these to fulfil and deliver the order.

When you create an account: your email address or phone number, and your name if you give one.

Automatically: basic technical data such as your browser type and the pages you view, used to keep the site working and to understand what people look at.

We do NOT collect or store card numbers, UPI IDs or bank details. Payment details are entered directly with Razorpay and never reach our servers.

Why we use it

To process and deliver your order, and to contact you about it.

To provide order history and tracking when you sign in.

To meet our legal obligations, including GST records, which we are required to retain.

We only send marketing email if you have asked for it, and every such email has an unsubscribe link.

Who we share it with

Razorpay, to process your payment.

Our courier partners, to deliver your parcel — they receive your name, address and phone number.

Google Firebase, which hosts the site and stores our data, in its Mumbai (asia-south1) region.

Resend, which sends our transactional email.

We do not sell your personal data to anybody, for any purpose.

How long we keep it

Order and invoice records are retained for eight years, as required for GST and accounting purposes.

Account data is kept until you ask us to delete it.

Your rights

You may ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Write to hello@candlealchemist.com and we will respond within 30 days.

Deleting your account does not remove invoice records we are legally required to keep.

Cookies

We use only what the site needs to function: a session cookie to keep you signed in, and local storage to remember your cart between visits.

We do not use advertising or cross-site tracking cookies.