Privacy Policy

Macaw, 12 Lavelle Road, Ashok Nagar, Bengaluru, Karnataka 560001, India. We are responsible for the personal data described below.

• Order details — your name, email address, phone number and shipping address, collected at checkout so we can fulfil and deliver your order.
• Account details — if you create an account, your name, email address and a securely hashed password.
• Shopping activity — the items in your bag and your wishlist, so we can show them back to you and follow up on abandoned bags.
• Enquiries — messages you send us, including through WhatsApp.

We do not collect or store your card number, UPI ID, CVV or netbanking credentials. Payments are handled entirely by Razorpay, and we receive only a payment reference, the amount, and the method used (for example “UPI”). Razorpay's handling of your data is governed by their own privacy policy.

• To process, deliver and support your orders.
• To send order confirmations and delivery updates.
• To respond to your enquiries.
• To meet our legal and tax obligations.

We do not sell your personal data, and we do not share it for advertising.

We share only what is necessary, with:

• Razorpay — to process payments and refunds.
• Courier partners — your name, address and phone number, to deliver your order.
• Our hosting and database providers (Vercel, MongoDB Atlas, Cloudinary) — who store data on our behalf.
• Authorities, where the law requires it.

We use cookies only for things the site needs to work: keeping you signed in, and associating your shopping bag with your browser. We do not use advertising or cross-site-tracking cookies.

Order records are kept for as long as required for tax and accounting purposes. Account data is kept until you ask us to delete it. Abandoned bag records are kept for a limited period so we can follow up, and then removed.

You can ask us to show you the personal data we hold about you, correct it, or delete it. Write to us using the details below and we will respond within a reasonable period. Deleting your account does not remove order records we are legally required to retain.

Data is transmitted over HTTPS, passwords are stored hashed, and access to the admin panel is restricted. No system is perfectly secure, but we take reasonable measures to protect your information.

For any privacy question or request: