Privacy Policy
This policy explains what personal information From Haldighati collects, why, who else sees it, and what you can ask us to do with it. It applies to From Haldighati and to everything on this website.
Who we are
From Haldighati, a sole proprietorship at 1-T, Samtanagar, Bedla, Udaipur, Rajasthan 313011, India. You can reach us at fromhaldighati@gmail.com or +91 70738 85908. We are the party responsible for the information described below.
What we collect
When you place an order we collect your name, mobile number, email address and delivery address. We need all of these — the address to deliver to, the mobile number because couriers in India call before delivery, and the email to send you a confirmation.
We record what you ordered, what you paid and when. If you create an account we store the mobile number you signed in with.
Our servers keep ordinary web logs: the pages requested, the time, and the IP address they came from. These are kept to keep the site working and to spot abuse.
We do not collect your date of birth, gender, government ID, or any information about your health. We never ask for them and you should not send them to us.
What we never see
We do not see, receive or store your card number, UPI PIN, CVV, bank login or any other payment credential. Payment happens on PhonePe's own hosted page. We are told only whether a payment succeeded, the amount, and a reference number.
Nobody at From Haldighati can retrieve your card details, because we never had them.
Why we use it
To take, pack, dispatch and deliver your order. To tell you where it is. To answer you when you write to us. To keep the accounting records the law requires us to keep. To detect fraudulent or automated ordering.
We do not sell your information. We do not rent, trade or share it with data brokers, advertisers or anyone building marketing lists. There is no exception to this.
Who else receives it
Only the parties who need it to complete your order:
PhonePe Payment Gateway (PhonePe Private Limited) — receives your order number and amount in order to process payment, and handles your payment details on its own page.
Shiprocket and the courier assigned to your parcel — receives your name, delivery address and mobile number, because that is what a delivery is.
Google Firebase — hosts this website and the database your order is stored in. Data is held on Google Cloud infrastructure, with the database in the Mumbai (asia-south1) region.
We may also disclose information where a law, court order or lawful government request requires it. If that ever happens we will tell you unless we are legally prevented from doing so.
Cookies and local storage
This site sets no advertising cookies and runs no third-party tracking pixels.
Your browser's local storage holds your shopping bag, your saved items, and a token that lets you reopen your own order status page. This stays on your device. Clearing your browser data clears it, and nothing but your bag is lost.
Google Analytics is configured on this property. It records page views and general usage; you can block it with any standard content blocker without affecting the site.
How long we keep it
Order records — including your name, address and what you bought — are kept for eight years, which is the retention period Indian tax and accounting rules require for commercial records.
Web server logs are kept for 30 days.
If you have an account and ask us to close it, we remove your profile. We cannot delete the underlying order records within the eight-year window, because we are required to keep them.
Your rights
Write to fromhaldighati@gmail.com and you can ask us to: tell you what we hold about you; correct anything wrong; delete your account and profile; or stop contacting you.
We will respond within 30 days. There is no charge. We may ask you to confirm the mobile number used on your orders before we release information, so that we are not handing your details to someone else.
Security
The site is served only over HTTPS. Payment is handled off-site by PhonePe. Our database refuses direct access from browsers — every read and write goes through server-side rules, and order records are readable only with the access token issued when the order was placed, or by proving the mobile number the order was made with.
No system is perfectly secure. If we ever discover a breach affecting your information, we will tell you and the relevant authority.
Children
This site is not directed at children under 18 and we do not knowingly collect their information. If you believe a child has given us personal information, write to us and we will remove it.
Changes
We may update this policy. The date at the top of this page is when it last changed. Material changes will be announced on this page. Last updated 22 September 2026.