Privacy policy

Last updated: 1 October 2026

This policy explains how SFT PWR ("SFTPWR", "we", "us") collects, uses and protects your personal data when you visit shopsftpwr.com or buy from us. We follow the Digital Personal Data Protection Act, 2023 and its Rules, and the Information Technology Act, 2000 and its Rules. Under these laws, we are the "Data Fiduciary" for your data. Our store runs on Shopify.

1. What we collect

  • Order details: your name, delivery and billing address, phone number, email address and what you bought.
  • Marketing sign-ups: your email and/or phone number, if you join our list or opt in to WhatsApp updates.
  • Messages: what you send us by email or WhatsApp, including photos for an exchange or damage claim.
  • Reviews: your name, review and any photos you choose to post.
  • Device and usage data: IP address, browser, device type and the pages you visit, collected through cookies and similar technologies.

Payment details: Razorpay processes card, UPI and netbanking details directly. We never see or store your full card number, CVV or UPI PIN.

2. Why we use it

  • To process your order and payment, deliver it, and handle exchanges, refunds and support.
  • To send order and delivery updates by email, SMS or WhatsApp.
  • To send news about drops and offers, but only if you have opted in. You can opt out at any time.
  • To prevent fraud, keep the Site secure and understand how it's used so we can improve it.
  • To meet legal, tax and accounting obligations.

We use your data only for the purpose you gave it for, or as the law allows. We don't sell your personal data, ever.

3. Who we share it with

We share only what each provider needs to do its job:

  • Shopify hosts our store and checkout.
  • Razorpay processes payments.
  • Courier and logistics partners deliver orders and collect pickups.
  • Messaging and review tools (email, WhatsApp, Judge.me) send updates and display reviews.
  • Analytics and advertising platforms (such as Google and Meta) measure traffic and ads, subject to your cookie choices.
  • Authorities, when the law requires it.

Some of these providers may store data outside India, as permitted under Indian law.

4. Cookies

Cookies keep your cart working, remember your preferences and help us measure traffic and ads. You can manage them using the cookie banner, where shown, or in your browser settings. Blocking some cookies may stop parts of the store from working.

5. How long we keep it

Order and invoice records are kept as long as Indian tax and accounting law requires, generally up to 8 years. Marketing data is kept until you unsubscribe or ask us to delete it. Other data is deleted or anonymised once we no longer need it.

6. Security

We use reasonable security safeguards, including encrypted (HTTPS) connections and access controls on our accounts and providers. If a personal data breach affects you, we'll notify you and the authorities as the law requires.

7. Your rights

You can ask us to:

  • tell you what personal data we hold about you and how it's used;
  • correct, complete or update it;
  • delete it, unless we have to keep it by law (for example, invoices);
  • withdraw your consent to marketing at any time, which won't affect anything done before;
  • nominate someone to exercise these rights for you if you die or become incapacitated.

Email teamsftpwr@gmail.com with the subject line "Privacy request". We may ask you to confirm your identity first. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

8. Children

The Site is not meant for children under 18. We don't knowingly collect children's data without verifiable parental consent.

9. Changes

We'll post any changes to this policy here and update the date at the top.

10. Grievance Officer

For privacy questions or complaints, contact our Grievance Officer at teamsftpwr@gmail.com (subject line: "Grievance"). We acknowledge complaints within 48 hours and resolve them within one month.