Legal
Privacy Policy
Last updated: 2 August 2026
This policy explains what personal data Rosaaya collects when you use rosaaya.com, why we collect it, who we share it with, and what control you have over it.
What we collect
| Data | Why we need it |
|---|---|
| Name, delivery address, PIN code | To deliver your order |
| Email address | Order confirmation, tracking, and support replies |
| Mobile number | Delivery updates and courier contact |
| Order history | To handle returns, refunds and support queries |
| Payment reference (transaction or UTR number) | To confirm and reconcile your payment |
| IP address, browser and device type | Security, fraud prevention and site analytics |
What we do not collect
We never see or store your card number, CVV, UPI PIN or bank password. Payments are handled entirely by our payment partners on their own secure systems. We receive only a success or failure result and a transaction reference.
You can shop without creating an account. We do not require you to register, and we do not store passwords for customers.
How we use your data
- To process, pack, deliver and invoice your order.
- To contact you about your order, including delivery updates and problems.
- To handle returns, refunds and customer support.
- To detect and prevent fraudulent orders and abuse.
- To meet our tax and accounting obligations.
- To send marketing email — only if you opted in, and you can unsubscribe at any time.
We do not sell your personal data, and we do not rent or trade our customer list.
Who we share it with
We share the minimum necessary with service providers who help us run the store:
- Payment gateways (Razorpay, PayU) — to process payments and refunds.
- Courier partners — your name, address and phone number, to deliver your parcel.
- Email provider (Brevo) — to send order confirmations and updates.
- Hosting provider — which stores the site and its database.
- Government authorities — where we are legally required to disclose.
Cookies
We use a small number of cookies. Essential cookies keep your shopping bag and session working and cannot be turned off without breaking the site. Analytics cookies, if enabled, help us understand which pages are used. You can block or delete cookies in your browser, though the bag and checkout may stop working correctly.
How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires (currently 8 years in India). Marketing contact details are kept until you unsubscribe. Analytics data is kept in aggregate form.
Security
The site is served over HTTPS, and access to the admin panel and database is restricted. We take reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct data that is wrong or out of date.
- Delete your data, where we are not required to keep it for legal reasons.
- Stop sending you marketing email.
Email care@rosaaya.com and we will respond within 30 days. We may ask you to confirm your identity before we act on a request.
Children
Our products are not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. Material changes will be highlighted on this page.
Contact
Questions about privacy or your data: care@rosaaya.com or +91 90000 00000.