Swastik Spl™
Privacy Policy
How we handle personal data for accounts, orders, payments, and support.
GSTIN, PAN, registered legal entity name, and a named Grievance Officer will be published here and on invoices when allotted. Until then, seller identity is Swastik Spl at Jain Traders (Patwa Ji Ki Dukan), Raipur, Chhattisgarh 492001. Privacy / consumer grievances: info@swastikspl.com · Hours: Mon–Sat, 10 AM – 8 PM.
Privacy Policy
Swastik Spl™
Last updated: 14 July 2026
This Privacy Policy explains how Swastik Spl (“Swastik Spl,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when you visit or use https://www.swastikspl.com (the “Website”) and related services (together, the “Services”).
We operate as an online seller of colour and related products (including industrial dyes and pigments, textile colours, gulaal and festive colours, rangoli colours, sindoor and sacred colours, and packaging colours). Our shop premises identity is Jain Traders (Patwa Ji Ki Dukan), Raipur, Chhattisgarh 492001. Seller identity for the Website is Swastik Spl. Our registered legal entity name, GSTIN, and PAN will be published on this page and on tax invoices when allotted; until then, GST details appear on the tax invoice once available.
This Policy is intended to align with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), applicable rules thereunder, the Information Technology Act, 2000, and related consumer and e-commerce obligations under Indian law. Where a statutory term differs from everyday language, we use plain language for clarity.
1. Who we are (Data Fiduciary)
For personal data processed in connection with the Services, Swastik Spl is the Data Fiduciary.
| Detail | Information |
|---|---|
| Brand / seller | Swastik Spl™ |
| Premises / shop identity | Jain Traders (Patwa Ji Ki Dukan), Raipur, Chhattisgarh 492001 |
| Website | https://www.swastikspl.com |
| Primary contact | info@swastikspl.com |
| Phone | As published on the Contact page and/or invoices; email remains the primary channel |
| Business hours | Mon–Sat, 10 AM – 8 PM |
| Registered entity / GSTIN / PAN | Not yet published here; will be updated on this page and on invoices when allotted |
| Grievance contact | Grievance Officer, Swastik Spl — info@swastikspl.com; premises as above (named officer to be published when designated) |
2. Scope
This Policy applies to personal data we process about:
- visitors to the Website;
- account holders (email sign-in and Google OAuth);
- customers who place orders (signed-in checkout);
- persons who contact us by email or through inquiry forms; and
- any other individual whose personal data is processed in connection with the Services.
It does not cover third-party websites, apps, or services that we do not control, even if linked from the Website.
3. Personal data we collect
We collect personal data that you provide, that is generated through use of the Services, and that we receive from processors who help us operate the Services.
3.1 Data you provide
Depending on how you use the Services, this may include:
- Identity and contact: name, email address, phone number, shipping and billing address (including Indian PIN code, city, state, and related delivery details);
- Account: credentials associated with email authentication and profile information linked to Google OAuth (for example name and email);
- Order and payment context: products ordered, quantities, amounts in INR, order notes, and payment status (card/UPI/net-banking and similar instrument details are collected and processed by Razorpay; we do not store full card numbers);
- Communications: messages, inquiries, complaint or return details, and supporting information you send us;
- Other information you choose to submit through forms or email.
3.2 Data collected automatically
When you use the Website, we and our processors may process:
- Technical and log data: IP address, browser type, device/OS information, timestamps, referring URLs, and similar diagnostic logs;
- Session and authentication: session cookies and related tokens used to keep you signed in and secure the Services;
- Cart state: shopping cart contents stored in your browser’s localStorage (this resides on your device; clearing site data removes it);
- Security and abuse-prevention signals reasonably needed to protect accounts, payments, and the Website.
3.3 Data from third parties
We may receive limited account or payment-related information from:
- Supabase (authentication, database, and hosting-related processing);
- Google (OAuth sign-in; and, if you use embedded maps or fonts, related service delivery);
- Razorpay (payment confirmation, payment identifiers, settlement and refund status);
- Vercel (Website hosting and edge delivery).
We do not currently use Google Analytics or advertising pixels on the Website.
3.4 Children
The Services are intended for purchase and use by adults and businesses capable of forming a binding contract under Indian law. We do not knowingly offer the Services to children in a manner that requires verifiable parental consent under the DPDP Act. If you believe we have collected a child’s personal data improperly, contact us at info@swastikspl.com and we will take appropriate steps.
4. Purposes and legal basis (DPDP)
We process personal data for lawful purposes, including:
| Purpose | Examples |
|---|---|
| Provide the Services | Account creation, login, cart and checkout, order fulfilment, delivery coordination |
| Payments | Creating orders, collecting INR payments via Razorpay, verifying payments, issuing invoices/receipts, refunds |
| Customer support | Responding to inquiries, quality/damage/wrong-item claims, grievance handling |
| Security and integrity | Fraud prevention, authentication, abuse detection, protecting rights and property |
| Legal compliance | Tax, accounting, consumer, e-commerce, and other applicable obligations |
| Service improvement | Fixing errors, maintaining availability, and operational analytics without advertising trackers (as currently configured) |
Under the DPDP Act, processing is generally based on consent and/or other permitted grounds where applicable (for example, for fulfilment of a contract with you, compliance with law, or specified legitimate uses recognised under Indian law). Where consent is required, you may withdraw it as described in Section 8, subject to legal retention and fulfilment needs.
We do not sell personal data.
5. Cookies, localStorage, and similar technologies
We use:
- Session / authentication cookies (and related tokens) to keep signed-in sessions secure via our auth provider (Supabase);
- localStorage for cart contents on your device;
- technologies operated by processors (for example hosting, payment checkout) as needed to deliver the Services.
You can control cookies through your browser settings and clear localStorage/site data. Blocking essential cookies or storage may prevent sign-in, checkout, or cart functionality.
We do not currently operate Google Analytics or ad/retargeting pixels on the Website. If that changes, we will update this Policy and, where required, seek appropriate consent or provide appropriate notice.
6. Sharing and processors
We share personal data only as needed to operate the Services, comply with law, or protect rights. Categories of recipients include:
| Recipient | Role |
|---|---|
| Supabase | Authentication (email and related session handling), database storage, and related backend processing |
| Razorpay | Payment processing, payment verification, refunds, and related compliance |
| Vercel | Website hosting and content delivery |
| OAuth authentication; Maps and Fonts if used on the Website | |
| Logistics / delivery partners | Shipping and delivery within India (name, phone, address, PIN, and order details as needed) |
| Professional advisers / authorities | Where required by law, regulation, court order, or to establish, exercise, or defend legal claims |
Processors act on our instructions or under their own roles as applicable law and contracts require. We require appropriate confidentiality and security measures consistent with the nature of the processing.
Provider privacy notices (for reference): Supabase, Razorpay, Google.
7. Cross-border processing
Our Website and some processors (including Supabase, Razorpay-related infrastructure, Vercel, and Google) may process or store data on servers located outside India. Where cross-border transfer of personal data occurs, we will do so in accordance with the DPDP Act and applicable rules, including any Government of India restrictions or prescribed conditions for transfer to a particular country or territory.
By using the Services, you understand that personal data may be processed in such locations for the purposes described in this Policy.
8. Your rights (Data Principal)
Subject to the DPDP Act and applicable exceptions, you may have the right to:
- access a summary of personal data we process about you and processing activities;
- correction of inaccurate or incomplete personal data;
- erasure of personal data when it is no longer needed for the stated purpose or when consent is withdrawn (subject to legal retention);
- withdraw consent where processing is based on consent (withdrawal does not affect processing already lawfully completed);
- nominate another individual in accordance with law (when applicable mechanisms are notified);
- grievance redressal regarding personal data (see Section 11).
To exercise rights, email info@swastikspl.com with the subject line “DPDP / Privacy Request,” and enough detail for us to verify your identity and locate the relevant records. We will respond within timelines required by law.
We may decline or limit a request where permitted (for example, where fulfilment, tax, fraud-prevention, or other legal obligations require retention).
9. Retention
We retain personal data only as long as needed for the purposes collected, including:
- account and order records for fulfilment, support, accounting, and tax;
- payment and invoice records as required under applicable law;
- security and log data for a reasonable period for integrity and investigation;
- communications related to grievances until resolved and for a further reasonable period as required.
When data is no longer required, we will delete or anonymise it, or securely restrict further processing, consistent with backup and legal hold constraints.
10. Security
We implement reasonable organisational and technical measures appropriate to the nature of the data and risks involved, including access controls, encrypted transmission where supported by providers, and use of reputable processors for auth and payments. No method of transmission or storage is completely secure; you are responsible for keeping account credentials confidential and for using secure devices and networks.
11. Grievance redressal (privacy)
For privacy or personal-data grievances under the DPDP Act:
Grievance Officer, Swastik Spl
Email: info@swastikspl.com
Premises: Jain Traders (Patwa Ji Ki Dukan), Raipur, Chhattisgarh 492001
Hours: Mon–Sat, 10 AM – 8 PM
A named Grievance Officer will be published on this page when designated. Until then, use the title and contact above.
We aim to acknowledge and resolve grievances within timelines required by applicable law. If you remain dissatisfied after our response, you may escalate as provided under the DPDP Act and rules (including to the Data Protection Board of India, when applicable).
12. Third-party links and services
The Website may contain links to third-party sites or embed third-party services (for example payment checkout, maps, fonts). Their privacy practices are governed by their own policies. We encourage you to review those policies.
13. Changes to this Policy
We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes will be indicated on this page. Continued use of the Services after an update constitutes notice of the revised Policy, except where consent or another step is required by law.
14. Contact
Swastik Spl
Jain Traders (Patwa Ji Ki Dukan), Raipur, Chhattisgarh 492001
Email: info@swastikspl.com
Phone: as published on the Contact page / invoices
Website: https://www.swastikspl.com
Hours: Mon–Sat, 10 AM – 8 PM
For questions about this Policy or our data practices, contact us at the email above.