Privacy policy

Last updated: 14 November 2026

SparkleBae (a proprietorship) ("SparkleBae", "we") is the Data Fiduciary for personal data collected on this website, under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

What we collect and why

To fulfil your order: name, phone, email, delivery and billing address, order details. Payment details are handled by our payment partners; we do not store card data.
To run and secure the website: device, browser and usage data, cookies.
For marketing (only with your separate consent): email, WhatsApp or SMS offers. You can withdraw consent at any time using the unsubscribe link or by writing to us. Withdrawing consent does not affect your orders.

Who we share it with

Only service providers who help us operate: Shopify (store platform), Releasit (Cash on Delivery order form), Judge.me (product reviews), payment gateway, courier partners, and email, SMS and WhatsApp providers. They process data on our instructions. We do not sell personal data.

How long we keep it

Order and invoice records are kept as required by tax law for the period required by Indian tax and accounting laws (generally up to 8 years). Marketing data is deleted when you withdraw consent. Other data is deleted when no longer needed.

Your rights

You can ask to access, correct, update or erase your personal data, withdraw consent, and nominate another person to exercise your rights. Write to our Grievance Officer at sparklebae1202@gmail.com. We respond within the time set by law. If you are not satisfied, you may complain to the Data Protection Board of India.