Effective date: 11 October 2026
This policy explains what personal data NityaShop collects, why, who it is shared with, and the rights you have under the Digital Personal Data Protection Act, 2023. NityaShop LLP (registration in progress) is responsible for your data; our address is on the Contact Us page.
1. What we collect
- Account details — your name, mobile number and, if you give it, your email address. If you use a password, we store only a one-way scrambled form of it that cannot be read back.
- Addresses and map pins — your delivery addresses and the map location you pin, so we can check our delivery area and the rider can find you. Your phone’s location is used only if you tap to use it while pinning an address.
- Orders — items, amounts, payment method and status, delivery, cancellation and return details, and SparkCoins. We never receive your card number or UPI PIN.
- Help requests — messages and photos you send through Get Help or by email.
- What you post — reviews, ratings, questions and votes, plus your wishlist and cart.
- Technical data — your IP address, browser and device type, and server logs, used to keep the service secure and to stop abuse. With each order we also record the kind of device (Android, iPhone or iPad, computer) and whether it was placed in a browser, the installed web app or our app, so we know which to improve.
2. Cookies and storage on your device
- Cookies that keep you signed in. If you stay signed in, that cookie lasts up to one year.
- A security cookie that protects your forms and payments from forgery.
- Your browser’s own storage, which remembers the products you recently viewed, the location you chose for Minutes, whether you closed the “install app” prompt, and, while the page is open, whether you opened the shop from our Android app. This stays on your device; an order only says which app or browser it came from (see Technical data).
We do not use advertising trackers or third-party analytics.
3. How we use your data
- To run your account, check that we deliver to your address, and process, deliver, cancel or return your orders.
- To take payments and make refunds.
- To send messages about your account and orders, such as sign-in codes, order updates and delivery codes, by email or WhatsApp. We do not send marketing messages without your consent.
- To answer your help requests.
- To prevent fraud and abuse, and to meet our legal and tax obligations.
4. Who we share it with
We share only what each party needs:
- The local shop preparing your Minutes order — your name, phone number, address and the items ordered.
- Our delivery riders — your name, phone number, address and map pin.
- Razorpay — to process payments and refunds.
- Meta (WhatsApp) — to send sign-in codes and messages to your WhatsApp number.
- Zoho — to send our emails.
- Cloudflare — to store images, including photos you attach to a help request.
- Our hosting provider — which runs the servers NityaShop operates on.
- OpenStreetMap — the address map loads map images from OpenStreetMap, which sees your IP address while you use it.
- Google — only if you choose to sign in with Google, when that option is offered.
- Authorities — when the law requires it.
We never sell your personal data.
5. WhatsApp chats and 3D views
- Chat on WhatsApp. The button opens WhatsApp with a message to the shop. That conversation happens on WhatsApp, between you and the shop, outside NityaShop, and we do not see it. We count how many times the button is tapped on each product, not who tapped it.
- View in your room. The camera view stays on your phone and is never sent to us. On Android the 3D view opens in Google’s Scene Viewer and on iPhone in Apple’s AR Quick Look; both download the product’s 3D model, and showing a model may also load decoder files from Google.
6. How long we keep it
We keep your account data while your account is open. You can delete your account yourself: sign in, open Account and choose Delete my account (how it works). When you do:
- you are signed out on every device, and your saved addresses, cart, wishlist and notification settings are deleted straight away; the name, email, phone number and password on your account are removed;
- the name, phone number and delivery address on your past orders are kept for one year, for returns, refunds and fraud checks, and then erased, together with what you wrote in order messages;
- tax invoices and credit notes, and the order amounts behind them, are kept for eight years after the end of the financial year, as GST and accounting law require. An issued invoice cannot be changed, so it still shows the name and address it was issued to;
- your reviews and questions stay on the site, shown as “Deleted customer”.
7. Your rights
You can ask for a summary of the personal data we hold about you, have it corrected or completed, have it erased, withdraw your consent, and nominate someone to exercise these rights for you. You can delete your account yourself (section 6). To use any of the other rights, email support@nityashop.in from your registered email address, or mention your registered mobile number. We will confirm it is you before acting. If you are not satisfied with our answer, you can complain to our Grievance Officer and then to the Data Protection Board of India.
8. Children
NityaShop is for adults. Anyone under 18 may use it only with a parent or guardian, who gives consent on their behalf.
9. Security
We use encrypted connections (HTTPS), store passwords only in scrambled form, make sign-in codes expire quickly, and limit repeated attempts. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
10. Grievance Officer
Our Grievance Officer’s name and contact details are on the Contact Us page.
11. Changes to this policy
We may update this policy. The new version will carry a new effective date on this page.