DivineCart ("we", "us", or "our") respects the privacy of every visitor and customer. This Privacy Policy explains what personal information we collect, why we collect it, and how we protect it when you use our website or purchase from us.
1. Information we collect
When you place an order or create an account
- Full name
- Email address
- Mobile phone number
- Shipping address (house/flat number, area, landmark, city, state, pincode)
- Order history and preferences
When you make a payment
Payments on our website are processed by third-party payment gateway providers (currently Razorpay and PhonePe). DivineCart does not store your credit card number, debit card number, CVV, UPI PIN, net-banking password, or full UPI ID. We only receive a payment reference (transaction ID) and a success/failure status.
Automatically collected
- Basic device and browser information (via cookies and analytics)
- Pages visited and products viewed, to improve the experience
- IP address, used only for fraud prevention and delivery of the service
2. How we use your information
- To process, pack, ship and deliver your orders
- To communicate order confirmations, shipping updates and delivery status
- To provide customer support when you contact us
- To send occasional promotional communication — only if you have opted in and always with an unsubscribe option
- To detect and prevent fraudulent transactions
- To comply with legal, tax and regulatory requirements
3. Cookies
We use cookies and similar technologies to keep you logged in, remember items in your cart, and understand how visitors use the site. You can disable cookies in your browser, but some features (like the shopping cart) may not work correctly.
4. Third-party service providers
We share the minimum information required with trusted service providers strictly to operate our service:
- Payment gateways (Razorpay, PhonePe) — to process your payment securely.
- Courier / logistics partners — to deliver your order.
- Email / SMS providers — to send transactional updates.
- Analytics providers — to understand aggregate usage patterns.
These providers are contractually required to protect your information and use it only for the purpose we share it.
5. Data security
We use HTTPS encryption across the entire website, industry-standard password hashing (bcrypt) for user accounts, and JWT-based session tokens with expiry. Access to customer data inside our team is restricted on a need-to-know basis.
6. Your rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your account and associated data (subject to legal retention obligations)
- Withdraw consent for marketing communication at any time
To exercise any of these rights, email us at gauravassociate43@gmail.com.
7. Children's privacy
Our website is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, please contact us and we will delete it.
8. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The "Last updated" date at the top will change accordingly. Continued use of the website after an update constitutes acceptance of the revised policy.
9. Contact for privacy questions
For any privacy-related question or request, please write to gauravassociate43@gmail.com or use our Contact page.