Privacy Policy

At ditsha (operating at www.ditsha.com), we take your privacy seriously. This Privacy Policy details exactly what information we collect when you browse our collections, register an account, make a purchase, or interact with our store, and how that information is used, stored, and protected.

1. Information We Collect

Our website only collects information necessary to create your customer account, process orders, and provide customer support:

• Customer Account Data: When you register an account, we collect your full name, username, email address, mobile phone number, and an encrypted password hash.
• Delivery & Shipping Addresses: During checkout, we collect delivery recipient names, street addresses, postal pincodes, cities, states, and contact numbers.
• Order & Purchase Records: Products purchased, quantities, pricing, payment method chosen (Online Payment), order dates, and invoice records.
• Customer Inquiries & Return Requests: When submitting an exchange or return request, we collect your order reference, reasons for return, descriptive comments, and optional condition photographs.
• Technical & Log Data: When you access the website, our server logs record IP addresses, browser types, timestamps, and page request paths to ensure platform stability, prevent abuse, and block automated spam.

2. Cookies & Storage Used On This Site

We use a limited set of minimal, secure first-party cookies necessary to operate our store and enhance your experience:

• Essential Cookies: Required for core website functions, including keeping items in your shopping bag, maintaining your secure login session, and preventing automated form fraud or cross-site security threats. These cookies are strictly necessary and cannot be turned off.
• Preference & Functional Cookies: Used to remember your site settings, such as recording whether you have accepted or declined optional analytics cookies, ensuring you are not prompted repeatedly.
• Performance & Analytics Cookies: Optional, aggregated, and anonymized metrics collected via Google Analytics 4 to help us understand popular categories and improve store navigation (only activated if you choose to accept cookies).

You can review, manage, or delete cookies at any time through your browser settings.

3. Google Analytics 4 (GA4) & Consent

We use Google Analytics 4 to understand aggregate store traffic, popular categories, and visitor engagement. GA4 operates under Google Consent Mode v2:

• For visitors from the European Union (EU), United Kingdom (UK), and Switzerland, analytics cookies and personal data storage are denied by default until you explicitly click "Accept Cookies" on our consent banner.
• When analytics is enabled, Google processes anonymized interaction data such as pageviews, referring websites, and device categories. IP addresses are masked by default in GA4.
• You can change your cookie preferences or decline analytics at any time using our cookie consent prompt or through your browser settings.

4. Third-Party Service Providers

We never sell, rent, or trade your personal data. We only share information with certified service partners strictly required for order fulfillment and platform security:

• Razorpay: Handles online card, UPI, and net banking payments. All transactions are processed through encrypted payment gateways. ditsha never stores your credit card numbers, CVVs, UPI PINs, or net banking passwords on our servers.
• Delhivery & India Post: Your shipping name, destination address, and contact number are transmitted solely to calculate delivery rates and fulfill domestic parcel deliveries.
• Cloudflare Turnstile: Used to distinguish human shoppers from automated bots on sensitive forms, keeping the platform secure without intrusive challenges.
• Firebase Cloud Messaging (FCM): Sends automated operational notifications regarding order status updates.

5. Security & Fraud Prevention

To protect our customers, maintain platform integrity, and prevent automated abuse, ditsha implements multi-layered security controls:

• Automated Abuse Detection: Real-time filtering mechanisms identify and reject malicious or automated spam submissions.
• Request Rate Limiting: Enforces frequency controls on form requests from individual IP addresses to prevent brute-force attempts and denial-of-service spam.
• Strict Server-Side Validation: All data is verified and sanitized on secure servers for integrity and format before processing or storage.

6. Data Retention & Your Rights

We retain order records for financial auditing, tax compliance, and warranty purposes as required by Indian commercial law. You have the right to:

• Access the personal data stored in your customer account profile.
• Request corrections to any inaccurate shipping or contact information.
• Request deletion of your account and non-compulsory personal data by reaching out to our support team.

7. Contact Information

If you have any questions or requests regarding this Privacy Policy, please reach out to us: