Privacy Policy

Account & Order Data

When you create an account or place an order, we collect your name, email address, shipping address, phone number, and payment information. Payment data is processed by Razorpay and never stored on our servers.

Usage Data

We automatically collect information about how you interact with our site — pages viewed, time spent, referring URLs, browser type, and device information. This is collected via anonymised analytics.

Cookies

We use essential cookies to keep you logged in and maintain your cart. We use analytics cookies (which you can opt out of) to understand how our store is used. We do not use advertising or third-party tracking cookies.

Order Fulfilment

Your name, address, and contact details are used solely to process and ship your order, send order confirmations, and handle returns or exchanges.

Communication

We may email you about your order status. If you opt in, we will send you updates about new drops and restocks. You can unsubscribe at any time via the link in any email.

Improvement

Aggregated, anonymised usage data helps us improve the site experience — fixing broken flows, improving page performance, and understanding which products interest you.

We Do Not Sell Your Data

HAXEUS does not sell, rent, or trade your personal information to any third party for marketing purposes. Period.

Service Providers

We share minimum necessary data with: Razorpay (payment processing), our logistics partner (shipping fulfilment), and Supabase (secure database hosting). Each provider is bound by their own privacy policy and data processing agreements.

Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority.

How We Protect Your Data

All data is transmitted over HTTPS/TLS encryption. Passwords are hashed using bcrypt and never stored in plain text. Payment information is handled entirely by Razorpay's PCI-DSS compliant infrastructure — we never see or store your card details.

Legal Framework

HAXEUS processes your data in compliance with the Information Technology Act 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection (DPDP) Act 2023 as applicable.

Data Retention

Order and account data is retained for 7 years to comply with Indian accounting regulations. You may request deletion of your account and personal data at any time — we will delete all data not required for legal compliance within 30 days.

Access & Portability

You have the right to request a copy of all personal data we hold about you. We will provide this in a machine-readable format within 14 days of your request.

Correction & Deletion

You may update your account information at any time from your profile page. To delete your account and associated data, contact us at support@haxeus.in.

Opt-Out

You can opt out of marketing emails at any time. To opt out of analytics cookies, you can clear cookies and enable Do Not Track in your browser settings.

Right to Access

You have the right to obtain a summary of your personal data that we hold, along with information about how it is being processed.

Right to Correction

You have the right to request correction of any inaccurate or misleading personal data, and to have incomplete data completed.

Right to Erasure

You have the right to request erasure of your personal data, subject to any legal obligations that require us to retain certain records.

Right to Nominate

You have the right to nominate another person to exercise your data rights on your behalf, in the event of your death or incapacity.

To exercise any of these rights, email support@haxeus.in with the subject line 'DPDP Rights Request'. We will respond within 14 business days.

HAXEUS is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes. Continued use of the site after changes constitutes acceptance of the revised policy. The date at the top of this page reflects when it was last updated.

For any privacy-related questions or requests, contact us at support@haxeus.in or through our Contact page. We aim to respond within 2 business days.