Privacy policy

Tinybridge Ventures Private Limited, trading as cats of kochi shop, at WeWork Galaxy, 43 Residency Road, Richmond Town, Bangalore 560025, Karnataka, India, is the data fiduciary for personal data collected through https://shop.catsofkochi.com, under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

• When you order: your name, email address, phone number, delivery address, and what you bought. A billing address if it differs.
• When you sign in: your email address. If you use your cats of kochi account, sign-in happens on the site's own sign-in service by a one-time code sent to your email, and the shop receives a token that links the two accounts. If you make an account with the shop instead, we hold your email and a hash of your password, and confirm the address by a link we email you. Details you type into the sign-up form are kept in your browser for up to 24 hours so the form survives a reload.
• When you pay: nothing about your card, UPI or bank. Payment is handled by Razorpay on its own pages; we receive only the payment reference, the amount, the method used (for example “UPI”) and whether it succeeded.
• Automatically: the cookies listed below, and server logs that record IP address, browser type and the pages requested, for security and to keep the site working. We do not run advertising trackers.
• When you write to us: what you send, and the address you send it from.

• to take, pack and deliver your order, and to tell you where it is;
• to take payment and issue invoices and refunds;
• to answer your messages and handle returns and complaints;
• to keep the site secure and to detect fraud;
• to meet legal obligations, including tax and accounting rules;
• to send you news from cats of kochi only if you asked for it — every such email has a way to stop.

We share personal data only with the parties needed to do the things above:

Razorpay Software Private Limited

Payment processing. Sees your name, email, phone and the amount; handles your payment details under its own privacy policy.

The courier

Delivery. Sees your name, address and phone number, and calls that number.

Our hosting and email providers

The servers the shop runs on and the service that sends order emails. They process data on our instructions and do not use it for themselves.

Authorities

Where the law requires it — for example a tax authority, or a court order.

We do not sell personal data, and we do not share it with advertisers.

The shop sets only cookies it needs to work, none of them for advertising:

• one that identifies your cart, so it survives a reload;
• one that keeps you signed in, if you sign in;
• one random identifier that keeps cached pages separate between visitors, so nobody is ever shown another person's page;
• one that holds the sign-up form you are filling in, for up to 24 hours, so a reload does not lose it.

The country you shop from is part of the page address, not a cookie. You can delete cookies in your browser; the cart and sign-in will then be forgotten.

• Orders, invoices and refund records: 8 years from the end of the financial year, as Indian tax and company law require.
• Your account: until you delete it or ask us to.
• A cart that never became an order: 30 days.
• Messages to us: as long as needed to deal with them, then deleted.
• Server logs: 90 days.

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, withdraw consent you have given (for example to news emails), and nominate someone to exercise these rights for you. Write to hello@catsofkochi.com. We answer within 30 days. We keep what the law obliges us to keep (order and tax records) even after a deletion request, and tell you so.

The site is served over HTTPS. Payment details never reach our servers. Access to order data is limited to the people who pack and support orders. No system is perfectly secure; if a breach affects your data we will tell you and the Data Protection Board of India as the law requires.

The shop is for adults. We do not knowingly collect personal data from anyone under 18; if you believe we have, write to us and we will delete it.

Questions and complaints about personal data go first to hello@catsofkochi.com. If you are not satisfied, the grievance officer named on the contact page acknowledges a complaint within 48 hours and resolves it within one month. You also have the right to complain to the Data Protection Board of India.

We may change this policy; the date at the top of this page says when we last did. A change that affects how we use data already collected will be sent to the email on your account before it takes effect.