Last updated: 16 September 2026
Deccan Drip (“we”, “us”, “our”) is committed to protecting the personal data of every person who visits or transacts on this website (the “Platform”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and disclose it, and the rights available to you. It is published in accordance with the Information Technology Act, 2000, the rules framed thereunder, and the Digital Personal Data Protection Act, 2023.
By accessing the Platform or placing an order, you consent to the collection and processing of your personal data in the manner described in this Policy.
1. Personal data we collect
- Identity and contact data — name, billing and shipping address, email address and telephone number.
- Transaction data — products viewed, added to cart, purchased, returned, exchanged or cancelled, and order history.
- Payment data — payment method and confirmation status. We do not collect or store card numbers, CVV codes or bank credentials; these are handled directly by our payment gateway.
- Account data — username, password and saved preferences, where you choose to create an account.
- Technical data — IP address, device type, browser, operating system and other identifiers collected automatically.
- Usage data — pages viewed, time spent and navigation behaviour on the Platform.
- Communications — the content of any correspondence you send us.
2. How we collect personal data
We collect personal data directly from you when you create an account, place an order or contact us; automatically through cookies and similar technologies when you browse the Platform; and from our service providers, including Shopify, our payment gateways and our logistics partners, in the course of providing services to you.
3. Purposes of processing
- To process, fulfil and deliver your orders, and to handle returns, exchanges and refunds.
- To communicate with you regarding your order, account or enquiry.
- To provide customer support and address grievances.
- To send marketing communications where you have consented, which you may withdraw at any time.
- To detect, prevent and investigate fraud, security incidents and misuse of the Platform.
- To comply with applicable legal, tax and regulatory obligations.
- To analyse usage and improve our products, services and the Platform.
4. Disclosure of personal data
We do not sell your personal data. We disclose it only to the extent necessary, and only to the following categories of recipients:
- Service providers — Shopify (which hosts this Platform), payment gateways, logistics and courier partners, communication and analytics providers, each bound by confidentiality obligations.
- Legal and regulatory authorities — where disclosure is required by law, court order or a valid request from a governmental or law enforcement agency.
- Business transfers — in connection with any merger, acquisition or restructuring of our business, subject to equivalent protection being maintained.
5. Cookies
The Platform uses cookies and similar technologies to keep your session active, remember your cart, understand how the Platform is used and, where you consent, to deliver relevant advertising. You may disable cookies through your browser settings; certain features of the Platform may not function correctly if you do so.
6. Data retention
We retain personal data only for as long as is necessary for the purposes set out in this Policy, or for such longer period as may be required under applicable tax, accounting or legal obligations. Data no longer required is deleted or anonymised.
7. Data security
We apply reasonable technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration and loss. Payments are processed over encrypted, PCI-DSS compliant infrastructure. However, no method of transmission or storage is entirely secure, and we cannot guarantee absolute security.
8. Your rights
Subject to applicable law, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your personal data, where it is no longer required;
- withdraw consent previously given, without affecting the lawfulness of prior processing;
- opt out of marketing communications at any time, using the unsubscribe link in our emails or by writing to us; and
- nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
Requests may be made to the Grievance Officer named below. We may need to verify your identity before acting on a request.
9. Children
The Platform is not directed at children. We do not knowingly collect personal data of any person below eighteen (18) years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Third-party links
The Platform may link to third-party websites. We are not responsible for the privacy practices of such websites, and we encourage you to read their privacy policies before providing them with personal data.
11. Changes to this Policy
We may update this Policy from time to time to reflect changes in our practices or in applicable law. The revised version will be published on this page with an updated revision date.
12. Grievance Officer
Any question, request or grievance relating to the processing of your personal data may be addressed to:
Grievance Officer — Deccan Drip
Hyderabad, Telangana, India
Email: deccandrip@gmail.com
Phone: +91 92434 34373
Working hours: Monday to Saturday, 10:00 AM to 7:00 PM IST
Grievances are acknowledged within forty-eight (48) hours of receipt and are ordinarily resolved within fifteen (15) days.