We collect the following categories of information:

• Account data: name, email address, password (hashed), and profile preferences when you register an account.
• Google Sign-In data: if you sign in with Google, we receive your name, email address, Google account ID, and profile picture from Google. We do not receive your Google password.
• Order & shipping data: full name, shipping address, billing address, phone number, items ordered, and order history.
• Payment data: processed by our payment partner (Razorpay). We do not store full card numbers, UPI PINs, or bank credentials on our servers. We retain only a transaction reference and payment status.
• Device & usage data: IP address, browser type, device type, referring URL, pages visited, and timestamps.
• Cookies: session cookies for authentication and analytics cookies (see Section 5).
• Communications: messages you send us via the contact form or email.

• To create and manage your account.
• To process, fulfil, and ship your orders.
• To process payments and prevent fraud.
• To send order confirmations, shipping updates, and service emails.
• To respond to your support requests.
• To improve the Site, understand usage, and secure our services.
• To comply with legal obligations.

When you choose to sign in with Google, OffPath uses Google OAuth 2.0 to authenticate you. Google shares with us only the basic profile information listed above. OffPath's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not allow humans to read it except as required for security, legal compliance, or with your explicit consent.

Payments on the Site are processed by Razorpay. When you make a purchase, your payment details are submitted directly to Razorpay's secure systems and are governed by their privacy policy. OffPath receives only the transaction status and a reference ID.

We use cookies for essential functionality (keeping you signed in, remembering your cart) and for analytics. We may use Google Analytics to understand aggregated, anonymised usage patterns. You can disable cookies in your browser, but parts of the Site (such as cart and checkout) may not work correctly.

We share the minimum necessary data with the following processors:

• Google — authentication (Google Sign-In) and analytics.
• Razorpay — payment processing.
• Shipping partners — name, address, and phone number for delivery.
• Cloud hosting & database providers — to operate the Site and store order data securely.
• Email service providers — to send transactional emails.

We do not sell your personal information.

Account and order data are retained for as long as your account is active and for up to seven (7) years after your last order to comply with Indian tax and consumer-protection laws. You can request earlier deletion (see Section 8) subject to those legal obligations.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and personal data.
• Withdraw consent (e.g., revoke Google Sign-In access from your Google account settings).
• Opt out of marketing emails using the unsubscribe link.

To exercise any of these rights, email us at support@offpath.shop.

We use industry-standard safeguards including HTTPS encryption, hashed passwords, role-based access control, and secured cloud infrastructure. No system is 100% secure; please use a strong unique password.

The Site is not directed to children under 13. We do not knowingly collect data from children.

We may update this Policy from time to time. Material changes will be highlighted on the Site. The "Last updated" date above will always reflect the latest revision.

Questions about privacy? Email support@offpath.shop.