JOYBASKETS
Up to 56% off storewideExtra 10% off with code JOY10

Policies

Privacy Policy

We collect a name, an address and a phone number, because a parcel cannot find you without them. We do not sell your data. The two measurement scripts on this site do not load until you say they may, and saying no changes nothing about how the shop works.

Last updated 14 August 2026

What we collect

Only what it takes to get a parcel to your door and talk to you about it. You type these into the checkout page:

  • Your name — so the courier and the packing slip agree
  • Your delivery address, city, state and PIN code
  • Your phone number, which is also the WhatsApp thread we reply on
  • Your email address, for the order confirmation
  • What you ordered, and what it cost

If you use the enquiry form instead of buying, we keep only what that form asks for: your mobile number, and a name and a question if you typed them. It is a question waiting for a reply, not a subscription — there is no mailing list here to be added to.

Alongside either of those we store one more thing: where you came from. If you arrived from an ad or a search we record the campaign name in the link you clicked, the site that linked you, and the page you landed on. It is how we tell which advertising is worth paying for. It is not a profile of you and it is not shared with anyone.

We never see card numbers, UPI PINs or bank credentials. Payment is taken by Cashfree in its own window; we receive only their confirmation that it succeeded, the last details of the method used, and the amount.

What we do with it

We use your details to pack your order, hand it to a courier, tell you where it is, and sort out a return if one is needed. That is the whole list.

We do not build a profile of you, we do not sell anything to anybody, and we do not add you to a marketing list because you bought a bedsheet.

There are three exceptions and all of them are described in full below: if you agree to them, we tell Meta when a purchase or an enquiry happened, so we can tell which of our ads paid for itself, and we count which pages get read — in Google Analytics, and in the cookieless counter run by Vercel, the company that serves this website.

Who else sees it

  • Our manufacturing and packing partner, who needs the name and address to make up the parcel
  • The courier carrying your order, who needs the same, plus your phone number for the delivery call
  • Cashfree, our payment gateway, who needs your name, email and phone to take the payment and to raise a refund if you cancel
  • WhatsApp, because the conversation happens there — read their own privacy terms for what that means
  • Meta, but ONLY if you agreed to measurement, and only in the scrambled form described in the next section
  • Google Analytics, but ONLY if you agreed to measurement, and only which pages were opened — never your name, address, email, phone or what you bought
  • Vercel, who serve this website, and who count page views for us — again ONLY if you agreed to measurement. That counter sets no cookie and stores no identifier: it records that a page was opened, and nothing that can be joined back to you
  • Google Tag Manager, which is the container the two Google scripts above are configured through — it loads only after you have agreed, and it can load nothing we have not put in it

We never sell your data, and we never rent or trade it. Nobody outside that short list gets your details unless a court or a law obliges us to hand them over.

WhatsApp messages, and opting out

Messaging us is how an order gets placed here, so a thread with you always exists. What you can control is everything beyond it: new-collection notes, restock alerts and festival offers.

Reply STOP on the thread, or write to ott.shared12@gmail.com, and we stop sending those the same day. You will still get the messages your live order needs — payment confirmation, tracking, delivery — because without them the order cannot complete.

What the site keeps on your device

Your bag is stored in your own browser, on your own device, and nowhere else. Clearing your browser data empties it; opening the site on your phone will not show the bag you filled on your laptop. Nothing about it is sent to us until you press Place order on WhatsApp.

We also keep a small note of where you arrived from — the campaign in the link, the site that linked you — in the same browser storage. It never leaves your device unless you place an order or send an enquiry, and then it travels with it.

Beyond that: no advertising cookie is set by this site, and no third-party script loads until you have said yes to the question in the next section — not Meta's, not Google's and not Vercel's. Until then the only scripts running are ours and, at the moment you pay, Cashfree's.

The measurement scripts, and how to say no

We advertise on Facebook and Instagram, and we would rather spend that money on the ads that actually work than guess. Measuring that needs Meta to know when a visit turned into a purchase or an enquiry. We also count which pages get read — in Google Analytics, and in Vercel's cookieless counter — to see which parts of the shop are worth expanding. So the first time you arrive we ask you, in a bar at the bottom of the page, whether those scripts may load — one question, covering all of them, Google's tag manager included.

  • Say no and nothing loads. We remember that and do not ask again. Nothing on the shop stops working — the bag, the checkout and the WhatsApp reply are all unaffected.
  • Say yes and they run, and can see this visit: the pages you open here, and your IP address and browser, as any site you visit can.
  • Either way, you can change your mind by clearing this site’s data in your browser, which forgets the answer and asks again.

Google Analytics and Vercel's counter get the least of the three: which page was opened, and nothing we know about you. No order, no total, no basket, no name, no email, no phone number. We do not send it purchases at all — the figures we need about money are the ones described in the next paragraph, and they go to Meta only.

When you do agree, we also confirm the purchase or the enquiry to Meta from our own server, because a browser message is often blocked and then our figures are wrong. What goes in that message is your email address, phone number, name, city and state scrambled into a one-way fingerprint — a SHA-256 hash — along with the order total and what was in it. Meta compares those fingerprints with its own; it cannot turn them back into your details, and we do not send the readable versions.

Under India's Digital Personal Data Protection Act, 2023 this is your consent to give and to withhold, and we treat it that way: every one of those scripts is off until you press Allow, and “No thanks” is a real answer that is remembered rather than a banner that comes back tomorrow.

How long we keep it, and how to get it deleted

We hold order records for as long as Indian tax and accounting rules require us to, and the WhatsApp thread for as long as it is useful to you — it is often the fastest way to reorder a size you liked.

An enquiry that never became an order is kept while it is still worth answering, and the note of where you came from is kept with the order or the enquiry it belongs to and is deleted with it.

You can ask us at any time to show you what we hold, correct something that is wrong, or delete everything that is not legally required. Message +91 95990 95571 or write to ott.shared12@gmail.com and we will confirm in writing when it is done.

Questions about the commercial side of this instead? That is the Terms of Service.