We collect the minimum needed to pack a box, get it to your door and reach you if something goes wrong. This policy explains what Tavora Courtyard holds, why, who else sees it and how you have it removed. It follows the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000).
What we collect
- Order details: name, delivery address, PIN code, phone number, email address.
- Order history: what you bought, when, and what it cost.
- Correspondence: your emails and our replies, kept so the next person to help you has the context — including any setup advice we gave.
- Site analytics: anonymous page and device counts, used to find broken or slow pages.
We do not collect or store card numbers, CVV codes, UPI PINs or bank credentials. None of those reach our website, because we do not process cards at all.
Why we hold it
Four reasons only: to pack and deliver your order; to give the courier a working address and phone number; to answer questions and process returns or replacement requests; and to spot fraudulent ordering patterns. We do not build advertising profiles and we do not sell, rent or trade your details.
Who else sees it
Our courier partners, Delhivery / XpressBees, receive your name, address and phone number so they can deliver and call you. Our UPI payment provider receives the transaction amount and reference, never the contents of the order. Our email host stores the messages you send. That is the whole list, other than a lawful request from an Indian authority.
Cookies
Functional cookies remember your cart between pages and keep you logged in; basic analytics cookies count visits. Blocking cookies still lets you read the site, but the cart will forget itself. We run no third-party advertising cookies.
How long we keep it
Order records for as long as Indian tax and consumer-protection rules require, then deleted. Support emails for two years. Analytics data is aggregated and carries no identifier pointing back to you.
Your rights
Under DPDP 2023 you may request a copy of what we hold, have errors corrected, have data deleted where no legal obligation requires us to keep it, and withdraw consent for anything not needed to complete an order. Write from the address on the order and we act within 30 days, free of charge.
Security
The site runs over an encrypted connection, administrative access is limited to the people who run the shop, and payment data never touches our servers because we accept UPI and Cash on Delivery only. No system is perfect; if a breach affected your data we would tell you and the relevant authority as DPDP 2023 requires.
Children
This shop is intended for customers aged 18 and over, not least because the range includes mains-powered heating equipment. We do not knowingly collect data from children.
Grievance Officer
Complaints about how your personal data has been handled go to our Grievance Officer, appointed as required under the Information Technology Act, 2000 (IT Act 2000) and DPDP 2023. Write to boutique@tavoracourtyard.shop with “Grievance” in the subject line, or by post to Pillar # C1288, 7/A, Sardar Patel Rd, below TOY GLOBE, beside MOCHI, Rasoolpura, Paigah Colony, Begumpet, Secunderabad, Hyderabad, Telangana 500003, India. We acknowledge within 24 hours and resolve within 30 days.
Changes
Updates appear on this page. We do not email policy changes, so it is worth a glance if you order regularly. Questions are welcome during Monday – Saturday, 10:30 AM – 8:30 PM IST. Closed on Sundays.