Privacy Policy

PCI-DSS payments

Processed by Razorpay

No data selling

Not to anyone, at any price

DPDP Act 2023

Indian data protection law

What you give us

• Name, email, phone, billing and shipping address.
• Order details — items, sizes, order value and any notes you add.
• Account email and password, if you create an account.
• Messages you send us by email, WhatsApp, social media or site forms.
• Your email, if you subscribe to our newsletter.

What we collect automatically

• Device, browser, operating system, IP address and approximate location.
• Pages and products viewed, time spent, referring site and actions taken.
• Cookies and similar technologies — see section 6.

• To process, produce and ship your orders, and deliver digital downloads.
• To send order confirmations, dispatch updates and invoices.
• To answer questions and handle cancellations, replacements and refunds.
• To detect and prevent fraud and misuse.
• To understand how the Store is used and improve it.
• To send offers and new drops — only if you opted in.
• To meet our legal, tax and accounting obligations.

We process your data under the Digital Personal Data Protection Act, 2023, on the basis of the consent you give when you order, register or subscribe, and for the legitimate uses the law permits — such as fulfilling an order you placed.

You can withdraw consent any time by emailing hello@truhetu.com. Withdrawal doesn't undo processing already done, and may mean we can't fulfil pending orders.

Only with the providers who help run the Store, and only as far as needed:

• Shopify Inc. — hosts the Store, checkout and customer records.
• Razorpay — processes payments and refunds.
• Qikink — prints and fulfils apparel, bottles and gear.
• Courier partners — receive your name, address and phone to deliver.
• Google and Meta — receive usage and cookie data, where enabled.
• Email and messaging providers — send messages on our behalf.
• Authorities or advisers — only where law requires it.

We do not sell your personal data to anyone.

Some providers, including Shopify, store data on servers outside India. Where that happens we take reasonable steps to ensure your data stays protected by appropriate contractual and security safeguards.

We use cookies to keep your cart and session working, remember preferences, measure traffic and — where you consent — show relevant ads. Essential cookies are required for the Store to function. You can block or delete cookies in your browser, but parts of the Store including checkout may stop working.

• Orders, invoices and tax records — as long as Indian tax and GST law requires.
• Account data — until you ask us to delete your account.
• Marketing data — until you unsubscribe.
• Support conversations — a reasonable period after your query is resolved.

• Ask what data we hold about you and how it's processed.
• Ask us to correct anything inaccurate or out of date.
• Ask us to erase your data, where we're not required to keep it.
• Withdraw consent to processing or marketing at any time.
• Nominate someone to exercise these rights on your behalf.
• Raise a complaint with us — see section 13.

Email hello@truhetu.com from the address on your order or account. We may ask you to verify your identity first.

The Store is intended for buyers aged 18 and over. If you're under 18, shop only with a parent or guardian involved, who will be treated as the purchaser. We don't knowingly process a child's data without verifiable consent from a parent or lawful guardian. If you believe a child has given us data, write to us and we'll delete it.

The Store runs over HTTPS and payments sit entirely on Razorpay's PCI-DSS compliant infrastructure. Access to customer data is limited to those who need it. No system is perfectly secure, so we can't guarantee absolute security, but we take reasonable technical and organisational measures to protect your information.

We link to our free learning platform at in.truhetu.com and may link to other third-party sites. They have their own privacy policies and we aren't responsible for their practices.

We may update this Policy. The revised version takes effect when posted here and the effective date above changes. Please check back periodically.