Privacy
Last updated [ date this notice is published ]
This describes exactly what the shop records, why, and what you can ask us to do about it. It is written against what the site actually does, not against what a template assumes.
Who holds this data
[ registered business name ], [ full street address, Cuttack, Odisha, PIN ], India. Questions and requests: tarkashiodisha@gmail.com.
What we collect, and why
If you open an account
Your name, email address and, if you give one, a phone number. The password is never stored — only a one-way hash of it, which cannot be turned back into the password. If you sign in with Google instead, we receive your name, email address and profile picture from Google and store no password at all.
If you place an order
The delivery name, phone number, address, city, state and PIN code you enter, along with the pieces ordered and the amounts charged. We also record the address of the internet connection the order came from.
Prices and the GST rate are stored as a snapshot taken at the moment you ordered, so a later change in the shop cannot alter what your order says you agreed to pay.
If you send an enquiry
Whatever you type — your name, your message, and an email address or phone number if you provide one — plus which piece the enquiry was about. We also record the address of the internet connection it came from and the identification string your browser sends, so that an abusive sender can be recognised and a disputed enquiry placed.
If you ask for the newsletter
Your email address, and nothing else.
Your bag and your wishlist
These are kept in your own browser's storage, on your own device. They are not sent to us and we cannot read them. Clearing your browser data clears them.
Cookies and browser storage
| Name | What it does | Set when |
|---|---|---|
__session | Keeps you signed in | You sign in |
tk_consent_v1 | Remembers your answer to the consent bar | You answer it |
tk_bag_v2, wishlist | Your bag and saved pieces, on your device only | You add a piece |
_ga, _ga_* | Google Analytics | Only if you accept |
Analytics, and the choice you are given
We use Google Analytics to understand which pieces people look at and how they move through the shop. Nothing analytics-related loads until you press Accept. Decline, or simply ignore the bar, and no request is made to Google at all — not a reduced one, not an anonymous one. None.
If you accept, Google receives the pages you view, the broad region you are in, and the actions you take in the shop. Where you have an account, we send Google the opaque identifier of that account so a visit on your phone and a visit on your laptop can be understood as one person. We never send Google your name, your email address or your phone number, nor any value derived from them.
You can change your mind at any time: reopen the choice. Withdrawing is one click, exactly as accepting was, and it clears the analytics cookies behind it.
Where the data goes
The shop's own records are held in Google Cloud Firestore in the Mumbai region, in India. Photographs are held in Google Cloud Storage.
Google Analytics is different: it processes data on servers outside India, under Google's own terms. That is one of the reasons it is behind a consent bar rather than switched on by default.
We do not sell personal data, and we do not share it for anyone else's advertising.
How long it is kept
| What | Kept for |
|---|---|
| Orders and their delivery details | [ years — note that tax law sets a floor here ] |
| Account details | Until you ask us to close the account |
| Enquiries, and the connection address on them | [ months ] |
| Newsletter address | Until you unsubscribe |
| Analytics | 14 months, then deleted by Google |
What you can ask for
Under India's Digital Personal Data Protection Act, 2023, you may ask us to show you what we hold about you, to correct anything wrong, to delete it, or to withdraw a consent you previously gave. Write to the address below and we will answer within [ number ] days.
Some things we cannot delete on request: a completed order has to be kept as long as tax law requires it.
Grievances
If something here has gone wrong and we have not put it right, write to [ grievance officer's name ] at [ grievance email address ]. If you are still not satisfied, you may complain to the Data Protection Board of India.
Changes
If this notice changes in a way that affects you, the date at the top changes and the consent bar is shown again.