1. Data We Collect

1.1 Personal Data: Name, email address, phone number, shipping and billing address, payment details.
1.2 Transactional Data: Order details, invoices, refund requests, and related communications.
1.3 Technical Data: Cookies and basic device/browser information (non-intrusive).

2. Purpose of Processing

2.1 To process and fulfill orders, including payments, deliveries, and refunds.
2.2 To manage subscriptions, preferences, and personalized recommendations.
2.3 To send communications, including marketing communications only with explicit consent.
2.4 To comply with applicable legal, tax, and regulatory obligations.

3. Consent & Customer Rights

3.1 Consent is obtained prior to collecting or processing personal data.
3.2 Customers may withdraw consent at any time through account settings or by emailing support@compostible.com.
3.3 Under the Digital Personal Data Protection (DPDP) Act, 2023, customers have the right to:
     a) Access their personal data.
     b) Correct or update inaccurate personal information.
     c) Request deletion of personal data, subject to legal or contractual requirements.
     d) Raise complaints or seek redressal.
3.4 Withdrawal of consent may limit access to certain services.

4. Data Storage & Security

4.1 Customer data is stored securely within India in compliance with the DPDP Act, 2023.
4.2 Data is protected using industry-standard security measures, including encryption at rest and in transit.
4.3 Data Retention:
    a) Transactional and tax-related records: up to 8 years.
    b) Other customer data: retained only as long as necessary to fulfill stated purposes.

5. Data Sharing

5.1 Customer data is shared only with trusted third-party service providers essential for operations, such as logistics partners, payment gateways, and customer support tools.
5.2 Customer data is never sold, rented, or traded to third parties.

6. Cookies

6.1 Essential Cookies: Required for core website functions such as login, cart, and checkout.
6.2 Analytics Cookies: Used to improve website performance and user experience, only with customer consent.
6.3 Customers may manage or disable cookies through their browser settings at any time.

7. Grievance Redressal (DPDP Compliance)

7.1 Customers may submit grievances by emailing support@compostible.com.
7.2 Complaints will be acknowledged within 48 hours.
7.3 Complaints will be resolved within 30 days, in accordance with statutory requirements.