We ask for as little as we can get away with: enough to pack a box of pads, put it on a courier and reach you if something goes wrong. This policy explains what Caliora Citadel collects, why, who else ever sees it, and how you get it removed. It follows the Digital Personal Data Protection Act, 2023 (DPDP 2023) and the Information Technology Act, 2000 (IT Act 2000).
What we collect
- Order details: your name, delivery address, PIN code, phone number and email address.
- Order history: what you bought, when, and what it cost.
- Correspondence: the emails you send us and our replies, kept so the next person to help you has the context.
- Site analytics: anonymous page and device statistics used to see which pages are broken or slow.
We do not collect or store card numbers, CVV codes, UPI PINs or bank credentials — none of those ever reach our website, because we do not process cards at all.
Why we hold it
Four reasons, and no others: to pack and deliver your order; to give the courier a working address and phone number; to answer your questions and process returns or replacement requests; and to spot fraudulent or abusive ordering patterns. We do not build advertising profiles and we do not sell, rent or trade your details to anyone.
Who else sees it
Only the people who have to. Our courier partners, Delhivery / XpressBees, receive your name, address and phone number so they can deliver and call you. Our UPI payment provider receives the transaction amount and reference, never anything about the goods. Our email host stores the messages you send. That is the entire list, other than a lawful request from an Indian authority.
Cookies
The shop uses functional cookies to remember your cart between pages and to keep you logged in, plus basic analytics cookies to count visits. Blocking cookies in your browser will still let you read the site, but the cart will forget itself between pages. We do not run third-party advertising cookies.
How long we keep it
Order records are retained for as long as Indian tax and consumer-protection rules require, then deleted. Support emails are kept for two years. Analytics data is aggregated and carries no identifier that points back to you.
Your rights
Under DPDP 2023 you may ask us for a copy of what we hold about you, ask us to correct anything wrong, ask us to delete it where no legal obligation requires us to keep it, and withdraw consent for anything not needed to complete an order. Write from the address on the order and we will act within 30 days. There is no charge for any of this.
Security
The site runs over an encrypted connection, administrative access is limited to the people who run the shop, and payment data never touches our servers because we accept UPI and Cash on Delivery only. No system is perfect; if a breach ever affected your data, we would tell you and the relevant authority as DPDP 2023 requires.
Children
This shop is intended for customers aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, tell us and we will delete it.
Grievance Officer
Complaints about how your personal data has been handled go to our Grievance Officer, appointed as required under the Information Technology Act, 2000 (IT Act 2000) and DPDP 2023. Write to care@calioracitadel.shop with “Grievance” in the subject line, or by post to G24X+R4R, 4182, Block F, Carterpuri Village, Sector 23A, Gurugram, Haryana 122017, India. We acknowledge within 24 hours and resolve within 30 days.
Changes
If this policy changes, the updated version appears on this page. We do not email policy updates, so it is worth a glance if you order regularly. Questions are welcome during Monday – Saturday, 8:00 AM – 5:00 PM IST. Closed on Sundays and public holidays.