Privacy Policy

Last updated: 10 Oct 2026

This Privacy Policy describes how ("we", "us", "our") collects, uses, stores, shares and protects your personal information when you visit our website (https://sleepie.in) or purchase our products.

We comply with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Information We Collect

1.1 Information you provide

Account data: name, email address, phone number, password (hashed), shipping addresses.
Order data: products purchased, delivery address, payment method, order value, GST details.
Communications: messages sent via our contact form, emails to our support team, product reviews.
Payment data: Razorpay processes your card/UPI/Netbanking details. We do not store card numbers, CVV or UPI PINs on our servers.

1.2 Information collected automatically

Device data: browser type, operating system, screen resolution, language preference.
Usage data: pages viewed, time spent, click patterns, referral source.
Location data: approximate location derived from your IP address (for delivery estimation only).
Cookies: session cookies (essential for cart/login) and analytics cookies (only with your consent where required).

2. How We Use Your Information

To process and fulfil your orders, including payment processing, shipping and delivery.
To create and manage your account, including order history and saved addresses.
To communicate order updates, shipping notifications, and delivery OTPs via SMS/WhatsApp.
To respond to your queries, support requests and product reviews.
To detect and prevent fraud, abuse and security incidents.
To improve our website, product range and customer experience.
To send marketing communications (only with your opt-in consent; unsubscribe anytime).
To comply with legal obligations including GST invoicing and tax records.

3. Sharing of Information

We share your data only as necessary to fulfil your order:

Payment gateway: Razorpay India Pvt. Ltd. — for payment processing. Governed by Razorpay's Privacy Policy.
Courier partners: ShadowFox and its logistics partners — for shipping and delivery. They receive your name, phone, address and order details only.
Government authorities: Only when legally required (e.g., GST filings, court orders).

We do not sell, rent or trade your personal data with third parties for their marketing purposes.

4. Data Security

All data in transit is encrypted via TLS/SSL.
Passwords are hashed with bcrypt (cost factor 12).
Payment card data is handled exclusively by Razorpay's PCI-DSS Level 1 compliant systems.
Admin access is restricted by IP whitelisting and strong authentication.
We conduct periodic security reviews of our codebase and infrastructure.

5. Data Retention

Account data: retained until you request deletion.
Order data: retained for 8 years as required under Indian tax and GST laws.
Session data: cleared when you log out or after 24 hours of inactivity.
Analytics data: anonymised after 26 months.

6. Your Rights

Under the DPDP Act, 2023, you have the right to:

Access the personal data we hold about you (submit a request via email).
Correct inaccurate data via your Account settings.
Erase your personal data (subject to legal retention requirements).
Withdraw consent for marketing communications at any time (click "Unsubscribe" in any email or contact us).
Grievance redressal: If you have concerns about data handling, email care@sleepie.in. We will respond within 30 days as required by law.

7. Cookies

We use essential cookies for session management (cart, login) which are strictly necessary. Analytics cookies are used only with your consent. You can manage cookies through your browser settings. Disabling essential cookies may prevent the website from functioning correctly.

8. Children's Privacy

Our products and services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the website after changes constitutes acceptance of the revised policy.

10. Contact Us

For any privacy-related queries or requests:

Email: care@sleepie.in
Phone: +918000000000