Privacy Policy
Last updated: 2026-10-22
Last updated: 22 October 2026
This Privacy Policy explains how Pocket of Joy ("Pocket of Joy", "we", "us") collects, uses, shares and protects your personal data when you use pocketofjoy.in (the "Site"). We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. Data we collect
Account details: your name, email address, phone number and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile photo from Google.
Verification: one-time codes (OTPs) sent to your email or phone to confirm they belong to you. Codes expire within minutes.
Order details: the items you buy, delivery addresses, the recipient's name, phone number and address, gift notes, preferred delivery date and order history.
Payment details: for UPI payments, the UPI transaction ID (UTR) and any payment screenshot you upload so we can verify your payment. We never collect or store card numbers, UPI PINs or bank passwords.
Optional details: special occasions and dates you save for reminders, your profile photo, newsletter sign-up, WhatsApp updates opt-in, and anything you send us through the Contact or Corporate Gifting forms.
Usage data: pages you visit on the Site (recorded with Google Analytics, never by advertising networks), how you use our pages, such as clicks, scrolling and page interactions (recorded with Microsoft Clarity, which masks the text you type, such as passwords, addresses and payment details), and technical information such as browser type and IP address, used for security, to fix errors and to improve the Site.
2. How we use your data
To create and manage your account, and to sign you in securely.
To process, pack, deliver and track your orders, including sharing the recipient's address and phone number with our delivery partner.
To verify payments, issue refunds and handle returns.
To send order, payment, delivery and return updates by email, SMS or WhatsApp.
To send occasion reminders, offers and new blog posts, only if you have opted in. You can opt out at any time (see section 6).
To answer your questions, complaints and corporate gifting enquiries.
To keep the Site secure, prevent fraud and misuse, and fix technical problems.
To meet our legal, tax and accounting obligations.
We use your data on the basis of your consent, and where it is needed to fulfil an order you placed or to comply with the law.
3. Who we share it with
We never sell your personal data. We share only what is needed with trusted service providers who process it for us:
Delivery partners: recipient name, phone number and address, to deliver your order.
Hosting and infrastructure: Amazon Web Services (servers and image storage in Mumbai, India) and Cloudflare (website delivery and security).
Communication: Resend (transactional emails) and Meta's WhatsApp Business Platform (WhatsApp updates you opted into).
Sign-in: Google, only if you choose "Sign in with Google".
Analytics: Google Analytics, which receives information about how the Site is used (pages viewed, device, browser and approximate location).
Error monitoring: Sentry, which receives technical error reports that may include limited request details.
Authorities: when required by law, court order or a government request.
Your sender details are not shown to the gift recipient. The delivery slip carries only the recipient's address and your gift note.
4. How long we keep it
We keep account data while your account is active. Order and payment records are kept for up to 8 years, as required by Indian tax and accounting laws. OTPs and login sessions expire automatically. When data is no longer needed, we delete or anonymise it.
5. Security
The Site uses HTTPS encryption. Passwords are hashed, access to customer data is limited to authorised staff, and admin accounts are protected by two-factor authentication. No system is completely secure, so please keep your password private and tell us straight away if you suspect misuse of your account.
6. Your rights and choices
Access and correction: view and update your details in My Account, or ask us for a copy of your data.
Erasure: ask us to delete your account and personal data, except records we must keep by law.
Withdraw consent: unsubscribe from marketing using the link in any email, turn off WhatsApp updates, or write to us.
Grievance and nomination: raise a complaint with our Grievance Officer (see our Grievance Redressal policy), and nominate a person to exercise your rights in case of death or incapacity, as allowed under the DPDP Act.
To use any of these rights, email hello@pocketofjoy.in. We respond within 30 days.
7. Cookies and similar storage
We use the browser storage needed to run the Site (keeping you signed in, remembering your cart and your preferences), and Google Analytics cookies to understand how the Site is used. We do not use advertising or retargeting cookies. See our Cookie Policy for details.
8. Children
The Site is meant for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us their data, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows when it last changed. For significant changes, we will notify you by email or on the Site.
10. Contact
Pocket of Joy
SGD/200G, Block-D, Shyam Nagar, Kanpur, Uttar Pradesh 208013, India
Email: hello@pocketofjoy.in
Grievance Officer: Anushree Gupta, hello@pocketofjoy.in, +91 88875 28017