Privacy Policy

We collect only the information we need to operate our store and fulfil your orders:

Personal Information

• Name
• Email address
• Phone number
• Billing and shipping address

Account Information

Your email and login credentials when you create an account with us.

Order Information

• Products purchased
• Order history
• Invoice and transaction details

Payment Information

Payments are processed securely by our third-party payment gateway. We do not store your full card or UPI credentials on our servers.

Usage Data

Limited technical information — such as your device and browser type, and basic interactions needed to operate, secure, and improve the website.

Delivery Address

We use the delivery address you provide to ship your order accurately. We do not track your device's real-time or GPS location.

We use the information we collect to:

• Process, manage, and deliver your orders
• Provide customer support and respond to your queries
• Improve our website, product quality, and services
• Send updates, offers, and promotional messages — only if you opt in, and you may opt out anytime
• Detect, prevent, and address fraud or security issues
• Meet our legal, tax, and accounting obligations

Under the DPDP Act, we process your personal data on the basis of the consent you give us when you create an account, place an order, or contact us, and for the "legitimate uses" permitted by the Act (such as fulfilling a purchase you have requested).

Your consent is specific, informed, and freely given. You can withdraw your consent at any time — for example, by opting out of marketing emails or by deleting your account. Withdrawing consent does not affect processing already carried out, and we may still retain certain records where the law requires it (see Data Retention).

We do not sell your personal data. We share it only with trusted partners ("Data Processors") who help us run our business:

• Payment Gateways – for secure payment processing
• Logistics & Courier Partners – to deliver your orders
• Service Providers – for website hosting, communications, and customer support

These partners are contractually required to protect your data, use it only for the purpose we share it, and not retain it longer than necessary.

We apply reasonable security safeguards to protect your personal data, including encrypted connections (HTTPS), access controls, and secure, reputable infrastructure providers. While we follow industry-standard practices, no method of online transmission or storage is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

We keep your personal data only for as long as it is needed for the purposes described in this policy:

• Account & profile data — kept while your account is active. When you delete your account, this data is permanently erased.
• Order & transaction records — retained for up to 8 years to meet Indian tax, accounting, and legal obligations. If you delete your account, these records are anonymised — your name, address, and contact details are removed and the order is no longer linked to you.

Sparexo uses only essential cookies that are required for the website to function — primarily to keep you securely signed in and to remember the items in your cart.

We do not currently use advertising or third-party tracking cookies. If we introduce analytics or marketing cookies in the future, we will ask for your consent first through our cookie banner. You can manage or disable cookies in your browser settings, though essential features such as login and checkout may stop working.

As a "Data Principal" under the DPDP Act, you have the following rights over your personal data:

• Right to access — request a summary of the personal data we hold about you and how we process it.
• Right to correction & updating — correct or update your details anytime from Account → Settings, or by contacting us.
• Right to erasure — delete your account and personal data anytime from Account → Settings → Delete Account, or by emailing us. We erase your data and anonymise any order records we must keep for tax purposes.
• Right to grievance redressal — raise any concern with our Grievance Officer (below).
• Right to nominate — nominate another individual to exercise your rights on your behalf in the event of death or incapacity.
• Right to withdraw consent — opt out of marketing or withdraw consent at any time.

To exercise any of these rights, email us at [email protected]. We will respond within the timelines prescribed under applicable law.

In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000, you may contact our Grievance Officer with any question, concern, or complaint about how your personal data is handled. We aim to acknowledge grievances promptly and resolve them within the timelines prescribed by law.

Sparexo does not knowingly collect or process the personal data of children (individuals under the age of 18) without verifiable consent from a parent or lawful guardian, as required by the DPDP Act. We do not use children's data for tracking, behavioural monitoring, or targeted advertising. Our website and services are intended for adults and businesses only.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date. Where the change is significant, we will take reasonable steps to notify you.

If you have any questions or concerns about this Privacy Policy or how your data is handled, you can contact us: