Who we are
Poppy Shoppy is the data fiduciary for personal data collected through this website, WhatsApp and our shop at 2nd Cross, Vaiyapuri Nagar, Karur - 639002, Tamil Nadu.
What we collect
- Contact details: name, phone number, email address (optional) and delivery address.
- Order details: items, personalisation text, photos you send us for printing, and order notes.
- Business details for bulk orders: company or school name and GSTIN, if you want a GST invoice.
- Payment status: payments are processed by Razorpay. We receive a payment ID and status, never your full card number, UPI PIN or bank password.
- Basic technical data: pages viewed and device type, used to keep the site working.
Why we use it
- To make, personalise, pack and deliver your order and send you a design preview.
- To contact you about your order or enquiry by phone, WhatsApp or email.
- To issue invoices and meet tax and accounting laws.
- To prevent fraud and misuse of the site.
Marketing only with your consent
We send offers and updates on WhatsApp or email only if you tick the consent box on a form or ask us to. The box is never pre-ticked. You can withdraw consent at any time by replying “STOP” on WhatsApp or emailing us, and it will not affect your orders.
Your photos
Photos you send for printing are used only for your order. We do not post them on social media or in our portfolio without your written permission, and we delete them within 30 days of delivery.
Who we share it with
Only with service providers who help fulfil your order: Razorpay (payments), courier partners (delivery), and our hosting and messaging providers. They may use your data only for that purpose. We share data with authorities only when the law requires it. We do not sell personal data.
How long we keep it
- Order and invoice records: 8 years, as required by GST and accounting law.
- Enquiries that did not become orders: up to 12 months.
- Personalisation photos: deleted within 30 days of delivery.
- Marketing contacts: until you withdraw consent.
Your rights
Under the DPDP Act, 2023 you can:
- ask what personal data we hold about you and how it is used;
- ask us to correct or update it;
- ask us to delete it, except records we must keep by law;
- withdraw consent you gave earlier;
- nominate another person to exercise these rights on your behalf;
- raise a grievance with us, and then with the Data Protection Board of India.
Email buyatpoppyshoppy@gmail.com or WhatsApp +91 70104 00625 from your registered number. We respond within 30 days.
Security
The site uses HTTPS, admin access is password protected, and order data is visible only to our team. No online system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.
Grievances
For any privacy complaint, contact our Grievance Officer, Lingesh. Details are on the grievance redressal page.
Changes
If we change this policy we will update the effective date above. Significant changes will be shown on the site.