Last updated: 17 May 2026. We comply with the Digital Personal Data Protection Act, 2023 (DPDP).
Who we are
The Aura Drip ("we", "us") is the data fiduciary for the personal data you share with us through this site.
What we collect
- Account data: name, email, phone, password hash.
- Order data: items, address, payment method, GST number (if provided).
- Device data: IP, user agent, pages viewed, basic analytics.
- Cookies: a guest token cookie to persist your cart, an auth session cookie when logged in, and optional analytics cookies you can opt out of.
Why we collect it
- To process orders, payments, and refunds.
- To provide customer support.
- To send transactional emails and order updates.
- To improve the site and prevent fraud.
- Marketing emails — only if you explicitly opt in.
Who we share it with
- Payment processors (Razorpay) — to collect payment.
- Logistics partners (iThink Logistics) — to ship and track orders.
- Email/SMS providers — to send transactional and (opt-in) marketing messages.
- Government authorities — when legally required.
We do not sell your data.
How long we keep it
Order records are retained for 7 years to comply with Indian tax law. Account data is retained until you delete your account. Anonymous analytics is retained for 14 months.
Your rights
Under DPDP, you can:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Erase your data (subject to legal retention).
- Withdraw consent for marketing.
- Nominate a person to act on your behalf.
- File a grievance with us, or escalate to the Data Protection Board of India.
Grievance officer
Name: [Name]
Email: privacy@auradrip.in
Response time: within 30 days.