Last updated: 24 August 2026
This policy explains what personal data Ryan Libas collects when you use this website, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language rather than legal boilerplate.
Ryan Libas ("we", "us", "our") operates this online store and is the data fiduciary responsible for the personal data described here under the Digital Personal Data Protection Act, 2023.
Registered details: [ registered business name and full postal address — update in Admin → Store Pages ]
| Category | Examples | Why we need it |
|---|---|---|
| Account | Name, email address, phone number, password (stored only as a cryptographic hash) | To create and secure your account |
| Order | Delivery and billing address, items ordered, order value, order history | To fulfil orders and issue invoices |
| Payment | Payment method, transaction reference, and the last four digits of a card | To confirm and reconcile payment, and to process refunds |
| Technical | IP address, device and browser type, pages viewed | To keep the site working, prevent abuse, and improve it |
| Communications | Messages, support requests and reviews you send us | To answer you and to improve our products |
Browsing as a guest creates a temporary session so your cart survives a page refresh. It is discarded if you do not go on to place an order.
Payments are processed by Razorpay, a PCI-DSS compliant payment gateway. Your full card number, CVV and UPI PIN are entered on their systems and are never transmitted to or stored by us. We retain only the transaction reference and the masked details shown above.
To deliver your order we share your name, delivery address and phone number with our logistics partner, Delhivery. They use it for that delivery and nothing else.
We share personal data only with parties who need it to run the store, and only to the extent required:
We do not sell your personal data, and we do not share it for anyone else's advertising.
We use cookies and similar browser storage for two purposes: essential ones that keep you signed in and hold your cart together, and analytics ones that tell us how the site is used. You can block cookies in your browser settings, but the essential ones are required for sign-in and checkout to function.
Account data is retained for as long as your account is open. Order and invoice records are retained for eight years, as required by Indian tax and companies legislation. When a retention period ends we delete the data or anonymise it so it can no longer identify you.
Under the Digital Personal Data Protection Act, 2023 you may:
To exercise any of these, contact our Grievance Officer below. We may need to verify your identity before we act, so that nobody else can make a request in your name.
Data is encrypted in transit using TLS. Passwords are stored only as hashes and cannot be read back by us or by anyone else. Access to production data is restricted to the people who need it, and database-level access rules prevent one customer's records from being reachable by another. No system can be guaranteed perfectly secure, but if a breach ever affects your data we will notify you and the Data Protection Board as the law requires.
This store is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
We may update this policy as our practices or the law change. The revised version will be posted here with a new "last updated" date, and material changes will be notified to registered customers by email.
For any question or complaint about this policy or about your personal data:
[ Grievance Officer name — update in Admin → Store Pages ]
[ Grievance Officer email address — update in Admin → Store Pages ]
Address as per our registered office above.
We acknowledge every grievance within 48 hours and aim to resolve it within one month.