Privacy Policy

Sonish.co.in (“we,” “us,” or “our”) is committed to protecting your privacy and handling your personal data responsibly in full compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Digital Personal Data Protection Rules, 2025, and other applicable Indian laws. This Privacy Policy explains how we collect, use, store, share, and safeguard your personal data when you visit our website sonish.co.in, place an order, subscribe to newsletters, or use our services (collectively, the “Services”). Personal data includes any information relating to an identified or identifiable individual, such as your name, email address, phone number, delivery/billing address, payment information, IP address, device details, browsing activity, and order history. We collect only the minimum data necessary to provide our Services, process orders, enhance your shopping experience, and meet legal obligations. Where required (e.g., for marketing communications or non-essential cookies), we obtain your explicit consent through clear, standalone notices in simple language, and you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We process your personal data for legitimate and specified purposes, including fulfilling and delivering your orders, processing payments, providing customer support, sending essential transactional communications (order confirmations, shipping updates, etc.), detecting and preventing fraud, improving our website and Services through usage analytics, and complying with statutory requirements (such as tax records or regulatory reporting). We may share your data with trusted third-party service providers (such as payment processors, logistics partners, cloud hosting, and analytics providers) who act as data processors under strict contractual agreements to use the data solely for the purposes we instruct and to apply equivalent security measures. We do not sell, rent, or trade your personal data to third parties for marketing purposes. Limited disclosures may occur to comply with legal obligations, court orders, government requests, or to protect our rights, safety, or property. All processing occurs primarily in India or with partners ensuring adequate protection standards. We implement reasonable technical, organizational, and physical security measures to protect your data from unauthorized access, loss, alteration, or misuse.

As a data principal under the DPDPA, you have rights including access to your data, correction of inaccuracies, erasure (subject to legal retention obligations), restriction of processing, and the ability to nominate a representative in case of death or incapacity. You may also withdraw consent, raise grievances, or approach the Data Protection Board of India if unsatisfied. To exercise these rights or for any privacy-related questions, contact our Grievance Officer at support@sonish.co.in or via WhatsApp (mention your preferred contact method). We will respond to verifiable requests within the timelines prescribed by law (typically within 30 days or as notified). We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law (for example, order and payment records are retained for 7 years for tax compliance). Thereafter, we securely delete or anonymize the data.

This Privacy Policy may be updated periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes through email or a prominent notice on sonish.co.in. Your continued use of our Services after such updates constitutes acceptance of the revised Policy. If you do not agree with any changes, please discontinue use of the Services. This Policy is governed by the laws of India. For any inquiries, please reach out to us at support@sonish.co.in. Thank you for shopping at Sonish.co.in—we truly value your trust and are dedicated to keeping your information secure.