1. Who We Are

This website is run by SANDRAGON (founder: Shanmuganathan.K), a sports and fitness store in India. This policy explains what personal information we collect when you browse, sign in with your mobile number, shop, review a product or contact us, and how we look after it. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

By using this website or placing an order, you agree to this policy. If you don't agree, please don't use the website.

2. What We Collect

Information you give us

• Account and delivery details: your name, 10-digit mobile number, email address (optional), delivery address and pincode.
• Order details: the products, sizes and options you buy, prices, coupon used, delivery charge, and order, cancellation and return status, including the reason you give for a cancellation or return.
• Purchase points: the points you earn, redeem and have left.
• Reviews: the name, star rating and comment you post on a product. Reviews are public and shown to every visitor.
• Messages: anything you send us on WhatsApp, by phone or email, including dealer enquiries (name, mobile number, message).

Payment information

Online payments are handled by Razorpay. Your card number, CVV, UPI PIN and net-banking password go directly to Razorpay and never reach us. We only receive the payment ID, amount, payment method (for example UPI or card) and whether the payment succeeded or was refunded.

What we don't collect

We don't use advertising trackers or sell data to advertisers, and we don't ask for sensitive details such as Aadhaar, PAN, health or bank account information to place an order.

3. How We Use Your Information

• To process, pack, ship and deliver your order, and to handle cancellations, returns, exchanges and refunds.
• To send you order confirmations, dispatch and tracking updates on WhatsApp, and to reply when you contact us.
• To show your order history and points balance when you sign in with your mobile number.
• To run the purchase points programme and apply coupons.
• To prevent fraud, check that payments are genuine, and keep the website secure.
• To keep accounting and tax records as required by Indian law.

We only send marketing or offer messages if you have agreed to receive them, and you can ask us to stop at any time.

4. Who We Share It With

We never sell your personal information. We share only what is needed with:

• Packing partners and courier companies: your name, mobile number, delivery address, pincode and the items ordered, so your parcel can be packed and delivered.
• Razorpay: your name, mobile number, email and order amount, to process the payment.
• Service providers that run this website: Google Firebase (database), Cloudflare (payment server), Cloudinary (product images) and GitHub Pages (website hosting). They store or process data only to provide their service to us.
• WhatsApp (Meta): when we message you or you message us on WhatsApp, WhatsApp's own privacy policy applies to that chat.
• Government or legal authorities: only when the law requires it, or to protect our rights or prevent fraud.

5. Information Stored on Your Device

The website saves a few things in your browser's local storage so it works faster and remembers you: your cart, wishlist, recently viewed products, your sign-in details (name and mobile number), and a copy of the product list. This stays on your device and you can clear it at any time from your browser settings. Clearing it signs you out and empties your cart. We don't use advertising cookies.

6. Storage & Security

Your information is stored with Google Firebase and our other service providers, whose servers may be located in India or other countries. All data travels over an encrypted (HTTPS) connection. Only the store's admin account can change products, points and order status, apart from the cancellation and return requests you make yourself. We take reasonable security steps, but no website can be 100% secure, so please contact us immediately if you notice anything suspicious on your account or orders.

7. How Long We Keep It

We keep order and payment records for as long as Indian tax and accounting laws require. We keep your account details and points while you use the store. If you ask us to delete your account, we delete or anonymise the details we're not legally required to keep.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• See the personal information we hold about you and who we have shared it with.
• Correct or update wrong or outdated details (you can also edit your name, email and address yourself in My Account).
• Delete your information, except what we must keep by law.
• Withdraw your consent, for example to stop WhatsApp offer messages. This doesn't affect anything done before you withdrew it, and we may not be able to process new orders without the details needed to deliver them.
• Nominate someone to exercise these rights for you in case of death or incapacity.
• Raise a complaint with our Grievance Officer (below), and if you're not satisfied, with the Data Protection Board of India.

To make a request, message us on WhatsApp or email us from the mobile number or email on your account. We'll reply within 30 days.

9. Children

This website is meant for people aged 18 and over. Anyone under 18 should use it only with a parent or guardian, who places the order. We don't knowingly collect personal information from children without a parent's or guardian's consent.

10. Changes to This Policy

We may update this policy as the store or the law changes. The new version is always published on this page with a new "Last updated" date. For important changes, we'll also tell you on the website or on WhatsApp.