Privacy policy

• Account details: your mobile number or email (used to log in with a one-time code), name, and optionally gender and date of birth.
• Delivery details: the addresses and contact numbers you save for delivery.
• Orders and activity: items you order, wishlist and bag, returns, and messages with our support team.
• Payments: payment status and reference numbers. Card, UPI and bank details are entered directly with our payment partner and are never stored by us.
• Device and usage: basic technical information such as browser type, pages visited and approximate location from your pincode, to keep the service secure and working well.

• To create your account, verify your identity with one-time codes, and keep your account secure.
• To process, deliver and support your orders, returns and refunds, including SMS, email and app updates about them.
• To show delivery estimates and cash on delivery availability for your pincode.
• To prevent fraud and misuse, and to comply with tax and legal requirements.
• To send offers and new collections, only if you have opted in. You can opt out at any time.

We never sell your personal data. We share only what is needed with trusted partners who help us run the store, under contracts that require them to protect it:

• Payment processing: Razorpay.
• Delivery: Shiprocket and its courier partners (name, phone and address for delivery).
• Messaging: SMS and email providers, for one-time codes and order updates.
• Hosting and security: cloud infrastructure located in India, and security services that protect the site from attacks.

We may also disclose information when required by law or to protect our customers and business from fraud.

• All connections to Udya are encrypted (HTTPS).
• Your phone number, email, date of birth and addresses are stored encrypted, and access within our team is restricted and logged.
• Staff accounts are protected with two-factor authentication.

We keep your account data for as long as your account is active. Order and invoice records are kept for up to 8 years, as required by Indian tax laws. When you delete your account, we remove your profile, saved addresses, wishlist and bag, and keep only the order records the law requires.

• Access: download a copy of your data from Account, Privacy & security, Download my data.
• Correction: update your profile and addresses anytime from your account.
• Erasure: delete your account from Account, Privacy & security, Delete my account.
• Withdraw consent: turn marketing messages off in your profile, or reply STOP to promotional SMS.
• Grievances: contact our Grievance Officer (details below).

We use essential cookies to keep you logged in securely and to remember your bag. These are required for the store to work. If we add analytics or advertising cookies in the future, we will ask for your consent first.

Udya is meant for adults. If you are under 18, please use the store with the involvement of a parent or guardian.

We may update this policy from time to time. The date at the top shows when it last changed. For significant changes, we will let you know by email or a notice on the site.

You can reach us through the Contact us page.

See also Grievance redressal.