Last updated: 22 July, 2026
This Privacy Policy explains how YThready (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use https://ythready.com. We process personal data in line with the Information Technology Act, 2000, applicable rules, and the Digital Personal Data Protection Act, 2023 (DPDP Act), as applicable.
1. Data Fiduciary
- Entity: Ythready
- Trade name: YThready
- Address: VPO Dialpura, SAS Nagar (Mohali), 140601
- Email: privacy@ythready.com
- Phone: +91-8360718656
2. Personal data we collect
- Identity & contact: name, email, phone, billing/shipping address
- Account data: login credentials (hashed), order history, wishlist (if enabled)
- Transaction data: order ID, products, amounts, GST invoice details, payment status
- Payment data: processed by PayU; we receive payment confirmation/reference — not full card numbers
- Shipping data: shared with Shiprocket / couriers for delivery & tracking
- Technical data: IP address, browser/device info, cookies, pages visited
- Communications: emails, WhatsApp/SMS (if you opt in), support tickets, reviews
3. Purpose of processing
- Process, fulfil, and deliver orders; generate invoices
- Communicate order status, shipping updates, and customer support
- Process payments, refunds, chargebacks via PayU
- Prevent fraud, secure the website, and comply with law
- Improve website performance and shopping experience
- Send promotional messages only if you consent / have not opted out (as required by law)
4. Legal basis / consent
We process data for legitimate use in performing your contract (order fulfilment), complying with law (GST, consumer complaints), security, and where required, with your consent (e.g., marketing). You may withdraw consent for non-essential processing as permitted under the DPDP Act, without affecting lawfulness of prior processing.
5. Sharing of data
We share data only as needed with:
- PayU — payment processing, fraud checks, refunds
- Shiprocket and courier partners — shipping, tracking, delivery attempts
- Hosting, email, SMS/WhatsApp, analytics providers — site operations
- Professional advisers / auditors — where legally required
- Government / courts / regulators — when required by law
We do not sell your personal data.
6. Cross-border transfer
If any processor stores data outside India, we will ensure transfers comply with applicable Indian law and contractual safeguards.
7. Retention
We retain order, invoice, and tax records as required under Indian tax and commercial law (typically several years). Account and support data are kept while your account is active and for a reasonable period thereafter for disputes, fraud prevention, and legal compliance. Marketing preferences are retained until you unsubscribe.
8. Security
We use reasonable technical and organisational measures (HTTPS, access controls, reputable payment partners). No method of transmission or storage is 100% secure.
9. Your rights
Subject to applicable law, you may request access, correction, updating, or erasure of personal data, withdraw consent for marketing, and raise a grievance. Contact: privacy@ythready.com. For unresolved issues, use our Grievance Redressal Policy. You may also have rights to approach the Data Protection Board of India when operational under the DPDP Act.
10. Children’s data
Our store is not directed at children under 18. We do not knowingly collect personal data from minors. Parents/guardians should contact us to delete any such data.
11. Cookies
We use cookies and similar technologies for essential site functions, cart/checkout, security, and (if enabled) analytics/marketing. See our Cookie Policy. You can control cookies via browser settings; some features may not work if essential cookies are blocked.
12. Third-party links
Our site may link to third-party sites (e.g., courier tracking). Their privacy practices are their own.
13. Changes
We may update this Policy. Material changes will be reflected by updating the “Last updated” date and, where appropriate, additional notice on the website.
14. Contact & grievance
Privacy queries: privacy@ythready.com | +91 8360718656
Grievance Officer: See Grievance Redressal Policy for name, contact, and timelines (acknowledgement within 48 hours; resolution within one month as per E-Commerce Rules).