Privacy Policy
How we collect, use and protect your personal information.
Updated 23 September 2026
REDYPLAST (“we”, “our”, “us”) values your privacy and is committed to protecting the personal information of visitors and customers of this website. This Privacy Policy explains what we collect, how we use and share it, how long we keep it, and the choices and rights you have over it.
By using this website you agree to the terms of this Privacy Policy.
1. Information we collect
We collect the following types of information.
a) Information you give us
When you place an order, sign in, or contact us:
- Name, mobile number and email address
- Delivery address, and billing address if different
- GSTIN and registered business name, if you order as a GST-registered business
- Order and payment history, and the invoices raised against your orders
- Anything you send us through an enquiry form, the chat assistant, or WhatsApp
b) Information collected automatically
When you use the website:
- IP address, used only to rate-limit abusive or automated requests
- Browser and device information
- Pages visited, and locally on your device: items in your cart, your wishlist and compare list, and products you recently viewed
2. How we sign you in
There is no password. Signing in sends a one-time code to your mobile number by SMS and WhatsApp at the same time, and you enter whichever arrives first. We do not see or store the code after it expires.
3. How we use your information
We use the information above to:
- Take, confirm, dispatch and invoice your orders, and process payments, refunds and returns
- Sign you in, and keep your account, addresses, wishlist and business details available to you
- Answer enquiries and chat questions, and respond to grievances
- Send order and delivery updates by SMS, WhatsApp and email
- Meet our obligations under GST and consumer-protection law
- Detect and prevent abuse of the website, such as automated or excessive requests
4. Payments
Card, UPI and net-banking payments are handled entirely by Razorpay, our payment gateway. We never see or store your card number, UPI PIN or banking credentials — Razorpay collects them directly and passes us only the outcome of the payment and a reference we use to match it to your order.
5. Who we share your information with, and why
We do not sell or rent your personal information. We share it only with the service providers who help us run this website and fulfil your order, each only for that purpose:
- Razorpay — to process payments
- Shiprocket, our courier and logistics partner — to deliver your order: your name, phone number and delivery address, what the order contains and weighs, whether it is prepaid, and for cash on delivery the amount to collect
- Our SMS and WhatsApp Business messaging providers — to send you the sign-in code and order updates
- Our transactional email providers — to send order and account emails
- Supabase — our database and authentication provider, which stores your account and order data
- Cloudflare — which hosts this website
- Google, whose Gemini model writes automated replies — to what you type into the chat on this website or in the app; to messages you send our WhatsApp number, including photos it describes and voice notes it transcribes; and in the help thread on one of your orders, to your message together with that order’s reference, dates, status, items, total, payment method, invoice number, return window and refunds, but never your name, address or phone number
6. How long we keep it
Orders and the tax invoices raised against them are kept for as long as GST law requires businesses to retain them — this is a statutory record, not a figure we choose, and it survives even if you delete your account. Your account profile, addresses and wishlist are kept until you delete your account or ask us to.
7. Cookies and local storage
Signing in sets a cookie that keeps your session active, and a second one holding only your initials and a colour, so the page header can show that you are signed in. There is a separate cookie for the admin panel if you have access to it. We do not use third-party advertising or analytics cookies.
Your cart, wishlist, compare list and recently viewed products are kept in your browser’s local storage, on your device, so they survive a page reload without an account. Clearing your browser’s site data removes them.
8. Your rights
Under India’s Digital Personal Data Protection Act, 2023, you have the right to:
- Access the personal information we hold about you — download it any time from Account → Privacy & data
- Correct inaccurate information — update your profile, addresses and business details directly in your account
- Erase your account and personal information — see “Deleting your account” below
- Withdraw consent and raise a grievance about how we handle your data — see our Grievance Officer page
9. Deleting your account
You can delete your account and its personal information yourself from Account → Privacy & data. This removes your login, saved addresses, wishlist and preferences immediately; past orders and their tax invoices are kept, because GST law requires the business to retain them regardless of a deletion request.
If you would rather we did it for you, email info@redyplast.com from your registered email address and we will remove your account within 30 days.
10. Data security
We use industry-standard technical and organisational measures — including encrypted connections and access controls on our database — to protect your personal information. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Children’s privacy
This website is not directed at children. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it.
12. Changes to this policy
We may update this Privacy Policy as our practices or the law change. Changes take effect when posted on this page with an updated date. Continued use of the website after a change means you accept the revised policy.
13. Grievances and contact
For a complaint about how we handle your personal data, or any question about this policy, contact our Grievance Officer — see the Grievance Officer page for the current contact details and our response timelines.
