Privacy Policy

1. Introduction

WoodCharcoal.in ("we", "us", "our") — operated by Agochar Tech LLP — respects your privacy. This policy explains what personal information we collect when you visit the website or place an order, how we use it, and the rights you have under India's Digital Personal Data Protection Act (DPDP Act, 2023) and, for buyers in the EU/UK, the GDPR.

2. Information we collect

2.1 Information you give us

• Name, email, phone, billing / shipping address when you place an order or submit a wholesale inquiry.
• Company name and GSTIN when you submit a wholesale inquiry.
• Account credentials if you create an account.
• Messages you send us via the contact form, WhatsApp or email.

2.2 Information we collect automatically

• Device type, browser, screen resolution, operating system.
• Pages viewed, time on page, referral source (via Google Analytics 4).
• Anonymised session recordings and heatmaps (via Microsoft Clarity) — used to improve UX; no keystrokes in password fields are captured.
• IP address and approximate location (for fraud prevention and shipping quotes).

2.3 Payment data

We never store your card number, CVV or UPI PIN. Payments are processed by Razorpay, which is PCI-DSS Level 1 compliant. We receive only a transaction ID, amount, last-4 of the card and payment status.

3. How we use your information

• To process orders, send order confirmations, and handle shipping.
• To generate GST invoices (legal requirement under CGST Act, 2017).
• To respond to inquiries and customer support tickets.
• To send marketing emails (only if you've opted in via newsletter or account preference).
• To improve our products, services and website.
• To prevent fraud and enforce our Terms & Conditions.

4. Cookies

We use the following cookies:

• Strictly necessary: cart session, auth session, CSRF token. Always on.
• Analytics (opt-in): GA4, Microsoft Clarity. Disabled until you accept the cookie banner.
• Marketing (opt-in): Meta Pixel, Google Ads conversion. Disabled by default.

You can change your cookie preferences at any time via the "Cookie settings" link in the footer.

5. Sharing your information

We share data only with vendors strictly needed to fulfil your order:

• Razorpay — payments
• Shiprocket — shipping and tracking
• ZeptoMail (Zoho) — order confirmation emails
• Zoho Campaigns — only if you've opted into the newsletter
• Hosting / infrastructure — Vercel (frontend), Railway (Medusa backend), Supabase (database), Cloudflare (CDN / WAF)
• Tax authorities — as required by Indian tax law

We never sell your data.

6. Data retention

• Order records: 8 years (required under CGST Act, 2017 §36).
• Account data: until you delete your account (or 3 years of inactivity).
• Analytics data: 14 months (GA4 default).
• Marketing contact list: until you unsubscribe.

7. Your rights (DPDP Act + GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for marketing communications.
• Lodge a complaint with the Data Protection Board of India or, for EU residents, your local supervisory authority.

To exercise these rights, email hello@woodcharcoal.in with "DPDP request" in the subject. We will respond within 30 days.

8. International transfers

Data is processed primarily in India. Some vendors (Vercel, Cloudflare) may process data in the US / EU under Standard Contractual Clauses.

9. Children

The site is not directed at individuals under 18. We do not knowingly collect data from children.

10. Changes to this policy

We'll update this page and change the "Last updated" date when the policy materially changes. Significant changes will be announced via email to account holders.

11. Contact

Data Protection Officer: hello@woodcharcoal.in
Agochar Tech LLP, Rajkot, Gujarat, India