Data Deletion Policy

What personal data we hold

• Account & contact details — Name, email address, mobile number, and delivery addresses provided when you place an order or create an account.
• Order history — Items purchased, quantities, prices, applied coupons, payment method, and order status.
• Payment references — Transaction IDs and gateway references (we do not store full card or UPI details on our servers).
• Communication records — Support messages, return/refund requests, and enquiry history.
• Session & analytics data — Browser session data, cart state, and anonymised usage data used to improve the website.

How to submit a deletion request

Send an email to [email protected] with the subject line "Data Deletion Request" and include:

• Your full name as used on the account or order.
• The email address or mobile number associated with your account or orders.
• Any order IDs you wish to specifically reference (optional).

We may ask for identity verification before processing the request to protect your data from unauthorised deletion.

What gets deleted

• Your account profile, login credentials, and saved addresses.
• Wishlist items, loyalty points balance, and personalised preferences.
• Marketing preferences and newsletter subscription.
• Support ticket history and communication logs not required for compliance.
• Any data linked to third-party platforms (e.g. Facebook/Meta) that was collected through our integrations — we will also submit deletion confirmation to those platforms where applicable.

What we are required to retain

Certain data must be kept to comply with Indian law and legitimate business obligations even after a deletion request:

• Financial & tax records — Invoice amounts, GST details, and transaction references must be retained for a minimum of 8 years as required under the Income Tax Act and GST regulations.
• Fraud & dispute records — Data needed to resolve open disputes, chargebacks, or fraud investigations.
• Legal obligations — Any data required to respond to valid legal requests, court orders, or regulatory enquiries.

Where possible, retained data will be anonymised so it is no longer linked to your identity.

Processing timeline

• Requests are acknowledged within 2 business days of receipt.
• Deletion is completed within 7 business days of identity verification.
• You will receive a written confirmation once deletion is complete.
• Complex requests involving multiple data sources may take up to 30 days — we will keep you informed throughout.

Facebook / Meta data deletion

If you used Facebook Login or interacted with our Meta Pixel, you can also request deletion directly through Facebook:

• Go to Facebook Settings → Apps and Websites and remove Okhliwali from connected apps.
• Send us an email at [email protected] — we will confirm removal of any associated data on our side.

After receiving your request we will send a deletion confirmation callback to Meta within the required timeframe.

Effects of data deletion

• Your account and login access will be permanently removed.
• Order history will no longer be accessible through your account.
• Loyalty points and store credit will be permanently forfeited.
• Active orders already placed will still be fulfilled to avoid disruption — only future data collection will stop.
• Deletion cannot be undone. A new account would need to be created if you wish to shop with us again.