Privacy Policy

This policy explains what data SastaQ collects, why, how we keep it safe, and the choices you have.

Last updated: 28 July 2026

Template — review with legal counsel and align with the DPDP Act, 2023 before publishing.

Data we collect

  • Account data: name, email, phone number and password (stored hashed).
  • Order data: products purchased, amounts, invoices and delivery details.
  • Payment data: processed by Razorpay; we store transaction references, not full card numbers.
  • Usage data: device, browser, IP address and interactions, used to secure and improve the service.
  • KYC data (sellers): identity and business documents required to verify sellers.

How we use your data

  • To create and manage your account and fulfil orders.
  • To process payments, prevent fraud and resolve disputes.
  • To provide support and send transactional and, where permitted, marketing communications.
  • To comply with legal, tax and regulatory obligations in India.

Cookies

We use essential cookies for authentication and security, and optional analytics cookies to understand usage and improve the product. You can control non-essential cookies through your browser settings; disabling essential cookies may break core functionality such as staying signed in.

Payment processors

Payments are handled by Razorpay, a PCI-DSS compliant payment gateway. Card and banking details are entered on Razorpay's secure systems and are not stored on SastaQ's servers. Razorpay processes this data as an independent processor under its own privacy terms.

Storage & security

Data is stored on secured servers with access controls, encryption in transit (HTTPS) and encryption of sensitive fields at rest. We retain personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised.

Your rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

  • Access and request a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data, subject to legal retention requirements.
  • Withdraw consent for optional processing such as marketing.

To exercise any of these rights, email us at support@sastaq.com.

Contact

For privacy questions or grievances, contact our team at support@sastaq.com. We aim to respond within 30 days.