1. Who we are

Ottr ("we", "us") operates ottr.in and is the data fiduciary for personal data collected through this store. Questions about this policy go to [email protected].

2. What we collect

When you order

• Name, delivery address, email address and phone number
• Order contents and value
• Payment confirmation status — we never see or store your full card number, which is handled directly by our payment processor

When you contact us

• Your email address and whatever you choose to put in the message
• Order number, and any photos or video you send to support a warranty claim

Automatically

• Device and browser type, IP address, pages viewed and referring site
• Cookies, as described below

3. Why we use it

• To fulfil your order — process payment, ship it, and tell you where it is
• To support you — answer questions, handle returns, assess warranty claims
• To meet legal obligations — tax records, invoicing and statutory retention
• To improve the store — understand which pages are used and where people get stuck
• To send marketing, only if you have opted in. Every message has an unsubscribe link that works immediately.

4. Who we share it with

Only the parties needed to get you your order and run the business:

• Shopify, which hosts this store and processes orders
• Payment processors, who handle card, UPI and net-banking transactions
• Courier partners, who receive your name, address and phone number in order to deliver
• Email and analytics providers, where you have consented
• Government authorities, where we are legally required to disclose

We do not sell your personal data, and we do not share it with advertisers for their own purposes.

5. Cookies

Essential cookies keep your cart and session working and cannot be switched off without breaking the store. Analytics and marketing cookies are optional and set only with your consent, which you can withdraw at any time through the cookie preferences link in the footer or your browser settings.

6. How long we keep it

Order and invoice records are retained for eight years, as tax law requires. Support correspondence is kept for three years, so we can honour a two-year warranty and see the history of a repeat fault. Marketing contact details are kept until you unsubscribe. Analytics data is retained in aggregate.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• Tell you what personal data we hold about you
• Correct anything inaccurate or incomplete
• Erase your data, where we are not legally required to keep it
• Withdraw consent for marketing or optional cookies
• Nominate someone to exercise these rights on your behalf

Email [email protected]. We respond within 30 days. If you are not satisfied with our response you may complain to the Data Protection Board of India.

8. Security

The store runs over HTTPS and payment data is handled by PCI-DSS compliant processors. Access to customer data inside Ottr is limited to the people who need it to do their job. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

9. Children

This store is not directed at children under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, email [email protected] and we will delete it.

10. Changes

If we change this policy materially we will update the date below and, where the change affects how we use data you have already given us, tell you by email.

11. Contact

[email protected]

Draft pending legal review. Registered entity name, address, GSTIN and the named Grievance Officer required under the Consumer Protection (E-Commerce) Rules, 2020 to be inserted before launch.