Privacy policy
Last updated 20 October 2026
We collect only what we need to answer you and to hand over your order: your name, your phone number and what you asked for. We do not sell it, we do not use advertising trackers, and we never see your bank or UPI details.
1. Who we are
Shreehari Fireworks (“we”, “the shop”) runs this website and the shop at Rajwadi Dhaba, Dehgam, Gandhinagar, Gujarat. We are the data fiduciary for the personal data described here, under India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
2. What we collect and why
- Pickup orders and reservation requests: your name, phone number, the items and quantities, and your preferred pickup date. We use these to prepare your order, contact you about it and hand it over at the counter.
- Contact form: your name, the phone number or email you give, and your message, so that we can reply.
- Payments: if you pay by UPI, your own UPI app and bank process the payment. We see only what reaches the shop's UPI app: the payer name or UPI ID, the amount, the transaction reference and your note. We never see your UPI PIN or bank account details.
- Page and product views: anonymous counts of which pages and products are viewed. These carry no IP address, no device identifier and no cookie.
We process this data because you give it to us to place an order, make a request or ask a question, and because tax and accounting law requires us to keep sale records.
3. What stays on your device
Your cart and your reservation list are saved in your browser’s local storage so they survive a reload. They are not sent to us until you place an order. Clearing your browser data removes them. We do not use advertising or tracking cookies.
4. Who we share it with
We do not sell or rent personal data. It is shared only with the service providers that run the website, solely to provide them: Supabase (database hosting) and Cloudflare (website hosting and security). Some of these providers may store data outside India under their own safeguards. We may also disclose data where the law or a lawful order requires it.
5. How long we keep it
- Reservation requests that are declined, expired, cancelled or never collected are deleted 90 days after they close.
- Paid orders become sale records and are kept for as long as GST and accounting law requires.
- Contact messages are kept only as long as needed to answer and follow up.
6. Your rights
You may ask us for a summary of the personal data we hold about you, to correct or complete it, or to erase it where we are not required by law to keep it. You may also withdraw consent for future processing and nominate someone to exercise these rights on your behalf. Contact us as below; we will reply within 30 days.
7. Security
Data is sent over encrypted connections, stored with access limited to shop staff who need it, and payment verification happens on our server, not in your browser. No system is perfectly secure; if a breach affects your data we will inform you and the Data Protection Board of India as the law requires.
8. Grievances and contact
For any privacy question, request or complaint, contact the shop owner as grievance officer: phone +91 81560 82422, email shreeharifireworks@gmail.com, or in person at the shop. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
This site is not directed at children; orders and requests must be placed by an adult. See also our terms of use.
9. Changes
We will post any change to this policy on this page with a new date. Material changes that affect an open order will be told to you before they apply.