Privacy Policy

The short version

We collect the bare minimum needed to ship your Dropkyd and (if you opt in) tell you when a new drop lands. We don't sell your data. We don't run third-party ad trackers. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and the EU GDPR for international visitors.

Who is the data fiduciary

Adalwin Commerce LLP (operating the Dropkyd brand), part of Adalwin Group, with studios in Pune and Gurgaon, India, acts as the data fiduciary for the personal data we handle. Email hello@dropkyd.com for any data-related request.

What we collect, and why

• Order details — name, email, phone, shipping address, items ordered. Used to fulfil and ship your order.
• Payment data — handled entirely by Razorpay. We never see or store your full card or UPI details.
• Email (newsletter) — only if you opt in. Used to send drop alerts and order updates. Unsubscribe in one click from any email.
• Site analytics — anonymised page-view data (no personal identifiers, no third-party ad trackers) so we know which pages people use most.
• Support requests — when you email us, we keep the thread to follow up.

Who we share data with (and why)

• Razorpay — to process payments.
• Shipping partners (DTDC, Delhivery, Bluedart, DHL Express for international) — to deliver your order.
• Brevo — to send transactional and (opt-in) marketing email.
• Vercel — to host this website and process server logs.

We do not sell your personal data, ever. We do not share it with advertisers or data brokers.

How long we keep data

• Order records — 7 years (Indian tax compliance).
• Newsletter subscribers — until you unsubscribe.
• Support tickets — 2 years from the last reply.
• Site analytics — 14 months, then aggregated.

Your rights under DPDP / GDPR

You can ask us at any time to:

• Access the personal data we hold about you.
• Correct anything that's wrong.
• Erase your data (subject to tax-record retention).
• Withdraw consent for marketing emails.
• Port your data to another service.

Send any of these requests to hello@dropkyd.com. We respond within 30 days as required by DPDP.

Cookies

We use a single first-party cookie to remember your day/night theme preference. We do not use third-party advertising or behavioural tracking cookies on this site. Cart and session state are stored in your browser's local storage and never sent to third parties.

Children

Dropkyd products are designed for ages 14+. We do not knowingly collect personal data from children under 14. If you believe a child has provided us data, write to hello@dropkyd.com and we'll delete it.

Security

All traffic to dropkyd.com is encrypted via TLS 1.3. Payment processing happens on Razorpay's PCI-DSS-certified infrastructure. Our admin systems are protected by HTTP Basic Auth and Vercel Deployment Protection.

Updates

We may update this policy from time to time; the version in force is the one on this page. Major changes will be announced via email to subscribers.