Privacy Policy

Baba Babucha is a brand of Sendroid Overseas Pvt Ltd ("we", "us", "our"). This policy explains what personal data we collect when you visit babababucha.com or place an order, why we collect it, who we share it with, and the rights you have. It is written in line with India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules made under it.

1. Who is responsible for your data

Sendroid Overseas Pvt Ltd is the “Data Fiduciary” for personal data collected through this website. Our details:

• Business name: Sendroid Overseas Pvt Ltd
• Address: Sendroid HQ, Treasure Fantasy, Indore, Madhya Pradesh, India
• Email: support@babababucha.com
• Phone: +91 90390 79660
• GSTIN: 23ABFCS5387R1ZI

2. Personal data we collect

Data you give us when you order

• Full name, mobile number and delivery address (address, landmark, city, state and PIN code).
• Email address, if you choose to provide it.
• Messages you send us, such as support requests, along with any photos you share for a replacement.

Payment information

Payments are processed entirely by Razorpay Software Pvt Ltd, a payment aggregator regulated by the Reserve Bank of India. We receive only a payment reference, the payment status and the method used. We never see, receive or store your card number, CVV, UPI PIN, net-banking password or similar credentials.

Data collected automatically

• Cart and checkout details are saved in your own browser (local and session storage), so your selection survives a page refresh. They stay on your device.
• Campaign information: if you arrive through an advertisement, the campaign parameters in the link (such as utm_source or fbclid) are stored with your order so we can tell which ads work.
• Technical data such as IP address and browser type is processed by our hosting provider to deliver the website securely and prevent abuse.
• Order confirmation cookie: a secure, essential cookie that lets only the device that placed an order view its confirmation page.

3. Advertising measurement (Meta Pixel), only with your consent

We would like to measure how our Facebook and Instagram ads perform. Before you choose, the Meta Pixel is not loaded and nothing is sent to Meta. If you tap Accept:

• The Meta Pixel records events such as page views, adding to cart, starting checkout and completed purchases, together with your browser’s user agent, IP address and Meta cookies.
• After a verified purchase, we may also send that purchase to Meta from our server (Conversions API), with your phone number, email, city, state and PIN code in hashed form. Hashing irreversibly encodes the data before it leaves our systems.

If you tap Decline, none of this happens and the website works exactly the same. You can change your choice at any time with Cookie preferences in the footer. Meta’s own use of this data is governed by Meta’s privacy policy.

4. Why we use your data (purpose and legal basis)

• To fulfil your order: processing payment, packing, shipping, replacements, refunds and customer support. You provide this data voluntarily when you place an order, for this purpose.
• To meet legal obligations: tax invoices, GST and accounting records, and responding to lawful requests from authorities.
• To keep the site secure: preventing fraud, payment abuse and misuse.
• To measure advertising: only with your consent, as described in section 3.

We do not use your data for automated decisions that affect you, and we do not sell your personal data.

5. Who we share data with

We share personal data only as needed for the purposes above, with:

• Razorpay, to process payments and refunds.
• Delhivery, our courier partner, to deliver your order (name, phone number and address).
• Supabase, which hosts our order database, and our website hosting provider, as data processors acting on our instructions.
• Meta Platforms, for advertising measurement, only with your consent.
• Government or law-enforcement authorities, where required by law.

Some of these providers may process data on servers outside India. Where they do, it is done in accordance with the DPDP Act and any restrictions notified by the Government of India.

6. How long we keep data

We keep order and invoice records for up to 8 years, as required for statutory books of account and GST records. Other personal data is deleted or anonymised once it is no longer needed for the purposes described in this policy.

7. How we protect your data

The website is served only over encrypted HTTPS connections. Order data is stored in a database that cannot be accessed from the public website, and only our server can read it. Payment credentials are handled exclusively by Razorpay. No system is perfectly secure, but if a personal-data breach occurs we will notify affected customers and the Data Protection Board of India as the law requires.

8. Your rights

Under the DPDP Act you have the right to:

• access a summary of the personal data we hold about you and how it is processed;
• correct, complete or update inaccurate data;
• request erasure of your data. Some order records must legally be retained, as described in section 6;
• withdraw consent for advertising measurement at any time, as easily as you gave it;
• nominate another person to exercise these rights on your behalf in case of death or incapacity; and
• have your grievances addressed.

To exercise any of these rights, email support@babababucha.com from the email address, or quoting the mobile number, used for your order. We respond within 30 days.

9. Grievance officer

Anjan Shrivastava, Sendroid Overseas Pvt Ltd
Email: support@babababucha.com
Phone: +91 90390 79660
Address: Sendroid HQ, Treasure Fantasy, Indore, Madhya Pradesh, India

We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

10. Children

This website is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. Significant changes will be highlighted on this page.

Questions? See our Contact page.