Who we are
This policy covers harudvalley.com, run by Harud Valley, Baghwanpora, Srinagar, Jammu and Kashmir [To be confirmed by Harud Valley: the PIN code], India. It describes what the website actually does today. When that changes, we update this page.
For any question about your information, email harudvalley@outlook.com.
What we collect
- When you order: your name, email address, phone number and delivery address, any note you add, what you bought and what you paid. For a payment we keep the reference numbers Razorpay gives us, never your card or bank details.
- If you start checkout and do not finish: what you have typed into the checkout form so far (your name, contact details and address) is saved with your cart, so it is still there if you come back. Our team can see unfinished checkouts and may contact you to help you complete the order.
- If you create an account: your name, email address, phone number and password, the addresses and items you save, and when you signed up and last signed in.
- If you write a review: your rating, your review, the name you give and your email address. We also record the IP address and browser details the review was sent from, to help us spot spam.
- If you contact us: whatever you send us by phone, WhatsApp or email.
- How you found us: see Where your visit came from.
Where your visit came from
When you arrive, the site notes how you got here in a cookie that ends when you close your browser: whether you came from a search engine, a link on another site, a link tagged for a campaign, or directly; the address of the page that sent you; the first page you opened; when the visit started; and how many pages you have viewed.
If you place an order, this is saved with the order, together with whether you were on a phone or a computer. It tells us which links and searches bring customers. None of it names you.
Google Analytics
The site can use Google Analytics 4 to count visits. It runs only when we switch it on. [To be confirmed by Harud Valley: whether Google Analytics is switched on for this site]
When it is on, Google receives the pages you view, the products you add to your cart, and, when you buy, your order number, the order value and the products in it. It also receives details of your device and browser, works out your general location from your connection, and sets its own cookies. We never send Google your name, email address, phone number or address.
Google's use of this data is covered by Google's privacy policy.
How we use it
- To pack, send and deliver your order, and to contact you about it.
- To send the site's emails: your order confirmation, links to reset your password or confirm your email address, one reminder if a website order is left unpaid, and one request for a review after your order should have arrived.
- To help you finish an order you started.
- To handle cancellations, returns, refunds and complaints.
- To keep our sales and tax records.
- To see which pages and links bring visitors, and to protect the site from misuse.
The site sends no marketing emails. If you ask to join our WhatsApp harvest list, we add your number by hand and message you on WhatsApp.
Who on our team can see it
Only Harud Valley staff with their own sign-in to the shop's admin panel can see orders, unfinished checkouts and customer details.
Backups
Every night a copy of the shop's database, including customers' names, addresses and orders, is emailed as a compressed file to the owner's mailbox, so the shop can be restored if something goes wrong. Backups are kept there for [To be confirmed by Harud Valley: how long backups are kept in the owner's mailbox].
Keeping it safe
Your password is never stored as you typed it. We keep only a bcrypt hash of it, which cannot be turned back into the password, so nobody here can read it.
The sign-in cookie is encrypted. Payment details are handled by Razorpay and never reach our website. To slow down anyone guessing passwords, the site counts recent sign-in attempts from each IP address for a short time, in memory, without saving them.
No website can promise perfect security. If you think your account has been misused, change your password and tell us.
How long we keep it
- Unfinished carts, and anything typed at checkout with them, are deleted automatically 30 days after the cart was last used.
- Cookies: cart 14 days, sign-in up to 14 days, visit source until you close your browser.
- Orders and invoices: [To be confirmed by Harud Valley: how long order and invoice records are kept].
- Accounts: [To be confirmed by Harud Valley: how long an account is kept, for example until you ask us to delete it].
- Reviews: [To be confirmed by Harud Valley: how long reviews, and the IP address and browser details stored with them, are kept].
- Backups: [To be confirmed by Harud Valley: how long backups are kept in the owner's mailbox].
- Messages: [To be confirmed by Harud Valley: how long WhatsApp and email messages are kept].
Your choices
If you have an account, you can see your orders and change your details, addresses and password under My account.
You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it, by emailing harudvalley@outlook.com. There is no delete button on the site, so we do this by hand. [To be confirmed by Harud Valley: which records must be kept after a deletion request, and for how long]
You can block Google Analytics cookies in your browser settings.
Children
[To be confirmed by Harud Valley: the minimum age to use the site or place an order, and how information about children is handled]
Grievance officer
If a problem with an order has not been sorted out, email harudvalley@outlook.com with "ESCALATION" in the subject line and your order number in the message.
- Grievance officer
- [To be confirmed by Harud Valley: the grievance officer's name]
- Designation
- [To be confirmed by Harud Valley: their designation]
- Phone
- +91 60063 70782
- Address
- Baghwanpora, Srinagar, Jammu and Kashmir [To be confirmed by Harud Valley: the PIN code], India
We acknowledge a complaint within [To be confirmed by Harud Valley: the number of hours] and aim to resolve it within [To be confirmed by Harud Valley: the number of days] of receiving it.
Changes to this policy
When what the site collects, keeps or shares changes, we update this page and the date at the top.