Privacy Policy

What we collect

We collect the details needed to run your account and orders: contact details, names and delivery addresses, items ordered, payment references and delivery records. We also keep support messages, return evidence, saved items and preferences you provide. Refunds may require your UPI ID or bank details. Account and security records can include verification status, IP address, browser, device information and signed-in activity. When you create an account, we also record your Terms agreement and Privacy acknowledgement, their versions, the time and the request’s IP address as evidence of that choice. This record is restricted to the Super admin; it is not marketing permission.

How we use it

We use relevant information to verify accounts, process orders, arrange delivery and refunds, answer questions, protect the store and improve the shopping experience. We explain the purpose when requesting details, including using your phone or email to send a verification code. Optional promotional emails are separate from service and security messages. You do not need to subscribe to marketing to create an account or shop. Agreeing to our Terms or acknowledging this policy does not subscribe you to marketing or give blanket permission for unrelated uses of your information.

Verification and service providers

We use service providers to deliver verification codes and emails, arrange shipping, host the website and protect it from misuse. We share information needed for those services, such as your phone number for OTP delivery and your delivery details with shipping partners. Phone codes may arrive through MiniMoth by WhatsApp or SMS. Shipping may involve Shiprocket and couriers. Website requests also involve hosting, email, security and external font services. Some providers may process information outside India.

Cookies and account security

We use cookies and browser storage to keep you signed in, support shopping and navigation, and protect your account. Blocking or clearing them may affect these features. We store password hashes and passkey public credentials, not the fingerprint, face scan or device PIN used to unlock a passkey. No online service can guarantee complete security.

Keeping and deleting information

We retain information for account services, orders, refunds, security, disputes and applicable legal needs. There is no single published deletion period. Account archiving disables access but preserves identity and historical records; it is not complete deletion. Contact us to request correction, closure or deletion, and we will explain any information that must remain.

Your choices and contact

You can manage supported profile details and email preferences in your account. For access, correction, deletion, consent withdrawal or a privacy complaint, email [email protected]. We may need limited information to confirm account ownership; never send us a password or OTP. You may withdraw permission for consent-based processing by contacting us. This does not undo prior lawful processing; if details are necessary for a service, withdrawal may prevent us from continuing that service. Marketing can be stopped through available email preferences, an unsubscribe link where provided, or by emailing us, without cancelling an order.

Only Her is based in Aligarh, Uttar Pradesh, India. We handle requests and complaints under applicable Indian law. The Digital Personal Data Protection Act, 2023 and Rules, 2025 have phased commencement. As relevant provisions take effect, applicable rights include information about processing, correction and erasure, grievance redressal and nomination. Contact us to raise a concern first; rights and remedies available under law are not limited by this policy. We do not represent a website notice as proof of complete legal compliance.

Younger visitors and updates

Younger visitors may browse; a parent or guardian should manage the account and place orders. We do not provide a dedicated parental-consent signup process. Contact us about a child’s information so we can review it. We may update this Privacy Policy from time to time as our services or applicable requirements change. Please review it periodically. The “Last updated” date shows when it was revised.