Privacy Policy

Order details — your name, email, phone number and delivery address, plus GSTIN and business name if you request a GST invoice.

Your account — your email address (we sign you in with a one-time code; there is no password), your name if you give it, your saved addresses and your choice about hearing from us. If you sign in with Google, we receive only your name and email address.

Browsing basics — a cookie that keeps your bag together and, if you sign in, your account session. We do not run third-party advertising trackers.

To confirm, make and deliver your order; to send order updates and sign-in codes by email; to call you about paying for and delivering your order; to issue invoices; to match swatch credit to your later orders by the email you gave; to answer your questions; and to prevent fraud and abuse. We send news about new fabrics and offers only if you asked for them, and you can opt out any time in your account. We do not sell or rent your personal data to anyone.

Only what each partner needs to do its job: when online payment is available, our payment partner (Razorpay) processes the payment and we never see or store your card or UPI credentials — when you pay cash on delivery, the courier collects it and we keep only the payment record; couriers receive your name, address and phone to deliver the parcel; our own mills receive the order details needed to cut and make it; our email service (Resend) delivers order emails and sign-in codes; Google, only if you choose to sign in with Google; and our infrastructure providers (Vercel, Neon) host the website and database.

Order and invoice records are kept as long as Indian tax law requires. Everything else is kept only while you have an account or an open order with us.

You can ask us to correct or delete your personal data, or to export what we hold about you, by writing to support@thehofstore.co. We respond within 30 days. See also our contact page for the grievance contact under Indian consumer and IT rules.

Traffic is encrypted (HTTPS), payment credentials never touch our servers, and access to order data is restricted to the team that fulfils orders. No system is perfectly secure, but we keep the surface small: we simply don't collect what we don't need.

If this policy changes materially we will note it here with a new “last updated” date.