Last updated: 5 November 2026
FlushCart ("we", "us") runs the online store at flushcart.shop. This Privacy Policy explains what personal data we collect, why, who we share it with, and the rights you have under Indian law, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules. By using our store, you agree to this policy.
1. Data we collect
- Contact and delivery details: name, phone number, email address, shipping and billing address.
- Order details: products ordered, order value, payment method (e.g. Cash on Delivery, UPI, card), order and delivery status.
- Communications: messages you send us by email, phone, WhatsApp or our contact form.
- Device and usage data: IP address, browser and device type, pages viewed, products added to cart, collected through cookies and similar technologies.
We do not store your card, UPI PIN or net-banking details. Online payments are handled by secure, regulated payment gateways (such as Razorpay) and by Shopify.
2. Why we use your data
- To process, confirm, ship and deliver your orders, including confirming Cash on Delivery orders by call or message.
- To handle returns, refunds, replacements and customer support.
- To prevent fraud and misuse of our store.
- To send order updates by SMS, WhatsApp or email.
- To send offers and marketing messages, only where you have agreed. You can opt out at any time.
- To measure and improve our website and advertising.
- To comply with legal, tax and accounting requirements.
3. Who we share it with
We share only what is needed, with:
- Shopify, which hosts our store (see the Shopify Consumer Privacy Policy).
- Payment gateways, to process online payments.
- Courier and logistics partners and suppliers, to pack and deliver your order (name, address, phone).
- Advertising and analytics providers such as Meta (Facebook/Instagram) and Google, which use cookies, the Meta Pixel and similar tools to measure ads and show relevant ads.
- Government or law-enforcement authorities, when required by law.
We do not sell your personal data.
4. Cookies and ad tracking
We use cookies and the Meta Pixel to understand how visitors use our store and to measure our ads. You can block or delete cookies in your browser settings, and control ad personalisation in your Facebook/Instagram settings ("Off-Facebook activity" / "Your activity off Meta technologies").
5. How long we keep it
We keep order and invoice records for as long as Indian tax and accounting laws require (generally up to 8 years). Other data is kept only as long as needed for the purposes above, after which it is deleted or anonymised.
6. Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask what personal data we hold about you and how it is used;
- ask us to correct, complete or update it;
- ask us to erase it, where we are not legally required to keep it;
- withdraw your consent for marketing at any time;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with our Grievance Officer, and if unresolved, with the Data Protection Board of India.
To use any of these rights, email patrickatkick@gmail.com. We may need to verify your identity first.
7. Children
Our store is meant for people aged 18 and above. Anyone under 18 should use it only with the involvement of a parent or guardian. We do not knowingly collect data from children without such consent.
8. Security
We use reasonable security practices, and our store runs on Shopify's secure, encrypted (HTTPS) platform. No method of transmission over the internet is completely secure, but we work to protect your data.
9. Changes
We may update this policy from time to time. The latest version will always be on this page with the updated date.
10. Grievance Officer
- Grievance Officer, FlushCart
- Address: Surat, Gujarat 395003, India
- Email: patrickatkick@gmail.com
- Phone: +91 90919 26900 (Monday–Saturday, 10 AM–7 PM IST)
We acknowledge complaints within 48 hours and aim to resolve them within one month.