Privacy Policy

caseorbit ("we", "us", "our") operates caseorbit.in. This policy explains what personal information we collect, how we use it, and the choices you have. We're a small studio in Mumbai — we treat your data like we'd want ours treated.

What we collect

When you place an order or create an account we collect:

• Your name, email address and phone number
• Your shipping address
• Order history and preferences
• Payment information is never seen or stored by us — it goes directly to our payment gateway (Razorpay) which is PCI-DSS certified. We only receive a payment identifier.

When you browse the site we log standard technical information (IP address, browser type, pages viewed) for security and troubleshooting. We do not use cross-site tracking cookies.

How we use it

• To process and deliver your orders
• To send order confirmations, shipping updates, and reply to your support enquiries
• To keep your account secure (rate limiting, fraud checks)
• To improve our products based on aggregate usage patterns

We never sell your personal data. We do not send marketing emails without your explicit consent.

Who we share it with

We share the minimum necessary data with the following service providers, all under written data-processing terms:

• Razorpay — payment processing (name, email, phone, order amount)
• Shiprocket and its courier partners — delivery (name, address, phone, order contents)
• Resend and Zoho Mail — sending transactional email
• Supabase — database + authentication hosting
• Vercel — website hosting

We disclose personal information to law-enforcement authorities only where legally required (a court order or valid summons under Indian law).

How long we keep it

• Order records: 8 years, to comply with GST and income-tax record-keeping rules
• Account data: until you request deletion (see below)
• Marketing consent records: until you unsubscribe

Your rights

You may at any time:

• Ask what data we hold about you (data-access request)
• Ask us to correct inaccurate data
• Ask us to delete your account and personal data (note: order records must be retained per tax rules)
• Opt out of any marketing communications

To exercise any of these rights, email hello@caseorbit.in from the email address on your account. We respond within 15 business days.

Children

caseorbitis not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we'll delete it.

Cookies

We use only essential cookies:

• Session cookies to keep you signed in
• Cart cookies to remember what you added
• Rate-limit cookies to protect against abuse

We do not use analytics or advertising cookies at this time.

Security

All traffic to our site is encrypted with HTTPS. Passwords are hashed (never stored in plain text). Payment details go directly to Razorpay and never touch our servers. Access to our production database is restricted to named administrators over multi-factor authenticated sessions.

No online service is perfectly secure. If you notice something suspicious, please tell us immediately at hello@caseorbit.in.

Changes to this policy

We'll update this page if practices change. Material changes are announced by email to registered customers at least 15 days before taking effect.

Contact

caseorbit
Mumbai, India
Email: hello@caseorbit.in