Privacy Policy

Last updated: October 2026

Six Yard Drapes (Parijat, 3K/67, Bariatu Housing Colony, Ranchi, Jharkhand 834009) runs this website and our shops. This page explains what we collect when you shop with us, why, who else sees it, how long we keep it, and what you can ask us to do with it.

What we collect

When you place an order

Your name, phone number, email address and delivery address, what you bought, how you paid, and any note you add at checkout.

When you choose tailoring

The measurements you enter for blouse stitching, or the fact that you asked us to call you for them. We keep them with your order so the work can be done and checked.

When you create an account

Your name, email, and phone number if you add one. Your password is never stored as you typed it; we keep only a scrambled version that can check it but can't be turned back into it. Your account also holds any addresses you save and your order history.

When you sign in with a code

We email you a one-time code. We store only a scrambled copy of it, and clear old codes out once they have expired.

When you write a review

Your name and email. The name appears with your review; the email is never shown to anyone.

When you save pieces

The pieces you mark with the heart. Signed in, they're kept with your account so they follow you to any device. Signed out, they stay in your own browser and we don't see them.

When you ask us to tell you about stock

Your email address and the piece and size you want. We email you once when it's back, then delete the request.

When you buy in one of our shops

Only what you choose to give us for the invoice: your name, phone number or email.

When you pay

Payments are handled by Razorpay. We never see or store your card number, CVV, UPI PIN or bank login. Razorpay tells us only whether the payment went through, with a reference number.

When you visit the site

Like every website, ours is served by companies that keep logs of each visit, including your IP address and browser. We also use your IP address for a short time to stop too many sign-in or order-tracking attempts coming from one place. We don't use advertising or analytics trackers.

Why we use it

• To take payment, pack and deliver your order, and do any tailoring you asked for
• To send the shop nearest you that has the piece in stock, which means looking up where your address is
• To email your order confirmation, invoice, shipping updates, refunds and sign-in codes
• If you start paying online and don't finish, to send one reminder, usually the next morning, with a link back to your bag. Only one, and none if you paid or ordered again
• To email you when a piece you asked about is back in stock
• To issue invoices and keep accounts, as the law requires
• To handle returns, refunds and questions you send us
• To keep your account secure and stop fraud and misuse of discount codes

We don't send marketing emails, and we never sell or rent your details to anyone.

Cookies and storage on your device

• Sign-in: if you sign in, a cookie keeps you signed in for up to 30 days, or until you sign out.
• Your bag and PIN code: stored in your own browser, so your bag survives a refresh and delivery dates show without retyping your PIN code.
• Saved pieces: if you aren't signed in, your hearts are kept in your browser. When you sign in, they move to your account and the browser copy is cleared.
• Measurements: kept in the browser tab you're checking out in, and cleared once your order is placed.
• Cloudflare: the network our site runs through may set its own cookie to tell real visitors from automated traffic.

There are no advertising or tracking cookies.

Who we share it with

Each of these gets only what it needs for its part of the job:

• Razorpay (payments, India): your name, email, phone and the amount, to take the payment.
• Shiprocket and its courier partners (delivery, India): your name, phone, delivery address and what's in the parcel. When you check a delivery date, only your PIN code.
• Resend (email, servers in Japan): your email address and the email we're sending you.
• Vercel (website hosting, Singapore) and Neon (the database where orders and accounts are kept, Singapore).
• Cloudflare (domain and network): every visit to the site passes through it.
• GitHub (backups, United States): a copy of the database is made every night and locked with a password before it leaves, so GitHub holds it but can't read it.
• OpenStreetMap (maps): your delivery address, without your name or contact details, to find our nearest shop. The map on our Visit Us page also loads from OpenStreetMap.
• Our shops: the shop that packs your order sees the order, your delivery details and any measurements.
• Government or courts, if the law requires us to share something.

Some of these companies store data outside India, mainly in Singapore, Japan and the United States. Your details travel to them over encrypted connections.

How long we keep it

• Orders and invoices: for as long as Indian tax and accounting law requires us to keep them
• Your account: until you ask us to close it
• Sign-in codes: cleared out once expired. Sign-in sessions: up to 30 days
• Reviews: until you ask us to remove yours
• Saved pieces: until you remove them or close your account
• Requests to hear about stock: until we've emailed you, and never more than 6 months
• Nightly backups: each one is deleted after 10 days

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• Tell you what personal details we hold about you and who we've shared them with
• Correct or update them (you can change your name, phone and addresses yourself in My Account)
• Delete them, or close your account. We'll delete everything we're allowed to; invoices for past orders have to be kept for tax reasons
• Name someone to act for you if you're unable to

Email [email protected] from the address on your account or order, so we know it's you. We aim to reply within 7 working days. If you're not happy with our answer, you can complain to the Data Protection Board of India.

Keeping it safe

Your details travel over encrypted connections, passwords are stored only in scrambled form, backups are encrypted, and each of our shops can see only the orders it is sending. No system is perfect, but if something ever went wrong that affected your details, we would tell you.

Children

This site is meant for adults. If you're under 18, please ask a parent or guardian to order for you.

Changes to this policy

If we change how we use your details, we'll update this page and the date at the top.

Grievance Officer

Neepa Das
[email protected] · 9471530451