Policies
Privacy Policy
Last updated: 1 July 2026
What we collect
Account details (name, email, phone), order and delivery information, payment metadata (never full card numbers — those stay with our PCI-DSS compliant payment partners), and browsing behaviour on our site (pages viewed, products added to cart).
How we use it
To fulfil orders, provide support, personalise your experience, and — only if you opt in — send you drop alerts and offers. We never sell your personal data to third parties.
Data retention & your rights
Order records are retained as required by applicable tax and commerce law. You can request a copy of your data or ask us to delete your account and associated personal data anytime by emailing care@khush.in. We respond within 30 days.
Security
All traffic is encrypted with TLS. Payments are processed by Razorpay/Stripe under PCI-DSS. Internal access to customer data is role-restricted and logged.