Manakrati (“we”, “us”, “our”) is a handcrafted goods studio run by Mansi. This policy explains what personal information we collect when you use our website or place an order, how we use it, and what rights you have.
1. Information we collect
We collect information you give us directly:
- Account data — name, email address and password when you register.
- Order data — shipping address, phone number, order contents and payment status.
- Payment data — payments are processed by Razorpay. We never see or store your card number, UPI credentials or net banking details. Razorpay may retain this data under their own privacy policy.
- Reviews — any review text, star rating or photos you submit against a product.
- Contact messages — name, email and message when you use our contact form.
- Wishlist — the products you save to your wishlist when signed in.
We also collect limited technical data automatically:
- A daily visit count (no IP address, no device fingerprint — just a total number).
- Product view counts — how many times a product page is opened.
We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking tools.
2. How we use your information
- To process and fulfil your orders, and send order confirmation and tracking emails.
- To create and manage your account.
- To respond to your enquiries and support requests.
- To improve our product pages (via aggregate view and sales counts only).
- To comply with legal and tax obligations under Indian law.
We do not sell, rent or share your personal information with any third party for their marketing purposes.
3. How we share your information
We share your data only where necessary to run the business:
- Razorpay — your name, email, phone and order amount to process payment. Governed by Razorpay's Privacy Policy.
- Courier partners — your name, phone and shipping address to deliver your order.
- Email service — your email address to send transactional emails (order confirmation, shipping notification). No marketing emails without your explicit consent.
4. Cookies
We use a single, strictly necessary cookie to keep you signed in. It is an httpOnly, SameSite=Lax session cookie that contains a signed token — not readable by JavaScript and not used for tracking. No third-party cookies are set on our site.
Your shopping bag is stored in your browser's localStorage, not a cookie. It is never sent to our servers until you check out.
5. Data retention
- Order records are retained for 7 years to comply with Indian GST and accounting requirements.
- Account data is kept for as long as your account is active. You may request deletion at any time (see section 6).
- Contact messages are kept for up to 2 years.
- Reviews are kept until you or we remove them.
6. Your rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — update incorrect or incomplete data via your account page, or by emailing us.
- Deletion — request that we delete your account and associated data. Note that order records may be retained for legal compliance.
- Portability — request your order and account data in a machine-readable format.
To exercise any of these rights, email us at manakratiforever@gmail.com. We will respond within 30 days.
7. Security
Passwords are hashed using bcrypt and never stored in plain text. All data is transmitted over HTTPS. Session tokens are signed, httpOnly cookies that expire after 30 days. Payment signatures are verified using HMAC-SHA256 before any order is marked as paid.
8. Children
Our website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a revised “Last updated” date. Continued use of the site after changes constitutes acceptance of the updated policy.