Privacy Policy | Bag Haven

Last updated: March 31, 2026

1. Introduction

This Privacy Policy explains how SAHRAY PRODUCTION PRIVATE LIMITED ("we", "us", "our"), operating the website baghaven.store ("Bag Haven" or "Website"), collects, uses, stores, and protects your personal data. This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

2. Data We Collect

We collect the following categories of personal data when you use our Website:

Identity Data: Full name as provided during checkout
Contact Data: Email address, phone number, and delivery address
Order Data: Details of products purchased, order history, payment method chosen (COD or UPI), order amounts, and delivery status
Technical Data: IP address, browser type, device information, operating system, and pages visited (collected automatically via cookies and Google Analytics)
Communication Data: Messages sent through our contact form or email correspondence

We do not collect or store any financial data such as bank account numbers, UPI PINs, credit/debit card numbers, or payment credentials. All payment transactions are processed through our secure third-party payment gateway (MMADPay), and we do not have access to your payment credentials at any point.

3. How We Collect Your Data

We collect data through:

Direct interactions: When you place an order, fill out the contact form, or subscribe to our newsletter
Automated technologies: Cookies and analytics tools that automatically collect technical data when you browse our Website

4. Purpose of Data Collection

We use your personal data for the following purposes:

Processing and fulfilling your orders
Sending order confirmations, shipping updates, and delivery notifications via email
Responding to your inquiries and providing customer support
Improving our Website, products, and services
Analyzing Website traffic and usage patterns through Google Analytics (GA4)
Preventing fraud and ensuring website security
Complying with legal obligations under Indian law

5. Consent (DPDP Act 2023 Compliance)

By placing an order or submitting information through our Website, you provide your explicit consent for us to collect and process your personal data for the purposes stated above. You have the right to withdraw your consent at any time by contacting us at care@baghaven.store. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

6. Data Storage & Retention

Your personal data is stored on secure servers hosted by Hostinger, with data centers that employ industry-standard security measures. We retain your data for as long as necessary to fulfill the purposes outlined in this policy, typically:

Order data: Retained for a minimum of 8 years for compliance with tax and accounting regulations
Contact form submissions: Retained for 1 year from the date of submission
Technical/analytics data: Retained for 26 months (Google Analytics default)

7. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to any third parties. We may share your data with:

Payment gateway (MMADPay): To process UPI payment transactions
Courier/logistics partners: To deliver your orders (name, phone, address)
Google Analytics: Anonymized usage data for Website analytics
Legal authorities: If required by law, court order, or government request

8. Cookies

Our Website uses cookies and similar technologies for:

Essential functionality: Shopping cart data stored in your browser's local storage
Analytics: Google Analytics cookies to understand usage patterns

You can control cookies through your browser settings. Disabling cookies may affect certain Website functionality such as the shopping cart.

9. Data Security

We implement reasonable security practices to protect your personal data, including:

SSL/HTTPS encryption for all data transmitted between your browser and our servers
Secure database access with restricted credentials
No storage of payment card or UPI credentials (RBI tokenisation compliance)
Regular monitoring for unauthorized access or data breaches

10. Your Rights (Under DPDP Act 2023)

As a data principal, you have the following rights:

Right to Access: Request information about what personal data we hold about you
Right to Correction: Request correction of any inaccurate or incomplete personal data
Right to Erasure: Request deletion of your personal data, subject to legal retention requirements
Right to Withdraw Consent: Withdraw your consent for data processing at any time
Right to Grievance Redressal: File a complaint about how we handle your data
Right to Nominate: Nominate a person to exercise your rights in case of your death or incapacity

To exercise any of these rights, contact us at care@baghaven.store.

11. Children's Privacy

Our Website is not intended for children under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take immediate steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the Website after changes constitutes your acceptance of the updated policy.

13. Grievance Officer

In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of our Grievance Officer are:

Name: Vivek
Email: grievance@baghaven.store
Phone: +91 +91 9540082525
Address: GROUND FLOOR, DAULTABAD MAIN ROAD NEAR SAGAR PROPERTIES, DAULTABAD ROAD, DALUTABD FLYOVER, Gurugram, Gurugram, Haryana, 122001

Grievances will be acknowledged within 48 hours and resolved within 30 days.

14. Contact Us

Email: care@baghaven.store
Phone: +91 +91 9540082525
SAHRAY PRODUCTION PRIVATE LIMITED
GROUND FLOOR, DAULTABAD MAIN ROAD NEAR SAGAR PROPERTIES, DAULTABAD ROAD, DALUTABD FLYOVER, Gurugram, Gurugram, Haryana, 122001
GSTIN: 06ABJCS3918C1ZG