This policy explains what personal data Benka (“Benka”, “we”, “us”) collects when you visit benka.in, place an order or contact us, why we use it, and the choices you have. We process personal data under the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them.
What we collect
- Contact and delivery details: your name, phone number, email address and delivery or billing address.
- Order details: the products you buy, chosen colours, gift notes and order history.
- Payment status: whether a payment succeeded and a transaction reference. Card, UPI and bank details are entered on the payment provider’s secure page. We never see or store them.
- Messages: anything you send us on WhatsApp, by email or through our forms, including photos of a damaged item.
- Account details: if you create an account, your login email and password (stored in encrypted form).
- Technical data: basic device and browser information, IP address and cookies needed to run the cart and checkout.
We only collect what we need. We don’t collect sensitive data such as health or financial account information.
Why we use it
- To make, pack, ship and deliver your order, and to keep you updated about it.
- To answer questions, handle exchanges, refunds and complaints.
- To meet legal duties, such as keeping tax and accounting records.
- To prevent fraud and keep the website secure.
- To send you news about collections and festive pre-orders, only if you’ve asked to receive them. You can opt out at any time.
We process your data on the basis of the consent you give when you place an order, create an account or message us, and for the legitimate uses allowed under the DPDP Act, such as fulfilling a purchase you’ve asked for or complying with the law.
Who we share it with
We don’t sell or rent your personal data. We share only what’s needed with:
- Courier and logistics partners, to deliver your parcel (name, phone, address).
- Payment providers authorised by the Reserve Bank of India, to process payments and refunds.
- Website hosting and IT service providers, who store data on our behalf under confidentiality obligations.
- WhatsApp (Meta), when you choose to message us there. Their own privacy policy applies to that platform.
- Government authorities, when we’re required to by law.
Some of these providers may store data on servers outside India. Where this happens, we only use providers that protect data adequately, and we follow any restrictions notified by the Government of India.
How long we keep it
We keep order and invoice records for as long as tax and accounting laws require. We keep other personal data only while it’s needed for the purposes above, then delete it or make it anonymous. If you close your account, we delete your account data except what we must keep by law.
Your rights
Under the DPDP Act, you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete, update or erase your data;
- withdraw your consent at any time. This won’t affect anything we did before you withdrew it, but we may no longer be able to fulfil an open order;
- nominate another person to exercise your rights if you die or are unable to do so;
- raise a grievance with us, and if you’re not satisfied with our response, complain to the Data Protection Board of India.
To use any of these rights, email our Grievance Officer (details below). We’ll respond within the time the law requires.
Cookies
We use essential cookies to keep items in your bag, run checkout and keep you signed in. These are needed for the shop to work. We don’t currently use advertising cookies. If we add analytics or marketing tools in future, we’ll update this policy and ask for consent where required.
Children
Our website is meant for adults. If you’re under 18, please use it with a parent or guardian, who must place the order. We don’t knowingly collect children’s data without verifiable parental consent, and we don’t track or target ads at children.
Security
Our website uses HTTPS encryption, and access to customer data is restricted to people who need it to fulfil orders. We follow reasonable security practices under the Information Technology Act, 2000. No system is completely secure, but we’ll inform you and the authorities as required by law if a breach affects your data.
Grievance Officer
Grievance Officer, Benka
Email: sarikasingh7782@gmail.com
Phone: +91 98203 03676
Address: available on request
We acknowledge complaints within 48 hours and aim to resolve them within one month.
Changes to this policy
We may update this policy as our services or the law change. The “last updated” date at the top shows when it was last revised. If a change is significant, we’ll highlight it on the website.