Privacy Policy

1. Information we collect

When you create an account, place an order or contact us, we collect the information needed to provide those services. This can include your name, email address, phone number, delivery and billing addresses, order history, selected products and variants, and support messages.

Return and replacement requests may include photographs and other information you provide about the issue. If a product requires a prescription, we collect the document you upload for review. Please provide only information relevant to your request and avoid uploading unrelated personal information.

Our services may also record technical information such as IP addresses, browser information, request logs and session identifiers to operate the website, diagnose errors and protect accounts.

2. How we use information

We use your information to manage your account, process orders and payments, arrange delivery, provide tracking, review prescriptions where required, handle returns, replacements and refunds, and respond to support requests.

We also use relevant information to send transactional messages, maintain financial and operational records, prevent misuse and meet applicable legal obligations. A purchase or support request does not by itself subscribe you to marketing emails.

3. Google sign-in and transactional email

If you choose Google sign-in, we receive basic account information, including your name, email address and profile image where provided, to identify or create your PETAPT account. Google sign-in is optional; you can use the email and password sign-in option instead.

PETAPT may use a business mailbox connected through the Gmail API to send password reset links, order updates and support messages. This connection is authorized by our administrator, not by customers. It does not give PETAPT access to customer Gmail inboxes. The mailbox integration requests permission to send email, not to read your messages.

4. Payments and service providers

Online payments are handled by the payment provider presented during checkout. We retain order and payment records such as the selected method, transaction references, amount and payment status. Card entry and authentication are handled by the provider; PETAPT does not collect or store your full card number or CVV in its checkout forms.

We share relevant information with providers that help operate the store, including payment gateways, shipping partners such as Shiprocket or India Post, hosting and storage services such as Railway and Supabase, and Google services used for sign-in and email delivery. Delivery providers receive the contact and address information needed to deliver your order.

These providers process information according to their roles and applicable terms. We may also disclose information when required by law or to address fraud, security incidents or lawful requests. We do not sell your personal information.

5. Cookies and local storage

With your permission, we use Google Analytics 4 to understand public-page visits and shopping activity, including product views, cart additions, checkout starts and verified orders. We do not send your name, email, phone, shipping address or payment credentials to Analytics. Optional analytics is disabled until you accept it. You can reset your choice by clearing browser storage for this site and reloading the page; the analytics choice will be requested again. Google processes analytics information under its own privacy terms; browser restrictions and consent choices may limit reporting.

We use session cookies and browser storage to keep you signed in, display account information and support shopping functions. A guest cart is stored server-side and linked to your shopping session cookie. When you sign in, eligible items are combined with your account cart. Guest carts are temporary and may expire with inactivity or session changes. Payment and sign-in providers may use their own cookies during their respective flows.

You can manage cookies and clear local storage through your browser. Disabling essential storage may prevent sign-in, checkout or other account features from working correctly. Clearing browser data does not delete your PETAPT account or stored orders.

6. Retention, security and processing locations

We keep information for as long as needed for its stated purposes, including fulfilling orders, resolving support and refund requests, maintaining required records and meeting applicable legal obligations. We do not apply a single retention period to every type of information.

We use safeguards such as access controls, password hashing and encryption for stored mailbox authorization tokens. No online service can guarantee absolute security. Keep your password private and contact us promptly if you suspect unauthorized account activity.

Our service providers may process or store information in India or other countries where they operate. Information shared with external providers is subject to their security practices and applicable requirements.

7. Your choices and privacy requests

You can review and update available account and address details from My Account. You may contact support@petapt.in to request access to, correction of or deletion of your personal information, raise a privacy grievance, or withdraw consent where processing depends on it.

We may need to verify your identity before acting on a request. Some records may need to be retained for legal, payment, dispute-resolution or security purposes. Withdrawing information or permissions necessary for a service may affect our ability to provide that service. These choices do not limit rights available under applicable law.

8. Children and third-party services

Purchases and account use should be carried out by adults or with appropriate adult supervision. If you believe a child has provided personal information without appropriate authorization, contact us so we can review the situation.

Links to external websites and services, including WhatsApp, Google and payment providers, are governed by those services' own privacy notices. Review them before sharing information directly with those services.

9. Changes to this policy

We may update this policy when our services or information practices change. The revision date on this page identifies the current version. Where required, we will provide additional notice or seek consent for material changes; publishing a revised policy does not replace any consent required by law.