Privacy Policy

1. Who We Are

• This website is operated by Shirley Plus Private Limited ("Shirley Plus", "we", "us", "our").
• CIN: U29190MH2022PTC384066
• GSTIN: 27ABICS6768B1Z1
• Registered office: Flat No. 9, Jambudeep Apartment, Kala Nagar, Dindori Road, Nashik, Maharashtra 422004, India

2. What This Policy Covers

• How we collect, use, store and share personal information when you use this website, create an account, place an order, or contact us.
• It does not cover third-party services that operate under their own privacy policies — see Sections 6, 7 and 9.

3. Information You Give Us

When you create an account

• Email address
• Password — stored only as a salted cryptographic hash. We never see it.
• First and last name, if you add them to your profile

When you place an order

• Delivery details: full name, phone number, address, city, state and PIN code
• Order contents, amounts and order history
• For business orders: company name, GSTIN, contact person and billing address

When you contact us — no account needed

• Contact form: name, email, enquiry type, message
• Product enquiries: name, email, phone, organisation type, message
• Event registrations: name, email, phone, number of attendees, message
• CSR and partnership enquiries: company name, contact person, email, phone, message

These forms include free-text message boxes. Please do not enter medical, health or other sensitive personal information — we do not need it in order to respond to you.

5. How We Use Your Information

• To create and manage your account
• To process, fulfil and deliver your orders, and to reserve stock
• To respond to your enquiries, complaints and event registrations
• To prepare quotations, invoices and tax records for business orders
• To meet our legal, tax and accounting obligations

We do not use your information for profiling or automated decision-making.

6. Payments

• Payments are processed by Razorpay Software Private Limited.
• Your card, UPI, netbanking and wallet details are entered directly into Razorpay's own payment window. They are never transmitted to, seen by, or stored on our servers.
• We send Razorpay only the payment amount and currency — not your name, email, phone number or address.
• We store what Razorpay returns to us: an order ID, a payment ID, a verification signature, the amount, and the payment method type (for example "UPI" or "card").
• Razorpay independently collects information from you during payment, including your payment credentials and device information, under its own privacy policy.

7. Signing In With Google

• We request access to your basic profile and email address only.
• We receive and store the profile information Google returns — typically your Google account ID, name, email address, profile picture URL and locale.
• We do not receive your Google password, and we do not store Google access tokens.
• If you sign in with a Google account whose email matches an existing Shirley Plus account, the two accounts are linked automatically.

8. Cookies and Sessions

We use only the cookies needed to make the site work.

• Session cookie — keeps you signed in and remembers your cart. Lasts up to 14 days from your last activity on the site.
• Security token cookie — protects our forms against cross-site request forgery. Lasts for your session.
• Message cookie — carries one-off status messages, such as a confirmation that your order was placed. Cleared once displayed.

We set no analytics, advertising or personalisation cookies. That is why you will not see a cookie consent banner on this site.

9. Other Services Your Browser Contacts

Some pages load resources hosted by other companies. When your browser loads them, those providers receive your IP address, browser and device type, and the page you are viewing:

• Google Fonts — the typefaces used across the site
• Cloudflare and jsDelivr — icon and layout libraries
• unpkg and CARTO — the map on our events page. CARTO also receives the map area you view.
• Razorpay — the payment window, on checkout pages only

When you submit our contact form, we run a technical check that your email address's domain can receive mail. Only the domain is checked — never your full address.

10. How Long We Keep Information

• Orders, payments, invoices and tax records — [PLACEHOLDER — pending confirmation], as required under Indian tax and company law
• Contact messages, product enquiries and event registrations — [PLACEHOLDER — pending confirmation]
• Account data — kept for as long as your account is active

Deletion is carried out manually on request, as described in Section 11. We do not run an automated deletion schedule.

11. Your Rights and How to Exercise Them

Subject to applicable law, you may ask us to confirm what personal information we hold about you and provide a copy, correct information that is inaccurate or incomplete, erase your personal information, or withdraw consent you previously gave.

• How to ask: write to our Grievance Officer (Section 15). Every request is handled manually — we do not currently offer self-service deletion from your account.
• We will ask you to verify your identity before we act, particularly for enquiries submitted without an account.
• What you can change yourself: your first name, last name and email address, from your profile page. Addresses, order history and submitted enquiries are not currently editable by you — contact us and we will make the change.

Some records cannot be erased on request — completed orders, payment records and tax documents must be retained under Indian law. Where we cannot erase something, we will tell you why.

12. Age Requirement

• You must be 18 or older to create an account or place an order.
• If you are under 18, a parent or guardian must complete the purchase on your behalf.
• We do not knowingly create accounts for anyone under 18. If you believe a minor has registered, contact our Grievance Officer and we will remove the account.

13. How We Protect Information

• Your password is stored only as a salted cryptographic hash — we cannot read it.
• Your card, UPI and bank details never reach our servers; they go directly to Razorpay.
• Payment confirmations from Razorpay are cryptographically verified before any order is marked as paid.
• Access to customer records is limited to authorised Shirley Plus staff.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authority as required by law.

14. Changes to This Policy

• We may update this policy. The current version and its "Last updated" date always appear at the top of this page.
• We do not currently send email notifications of policy changes. Please check this page from time to time.

15. Grievance Officer and How to Reach Us

• Name: Mrs. Smita Mane-Shinde
• Designation: Founder
• Email: shirleiplus@gmail.com
• Phone: +91 883 045 8424
• Address: Shirley Plus Private Limited, Flat No. 9, Jambudeep Apartment, Kala Nagar, Dindori Road, Nashik, Maharashtra 422004, India

In accordance with the Consumer Protection (E-Commerce) Rules, 2020, we will acknowledge your complaint within 48 hours of receiving it and work to resolve it within one month.