Customer Trust & Data Protection

Privacy Policy

Last Updated: 8 September 2026

1. Information Collection & Account Creation

We collect personal information necessary to process your orders, provide customer support, and manage customer accounts:

  • Order & Checkout Details: When you place an order, we collect your full name, delivery address, email address, mobile phone number, postal code, and selected item details.
  • Google Single Sign-On (OAuth/OIDC): If you choose to log in using Google, we process your Google unique user identifier (Google sub claim), full name, first name, last name, and email address to securely authenticate your account and resolve your customer profile.
  • VIP CladBead Club Marketing Consent: If you explicitly opt in to join the VIP CladBead Club, we record your opt-in consent and timestamp as customer profile metadata within our store backend.

2. Use of Personal Information

Your personal information is processed strictly for the following operational purposes:

  • Fulfilling, packaging, and dispatching your orders.
  • Sending shipping status and courier tracking notifications through SMS/WhatsApp where applicable.
  • Authenticating customer account sessions and providing secure account access.
  • Providing customer care, handling inquiries, and managing resolution requests for damaged or transit issues.
  • Communicating VIP Club news, new bead drops, and exclusive offers to customers who have explicitly opted in.

3. Third-Party Service Providers

We share relevant personal data only with trusted third-party service providers essential for store operations:

  • Payment Processing (Razorpay): Online payments are processed securely through Razorpay. Payment details (card numbers, UPI IDs, netbanking credentials) are entered directly into Razorpay’s PCI-DSS compliant interface. We transmit order amounts and reference identifiers to Razorpay, and verify transaction notifications using Razorpay’s webhook signature verification.
  • Logistics & Courier Delivery (Shiprocket & Courier Partners): Order fulfillment, courier allocation, shipping labels, and tracking SMS are managed through Shiprocket and its courier network (including Delhivery, Bluedart, Ecom Express). Your name, delivery address, postal code, mobile number, and order items are shared with logistics partners solely for parcel delivery.
  • Identity Services (Google Identity): Account authentication using Google Single Sign-On processes user identity tokens via Google Identity Services.
  • Hosting Infrastructure (Hostinger): Storefront services and backend databases are hosted securely on Hostinger cloud infrastructure.
  • Customer Support (WhatsApp): If you initiate a support inquiry via our WhatsApp button, your conversation occurs directly through WhatsApp (Meta Platforms).

4. Cookies & Session Security

Our storefront uses essential security cookies strictly required for site operation:

  • Essential Session Cookie (cbc_auth_token): An HttpOnly, SameSite=Strict security cookie containing a signed session token, stored for 7 days to maintain your logged-in account session securely.
  • Single-Use Security Token (cbc_oauth_state): A temporary anti-CSRF token used during Google login verification, which expires immediately after authentication.

We do not use advertising tracking cookies, third-party analytics cookies, or behavioral profiling scripts on our storefront.

5. Current Data Practices Notice

  • Analytics & Tracking: We do not use Google Analytics, Meta Pixel, or third-party tracking or profiling tools on our website.
  • Marketing Platforms: We do not share or export customer data to external third-party email marketing platforms or CRM services. VIP marketing consent is stored as metadata on your WooCommerce customer profile.

6. Data Protection, Access & Rights

We maintain reasonable technical and organizational safeguards to protect your personal data against unauthorized access, loss, or misuse. We do not sell or rent customer personal information to any third party.

You may contact us to request access to your personal data, correction of inaccurate information, account deletion, or withdrawal of optional VIP Club marketing consent, subject to applicable law and any necessary record-keeping obligations.

7. Customer Contact & Privacy Inquiries

For any privacy questions, data access requests, or consent management, please contact us:

  • Email: hello@cladbeadscraft.com
  • WhatsApp Support: +91 8072836575