Privacy policy
What we collect when you use this shop, why, who helps us handle it, how long we keep it, and your rights under India’s Digital Personal Data Protection Act, 2023.
Last updated 14 November 2026
Who is responsible
All Occasion decides how your personal data is used here (the “data fiduciary”, in the Act’s words). Write to us about your data at hubtech19@gmail.com, for the attention of Mazoom Zahoor Kakroo, our grievance officer.
What we collect
- Your order: your name, phone number, email and delivery address.
- What you make: the photos and designs you upload, and the names, dates and words you give us to letter, for a Nikkah Nama for example.
- Payments: our payment provider handles your card, UPI or bank details. We receive only whether the payment went through, its amount and its reference.
- Your account, if you make one: your email, your name, your password (kept only as a one-way scrambled form, so nobody, not even us, can read it) and, if you turn on two-step sign-in, the secret for your authenticator app, which we store encrypted. The mobile number you give is used once, to find your earlier orders.
- What you tell us: reviews, survey answers and your messages to us.
- To keep the shop safe: your device’s internet (IP) address, for a short time, so we can stop abuse such as someone asking for many sign-in codes.
- How you found us: if you arrive from a link we shared, for example on Instagram, a cookie remembers which link for 30 days, so we know which posts bring orders, if you say yes when we ask.
Why we use it
- To make, check and deliver your order, and to talk to you about it.
- To take payment, give refunds, and keep the invoices and records tax law asks of us.
- To keep your account and your orders private to you, and to prevent fraud and abuse.
- To improve the shop. We look at totals, such as how many people opened a product, never at what one person did.
When you place an order, you agree to this use of your details. You can withdraw that consent at any time by writing to us. It does not undo what we did before, and we may still need to keep the records the law asks for.
What we never do
- We never sell your personal data or share it for advertising.
- We use no advertising or tracking cookies.
- Product suggestions come from our catalogue and from what sells overall, never from your personal history. “Recently viewed” stays in your own browser.
- We never send your personal details or your photos to AI services.
Who helps us
These services handle data for us, only to do their part, under contracts that require them to protect it:
- Razorpay takes online payments and refunds. We never see your card, UPI or bank login details.
- Vercel runs this website.
- Neon hosts our order database.
- Cloudflare stores the photos you upload and the files we print from.
- Resend sends our emails, such as sign-in codes and order updates.
- Our delivery partners receive your name, address and phone number, to deliver your parcel.
We share data with the authorities only when the law requires it. Our providers may store data in India or abroad, with the same protections.
How long we keep it
- Your photos and designs: kept in our private storage while we make and deliver your order, and while we may need to remake or replace it. They are used for nothing else. You can ask us to delete them at any time from your order’s page, and we do it within one month, unless something about the order is still open, such as a return or a dispute.
- Photos you uploaded but did not order, and carts that never became an order: used for nothing, and deleted when you ask.
- Orders, invoices and payment records: kept for as long as tax and accounting law requires, currently about eight years.
- Your account: until you ask us to close it.
We are setting up automatic deletion of photos and designs after an order is complete. When it starts, this page will say after how long, with a new date at the top.
Cookies
We use only our own cookies, each for one job:
- your cart, for 30 days;
- your orders on this device, so their pages open for you, for 180 days;
- keeping you signed in, for up to 30 days;
- which of our links brought you here, for 30 days, only if you say yes when we ask;
- your answer to that question, for 180 days.
You can change your answer at any time with “Cookie choice” at the foot of every page.
When you pay online, our payment provider’s window may set its own cookies for that payment.
Your rights
You can ask us:
- for a summary of the personal data we hold about you, and who we shared it with;
- to correct or complete it;
- to erase it, unless the law requires us to keep it (invoices, for example);
- to let someone you name act for you if you die or cannot act yourself.
On each order’s page you can download a copy of that order’s data, and ask us to correct your details or delete your photos and designs. We answer there, and by email if you gave us one. If you have an account, you can also download everything in it and close it on your account page. For anything else, write to us at the address above. We reply within one month. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.
Children
The shop is meant for adults. If you are under 18, please ask a parent or guardian to order for you.
Keeping it safe
Every connection to the shop is encrypted. Each member of our staff signs in with their own account and password, sees only what their work needs, and changes to staff access are recorded. Card and UPI details never reach our systems.
Changes
If we change this policy, we update this page and its date. If a change affects how we use data you already gave us, we tell you first.