Who this covers
This policy describes how AtulyaHaraya handles personal information for customers shopping on the Canada A&H storefront.
It reflects how the platform works today. A named privacy officer and a dedicated support mailbox are not published yet; use the Support page for privacy questions about an order.
Information we collect
Account details: name, email and password (stored as a hash, never in plaintext). Google or Microsoft sign-in may supply a name and email when you choose those options.
Order details: delivery address, phone number, postal code, province, items purchased, order invoice data and order history.
Session cookies used to keep you signed in and to remember your cart. We do not store card PAN or CVV. Prepaid payments use a hosted or tokenized provider flow (Stripe Checkout for Canada).
How we use it
To create and fulfil orders, check postal-code serviceability, send order and shipment updates, process returns and refunds, and let you see your own account.
Guest tracking requires the order number plus the email or mobile used on that order. The order number alone does not expose an order.
Who we share it with
Payment providers, for prepaid checkout. Shipping and fulfilment partners, for delivery and tracking references. We do not sell customer lists.
Administrators can see order and customer records needed to operate the store. Access is authorised on the server, not by hiding buttons in the admin app.
Your choices
You can update your profile, addresses and password from your account. You can request a return where the product policy allows it.
If you need a copy of an invoice or help deleting an account, use Support and include the email on the order. We keep order records as required for fulfilment and accounting.