Skip to main content
FREE DELIVERY ACROSS INDIA ON ORDERS ABOVE ₹10,000

Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains what personal information Badminton Bazaar (Sole Proprietor: Ashish Kushwah) collects through this website, why we collect it, who we share it with, and the choices you have. It describes our practices as implemented in the store's software. It is not a statement that we are compliant with every applicable law; if you have concerns, please contact us using the details at the end of this page.

Owner action required before relying on this page:

  • Supply the legal business/entity name, principal place of business address, and the contact details (support email, phone) used throughout this page.
  • Appoint and name a Grievance Officer (required for many Indian businesses handling personal data and consumer complaints) and add their contact details.
  • Confirm the retention periods in the "Data retention" section before relying on them.

1. Who we are

Badminton Bazaar is an online store selling badminton equipment (rackets, shoes, shuttlecocks, strings, grips, bags, apparel and accessories) in India. The store is operated by Sole Proprietor: Ashish Kushwah, with principal address Bhopal, MP. In this policy, "we", "us" and "our" refer to that operator.

2. Personal information we collect

We collect the following categories of information:

  • Account details: full name, email address, and password (stored only as a secure hash by our authentication provider — we never see or store your password in readable form).
  • Contact information: phone number you provide on your profile or order.
  • Shipping addresses: recipient name, street address, city, state, PIN code, and country saved in your address book or entered at checkout.
  • Orders and payment status: items ordered, quantities, prices, order number, shipping address used, payment method (currently Cash on Delivery), and payment status. For Cash on Delivery orders we do not collect card or online-payment details.
  • Cart contents: products you add to your shopping cart (linked to your account).
  • Support requests: any information you send us when you contact support.
  • Technical data: IP address, browser type, and request logs processed by our hosting and database providers as part of delivering the website (see "Third-party service providers").

3. How we use your information

  • To create and manage your account (with your consent when you register).
  • To process orders: validate stock, calculate totals and shipping, place and track orders, and deliver products to the address you provide.
  • To send transactional emails: account verification, password resets, order confirmations, and order status updates (confirmed, processing, shipped, delivered, cancelled).
  • To collect Cash on Delivery payments through our delivery process.
  • To maintain internal records, including order history and admin audit logs.
  • To detect and prevent misuse, and to keep the store secure.
  • To meet legal obligations and respond to lawful requests.

We do not use your data for third-party advertising, and we do not sell or rent personal information.

4. Consent and lawful basis

Where the Digital Personal Data Protection Act, 2023 (India) and the DPDP Rules, 2025 (issued in 2025 and commencing in phases) apply to our processing, we rely on your consent for activities such as creating an account and sending non-essential communications, and on recognised legitimate uses (such as processing an order you have placed) for order fulfilment. You may withdraw consent for optional communications at any time by contacting us; withdrawal does not affect processing that already took place lawfully.

The DPDP framework is being introduced in phases. This policy will be updated as the applicable requirements take effect for our operations.

5. Payments

Checkout currently supports Cash on Delivery only. We do not collect or store card numbers, UPI IDs, or net-banking credentials on this website. If online payments are enabled in the future (payment infrastructure for Razorpay exists in our systems but is not offered at checkout today), payments would be processed by the payment provider, and this policy will be updated.

6. Third-party service providers

We share data with the following categories of providers strictly as needed to run the store:

  • Supabase (database, authentication, file storage): stores account data, orders, and product images; issues and refreshes login session cookies.
  • Vercel (hosting): serves the website and processes requests, including IP addresses in standard server logs.
  • Resend (transactional email): sends verification, password reset, and order emails on our behalf.
  • Razorpay (payments): configured in our systems but not currently offered at checkout; no payment data is sent to it for orders placed today.

These providers process data on our instructions under their own terms and privacy policies. Some may process data outside India. We do not authorize them to use your data for their own advertising.

7. Cookies and local storage

We use only strictly necessary storage: login session cookies set by our authentication provider and a local-storage item that remembers your light/dark theme choice. We do not use advertising or analytics cookies. Full details are in our Cookie Policy.

8. Data retention

We retain account information for as long as your account is active. Order records, including shipping addresses and payment status, are retained as business records for accounting, legal, and fraud-prevention purposes. Technical logs are retained by our hosting and database providers for their standard operational periods.

Owner action required before relying on this page:

Confirm the specific retention periods (for example, "order records retained for 8 years for tax purposes") and update this section.

9. Security

We protect personal information with technical and organisational measures including:

  • HTTPS encryption for data in transit.
  • Database row-level security so customers can only access their own records; privileged keys are kept server-side only and are never exposed to the browser.
  • Server-side verification of payment-related operations.
  • Restricted administrative access to customer and order data.

No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. Your rights

Subject to applicable law (including the DPDP Act, 2023 as it applies to you), you may ask us to:

  • Access a summary of the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Erase personal data we no longer need to retain.
  • Withdraw consent for optional processing.
  • Redress grievances related to your personal data.

You can review and update basic profile details and addresses in your account. For other requests, contact us using the details below. Some records (such as order history) may need to be retained for legal or accounting reasons even after an erasure request, and we will tell you when that applies.

11. Children

This store is not directed at children under 18 years of age, and we do not knowingly process the personal data of children. A parent or guardian who believes a child has provided us with personal data should contact us.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. The "Last updated" date at the top shows when it was last revised. Material changes will be announced on the website.

13. Contact and grievances

Privacy and grievance contact: badmintonbazaarshop@gmail.com
Grievance Officer: Ashish Kushwah
Address: Bhopal, MP
Phone: +91 91049 01959

See also our Contact page, FAQ, and Terms of Service.