Privacy policy

What we collect, and why

• When you order: your name, email address, phone number and delivery address. We need these to make your piece, ship it, and talk to you about it. Nothing else.
• When you pay: your payment is handled by our payment provider. Card and UPI details are entered on their systems and are never sent to, seen by, or stored on our servers. We receive only whether the payment succeeded and a reference number.
• When you message us: whatever you choose to tell us, kept so we can answer you and remember your preferences next time.
• Automatically: a cart identifier stored in your own browser so your basket survives a refresh, and standard web-server logs (IP address, page requested, timestamp) kept for security and troubleshooting.

What we do not do

We do not sell, rent or trade your data. We do not add you to a mailing list because you bought something — if we ever start a newsletter, you will have to ask for it.

Who else sees it

Only those who must, and only the part they need:

• Our payment provider — to take payment and process refunds.
• Our courier — your name, address and phone, to deliver the parcel.
• Our email provider — to send order confirmations and replies.
• Google and Meta — see below.

We may also disclose information where the law requires it.

Measurement

Nearly everyone finds Keysh through an advert on Instagram. To see which adverts lead to orders, we use Google Analytics and Meta’s advertising tools. They receive the pages and pieces you viewed, what you added to your basket, what you ordered and what it cost, and your device and rough location.

When you order, we also share your contact details and delivery area with Meta in scrambled form, so the sale can be matched to the advert you saw. Your street address is never shared, and neither are your measurements.

A browser or extension that blocks trackers will stop all of this, and the shop works exactly the same. You can limit ad tracking in your Instagram or Facebook settings, and you can ask us what we hold or to delete it.

How long we keep it

Order records are kept as long as Indian tax and accounting law requires — currently eight years. Messages and enquiries that do not become orders are deleted within two years. Server logs are rotated within 14 days.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@keysh.in and we will respond within 30 days. Where we must keep order records for tax reasons we will tell you, and delete everything we are not obliged to retain.

Security

The site is served over HTTPS. Our database is not reachable from the internet, backups are encrypted, and the server is patched automatically. No system is perfect, but we do not keep what we do not need — which is the best protection there is.