Privacy Policy

Last updated: October 26, 2026

This Privacy Policy explains how Authentic Indian, LLC, which runs Authentic Indian Store ("we", "us", "our"), collects, uses, shares and protects personal information when you visit authenticindianstore.com, create an account, place an order, take part in our rewards program, or contact us. It also tells you about your choices and rights.

Our store is for customers in the United States. If you visit from another country, your information is processed in the United States and in India, as described below.

At a glance

• We collect what we need to sell and deliver your order, run your account, support you and keep the store secure.
• Payments are handled by Stripe. We never see or store your full card number.
• Our fulfilment partner in India receives your name, shipping address, phone number and the items you ordered, so it can pack and ship your order.
• We use Google Analytics to understand how the site is used. We don't record your sessions. You can turn analytics off, and it is off whenever your browser sends a Global Privacy Control signal.
• We do not sell your personal information, and we do not share it for targeted (cross-context behavioral) advertising.
• We send marketing emails only if you ask for them. We don't send text messages.
• You can ask to see, correct, download or delete your information, wherever you live in the United States.

1. Information we collect

Information you give us

• Account details: your name, email address and password (which we store only in hashed form), and whether you want marketing emails.
• Order details: billing and shipping name and address, email address, phone number, the products you buy, order notes, coupons used, and the details of any return, refund or delivery problem.
• Payment details: you enter your card details into a secure form provided by Stripe. We receive limited details from Stripe, such as the card brand, the last four digits, the expiry date and the result of the payment, but never the full card number or security code.
• Saved items: your cart, wishlist and saved addresses.
• Rewards program: your points balance, points history and membership level, and any details you give us for the program.
• Messages and forms: what you send us by email, phone or our contact, bulk order and product request forms, including your contact details and any information you choose to include. Please don't send us health information we haven't asked for.

Information collected automatically

• Device and log information: your IP address, browser and device type, operating system, language, referring page, the pages you visit and when, and error and security logs. We also record the IP address and browser used to place an order or sign in, to protect against fraud.
• Approximate location: derived from your IP address (for example, city or state). We don't collect precise location.
• Cookies and similar technologies: used to keep you signed in, remember your cart and wishlist, and run analytics. See our Cookie Policy.
• Analytics: when analytics are on, Google Analytics records pages viewed and shopping events (such as products viewed, added to cart and purchased, with order number and value but not your name or contact details). We don't use session-recording or heatmap tools.
• Security checks: Cloudflare Turnstile checks that forms are filled in by people, not bots, using technical information about your browser and device.

Information from others

• Stripe: payment status, fraud-risk signals and sales tax calculations.
• Our fulfilment partner and shipping carriers: shipping, tracking and delivery updates, and customs information about your shipment.

2. How we use your information

• To take, process, ship and deliver your orders, including customs clearance, and to handle cancellations, returns, refunds and delivery problems.
• To create and manage your account, your saved items and your rewards.
• To process payments, calculate and collect sales tax, and keep financial and tax records.
• To answer your questions and give customer support.
• To send you order and account emails (such as confirmations, shipping updates and password resets).
• To send you marketing emails, if you have opted in.
• To understand how the site is used, fix problems and improve the store.
• To detect, prevent and investigate fraud, abuse, bots and security incidents, and to protect our customers, our business and others.
• To comply with the law, enforce our Terms and Conditions, and establish or defend legal claims.

We don't use your information to make decisions about you based solely on automated processing that have legal or similarly significant effects, and we don't build profiles of you for advertising.

3. How we share your information

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising (targeted advertising). We have not done so in the past 12 months. If that ever changes, we will update this policy first and give you a way to opt out. We share personal information only as follows:

• Fulfilment partner: our supplier in India, which packs and ships orders, receives your shipping name, address and phone number, the items ordered and any delivery note. It does not receive your email address, billing details or payment details.
• Shipping carriers and customs brokers (such as DHL, FedEx, UPS and USPS) receive the information needed to deliver your order and clear customs, including your name, address, phone number and the contents and value of the package. Customs authorities receive this information as part of import declarations.
• Service providers that process information for us, under contracts that limit their use of it:
  • Stripe (payments, fraud prevention and sales tax);
  • Netlify (website hosting and content delivery);
  • Neon (database hosting in the United States);
  • Resend (sending our emails);
  • Cloudflare (domain and email routing, and Turnstile security checks);
  • Google (Google Analytics, and email services for our support inbox).
• Professional advisers, such as accountants, lawyers and insurers, where needed.
• Legal and safety reasons: to comply with the law, a court order or a lawful request from authorities; to enforce our terms; or to protect the rights, property or safety of our customers, us or others.
• Business transfers: if our business is sold, merged or reorganized, personal information may be transferred as part of that transaction, subject to this policy.
• With your consent or at your direction.

We have configured Google Analytics so that its data is not used for Google's advertising features (Google signals and ad personalization are turned off).

4. Cookies, analytics and your choices

• Turn analytics off: use the switch on our Cookie Policy page to turn off Google Analytics in your browser.
• Global Privacy Control (GPC): if your browser sends a GPC signal, we treat it as a request to opt out of any sale or sharing of your personal information, and we also turn off Google Analytics for that browser. The Cookie Policy page shows when we have detected the signal.
• Do Not Track: there is no common standard for "Do Not Track" signals, so we don't respond to them. We honor GPC instead.
• Browser settings: you can block or delete cookies in your browser. If you block essential cookies, sign-in, the cart and checkout won't work.

5. Marketing emails

We send marketing emails only if you have opted in. You can unsubscribe at any time by using the link in any marketing email, changing your preference in your account, or contacting us. Even if you unsubscribe, we will still send emails about your account and orders. We do not send marketing text messages or make marketing calls.

6. International transfers

We are based in the United States, and our website and database are hosted in the United States. Our fulfilment partner is in India, so the shipping information described in section 3 is transferred to India. Our service providers may process information in other countries. Wherever your information is processed, we protect it as this policy describes.

7. How long we keep information

• Account details: for as long as your account is open. If you ask us to delete your account, we delete or de-identify your details within 45 days, except what we must keep for the reasons below.
• Orders, payments, refunds and tax records: for 7 years after the order, to meet tax, accounting and legal requirements.
• Rewards records: for as long as you are a member, and afterwards as part of our order and accounting records.
• Customer support messages and form submissions: up to 3 years after our last contact with you.
• Marketing preferences: as long as we need them to respect your choice. If you unsubscribe, we keep your email address on a "do not email" list.
• Guest carts and wishlists: guest carts are deleted about 30 days after your last visit. A guest wishlist holds no personal details, and the cookie that links it to your browser expires after 6 months.
• Security logs and sign-in sessions: sessions expire after 30 days. Security and fraud records are kept as long as needed to protect the store.
• Analytics: Google Analytics keeps event data for up to 14 months.

We may keep information longer if the law requires it, to resolve disputes, or to enforce our agreements. We may keep de-identified information that can no longer reasonably be linked to you.

8. How we protect information

We use administrative, technical and physical safeguards appropriate to the information we hold. These include encrypted (HTTPS) connections, hashed passwords, access limited to people who need it, security monitoring, and a payment provider (Stripe) that is certified to the highest level of the Payment Card Industry Data Security Standard. No system is perfectly secure, so we can't guarantee that information will never be accessed without authorization. If a security breach affects your personal information, we will notify you as the law requires. Please use a strong, unique password and keep it private.

9. Children

Our store is not directed to children under 13, and we don't knowingly collect personal information from them. You must be 18 or older to create an account or place an order. Parents and guardians may buy baby and children's products for their families. If you believe a child has given us personal information, contact us and we will delete it.

10. Your privacy rights

Depending on where you live, state law may give you rights over your personal information. We offer the following rights to all customers in the United States, subject to the exceptions the law allows:

• Access and portability: to know what personal information we hold about you and how we use and share it, and to receive a copy in a portable format.
• Correction: to correct inaccurate information. You can update most account details yourself under My Account.
• Deletion: to ask us to delete your personal information. We may need to keep some of it, for example our order and tax records.
• Opt out: of the sale of personal information, targeted advertising and profiling. We don't do any of these, and we honor Global Privacy Control signals.
• Consent: to withdraw any consent you have given us.
• Non-discrimination: we will not deny you goods, charge you a different price or give you a different level of service because you exercised your rights. Our rewards program is explained in section 11.

How to make a request

Email •••••••@••••••••••••••••••••.••• with "Privacy request" in the subject, or write to us at the address in section 15. Tell us what you are asking for. To protect you, we verify requests by matching the information you give us with what we hold, for example by confirming a request from the email address on your account. We may ask for more information if needed, and we use it only to verify you.

You may use an authorized agent to make a request for you. We may ask the agent for signed proof of their authority, and ask you to confirm your identity with us directly.

We respond within 45 days. If we need more time (up to a further 45 days), we will tell you why. Requests are free, unless they are clearly unfounded or excessive.

Appeals

If we decline your request, you may appeal by replying to our decision or emailing us with "Privacy appeal" in the subject. We will respond in writing within 45 days (60 days where state law allows), explaining what we did and why. If you are not satisfied, you may contact your state Attorney General.

11. Rewards program: notice of financial incentive

Our rewards program lets registered customers earn points on purchases, which can be redeemed for discounts when the program is active. Some state laws call this a "financial incentive", because the program uses personal information.

• Information used: your account details (name and email address), your purchase history, and your points balance, history and level.
• Joining: you take part by creating an account and making purchases. You can stop taking part at any time by asking us to close your rewards account or your customer account. Points that have not been redeemed are then forfeited.
• Value of your information: we don't sell the information the program uses. We estimate its value to us as roughly equal to the value of the rewards we give, because we use it only to run the program and to understand what our members buy.
• The full program terms are on the Rewards Program page.

12. Notices for residents of particular states

California

This section, together with the rest of this policy, is our notice at collection under the California Consumer Privacy Act. In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described in sections 1 and 2:

We do not collect biometric information, precise geolocation, or protected classification characteristics such as race or religion. We use sensitive personal information only to provide the services you request and for the other purposes the law permits, and not to infer characteristics about you. We keep each category for the periods in section 7.

Shine the Light: we do not disclose personal information to third parties for their own direct marketing purposes.

Nevada

We do not sell covered information as defined by Nevada law. You may still send us an opt-out request at the email address above.

Washington, Nevada and other consumer health data laws

See our Consumer Health Data Privacy Policy.

13. Other websites

Our site links to other websites, such as carriers' tracking pages and social networks. Their privacy practices are their own, and this policy doesn't cover them.

14. Changes to this policy

We may update this policy from time to time. We'll post the new version here with a new "Last updated" date. If a change is material, we'll also tell you by email or on the site before it takes effect. If we ever want to use personal information we have already collected in a materially different way, we will ask for your consent where the law requires it.

15. Contact us

Authentic Indian, LLC (Authentic Indian Store)
1030 N Rogers Ln, Ste 121 #5252
Raleigh, NC 27610
United States

Email: •••••••@••••••••••••••••••••.••• (use "Privacy request" in the subject)
Phone: +• ••• •••-•••• (09:00–19:00 ET)

If you need this policy in another format because of a disability, contact us and we'll provide it.