Privacy Policy

We only ask for what we need to book, deliver and bill your order:

• Contact details — your name, mobile number and (optionally) email address.
• Delivery address — house/street, area, city, district, state and pincode, so the parcel can be booked to the transport office near you.
• Order details — the items, prices, any coupon or partner code used, the delivery charge and the order status.
• Payment proof — the screenshot and UPI reference/UTR you upload after paying, so we can match the payment in our bank. We never ask for, see or store your UPI PIN, card details, net-banking password or OTP.
• WhatsApp enquiries — when you tap a WhatsApp button on our site we ask for your name, mobile number and (optionally) email, and save them with your question (for example your shopping list) so we can reply and follow up.
• My Orders sign-in — if you sign in to see your bookings, the email (or WhatsApp number) you verify. We send a one-time code to it and keep only a scrambled copy of the code for 10 minutes.
• Reviews and questions — your name, town, rating, message and any photos you post on the Reviews page, plus your mobile number (kept private, used only to check and reply). Your name, town, message and photos are shown publicly once we approve them.
• Messages — anything you send us on WhatsApp, phone or through a price-quote request.
• Technical data — your IP address when you place a booking or request a quote, used only to stop abuse (for example, too many requests at once) and kept with the order record.

We do not collect Aadhaar, PAN, bank account or card numbers, and we do not use advertising or tracking cookies.

• To create your booking, show your order page and send status updates.
• To verify your payment against our bank statement.
• To pack and dispatch your crackers through licensed lorry transport and share the LR number with you.
• To tell you the day's delivery charge for your area and answer your questions.
• To issue a GST invoice and keep the records required by tax and explosives-licence laws.
• To process cancellations, refunds and damage claims.
• To see how many orders a partner's coupon code brought in (we show partners counts, never your details).

By placing a booking you agree to us using your details as described here. You can withdraw your consent at any time by contacting us (section 10); we will then stop using your data except where the law requires us to keep it (for example, invoices). Withdrawing consent before dispatch may mean we cannot complete your order.

We never sell or rent your data. We share only what each party needs:

• The transport / delivery partner — your name, phone number, district and town, to book and hand over the parcel.
• Our hosting provider — Google Cloud stores the website, orders and payment screenshots on servers in Mumbai, India.
• Government authorities — only when the law requires it (for example GST, the police or PESO).

If you tap a WhatsApp button, WhatsApp (Meta) handles that chat under its own privacy policy. Video thumbnails are loaded from YouTube's image server; the video itself loads (in YouTube's privacy-enhanced mode) only when you tap play, and YouTube's privacy policy then applies.

We use a few small items on your device, only to make the shop work:

• Your cart — kept in your browser so it's still there when you come back.
• Checkout details — kept for the browser session so you don't retype them.
• Partner code — if you open a partner's share link, their code is remembered for 30 days so it applies at checkout. Remove it at checkout to clear it.
• My Orders sign-in — keeps you signed in for up to 30 days. Tap Sign out to remove it.
• Staff sign-in — for the shop's admin team only.

No analytics, advertising or third-party tracking cookies are used.

We keep order records, invoices and payment proofs for as long as tax and licence laws require — generally at least six years after the financial year of the order. Unpaid bookings that lapsed, WhatsApp enquiries, quote requests and chat messages are kept only as long as needed to deal with them. Approved reviews stay on the site until you ask us to remove them; rejected ones are deleted. Your account can be deleted on request (enquiries at most until the end of the following Diwali season). After that, data is deleted or anonymised.

• The whole site uses HTTPS encryption.
• Each order page is reachable only through its own unguessable link.
• Payment screenshots are stored privately and shown only to signed-in shop staff.
• Staff sign in with individual accounts; passwords are stored scrambled (hashed) and sessions expire.

Under the Digital Personal Data Protection Act, 2023 you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or update it;
• erase it, unless the law requires us to keep it;
• nominate another person to exercise these rights if you die or cannot act;
• hear and resolve a complaint (section 10).

If you are not satisfied with our reply, you may complain to the Data Protection Board of India. Bookings are only accepted from adults (18+); we do not knowingly collect data from children.

If we change this policy we will update the date at the top of this page. Important changes will also be shown on the home page. Please also read our Terms & Conditions.

We acknowledge every complaint within 48 hours and aim to resolve it within 30 days. Please mention your booking code if your complaint is about an order.