Bombay Puzzle Co. (“we“, “us“, “our“) operates the website [bombaypuzzleco.com] (the “Site”) and sells premium wooden jigsaw puzzles online. This Privacy Policy explains what personal information we collect when you visit or shop with us, why we collect it, and the choices you have. It is written to comply with the Indian Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

By using the Site or placing an order, you agree to the collection and use of information as described here.

1. Information we collect

a) Information you give us

  • Name, email address, phone number, shipping and billing address, when you create an account, place an order, sign up for our newsletter, or contact customer support.
  • Order details — the products you buy, quantities, piece-count/size selections and any gift note or special instructions you add.
  • Any message content you send us via email, WhatsApp, contact form, or comments left on the Site.

b) Information collected automatically

  • Device and browser type, IP address, pages viewed, time spent, referring URL, and general location (city/region) — collected via cookies and similar technologies.
  • Cart and browsing behaviour, used to show you relevant products and remember items in your cart.

c) Payment information

We do not store your full card, UPI or net-banking credentials. Payments are processed by our payment gateway ([Razorpay / PayU / Cashfree — confirm]), which collects and processes this data under its own privacy policy and PCI-DSS security standards. We only receive confirmation that a payment succeeded and a masked reference for order reconciliation.

2. How we use your information

  • To process, pack, ship and deliver your order, and to communicate order status (confirmation, shipping, delivery, delays).
  • To respond to customer support requests, returns and refund claims.
  • To send you marketing emails/WhatsApp updates about new collections, restocks and offers — only if you have opted in; you can unsubscribe at any time.
  • To improve the Site, our product range and the shopping experience (aggregated, non-identifying analysis).
  • To detect and prevent fraud, abuse and security incidents.
  • To comply with tax, accounting and legal obligations under Indian law.

3. Cookies

We use cookies and similar technologies to keep you signed in, remember your cart, understand how the Site is used (via tools such as [Google Analytics / Meta Pixel — confirm which you use]), and personalise content and ads. You can disable cookies in your browser settings; some features of the Site may not work correctly if you do.

4. Sharing your information

We do not sell your personal information. We share it only with:

  • Service providers who help us run the business — our hosting provider, payment gateway, courier/logistics partners (for delivery), email/WhatsApp marketing tools, and IT support — each bound to use your data only to provide their service to us.
  • Legal and regulatory authorities, where required by law, court order, or to protect our rights, property or safety, or that of our customers.
  • A successor business, in the event of a merger, acquisition or sale of assets — you will be notified if your data becomes subject to a different privacy policy.

5. Data retention

We retain order and account information for as long as needed to fulfil the purposes above and to meet our accounting, tax and legal record-keeping obligations under Indian law (typically [7–8 years for financial records — confirm with your accountant]), after which it is deleted or anonymised.

6. Your rights

Under the DPDP Act, 2023, you (as a “Data Principal”) have the right to:

  • Access a summary of the personal data we hold about you and how it is processed.
  • Request correction or updating of inaccurate or incomplete data.
  • Request erasure of your personal data, unless we are required to retain it by law.
  • Withdraw consent for marketing communications at any time.
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
  • Register a grievance with us (see Section 9) and, if unresolved, approach the Data Protection Board of India.

To exercise any of these rights, email us at asg345@gmail.com with the subject line “Privacy Request”.

7. Children’s privacy

Our products are sold to adults for personal or gift purchase. The Site is not directed at children, and we do not knowingly collect personal information from anyone under 18 without verifiable consent of a parent or guardian, as required under the DPDP Act.

8. Data security

We use reasonable technical and organisational safeguards (encrypted checkout, restricted access to customer data, secure hosting) to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for Bombay Puzzle Co. is:

[Grievance Officer name]
Bombay Puzzle Co.
28, Navyug Society, V.M. Road, JVPD Scheme, Vile Parle West, Mumbai, Maharashtra – 400056
Phone: +91 98194 82717
Email: asg345@gmail.com

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page. We encourage you to review this page periodically.

11. Contact us

Bombay Puzzle Co.
28, Navyug Society, V.M. Road, JVPD Scheme, Vile Parle West, Mumbai, Maharashtra – 400056
Phone: +91 98194 82717
Email: asg345@gmail.com