Privacy Policy
Last updated: 27 April 2026. Plain-English explanation of what we collect, why, and what we do with it.
The short version
We collect the bare minimum needed to ship your Oruky and (if you opt in) tell you when a new drop lands. We don't sell your data. We don't run third-party ad trackers. We comply with India's Digital Personal Data Protection Act, 2023 (DPDP) and the EU GDPR for international visitors.
Who is the data fiduciary
Adalwin Commerce™ LLP (operating the Oruky brand), part of Adalwin Group, with studios in Pune and Gurgaon, India, acts as the data fiduciary for the personal data we handle. Email privacy@oruky.com for any data-related request.
What we collect, and why
- Order details — name, email, phone, shipping address, items ordered. Used to fulfil and ship your order.
- Payment data — handled entirely by Razorpay. We never see or store your full card or UPI details.
- Email (newsletter) — only if you opt in. Used to send drop alerts and order updates. Unsubscribe in one click from any email.
- Site analytics — anonymised page-view data (no personal identifiers, no third-party ad trackers) so we know which pages people use most.
- Support requests — when you email us, we keep the thread to follow up.
Who we share data with (and why)
- Razorpay — to process payments.
- Shipping partners (DTDC, Delhivery, Bluedart, DHL Express for international) — to deliver your order.
- Resend — to send transactional and (opt-in) marketing email.
- Vercel — to host this website and process server logs.
We do not sell your personal data, ever. We do not share it with advertisers or data brokers.
How long we keep data
- Order records — 7 years (Indian tax compliance).
- Newsletter subscribers — until you unsubscribe.
- Support tickets — 2 years from the last reply.
- Site analytics — 14 months, then aggregated.
Your rights under DPDP / GDPR
You can ask us at any time to:
- Access the personal data we hold about you.
- Correct anything that's wrong.
- Erase your data (subject to tax-record retention).
- Withdraw consent for marketing emails.
- Port your data to another service.
Send any of these requests to privacy@oruky.com. We respond within 30 days as required by DPDP.
Cookies
We use a single first-party cookie to remember your day/night theme preference. We do not use third-party advertising or behavioural tracking cookies on this site. Cart and session state are stored in your browser's local storage and never sent to third parties.
Children
Oruky products are designed for ages 14+. We do not knowingly collect personal data from children under 14. If you believe a child has provided us data, write to privacy@oruky.com and we'll delete it.
Security
All traffic to oruky.com is encrypted via TLS 1.3. Payment processing happens on Razorpay's PCI-DSS-certified infrastructure. Our admin systems are protected by HTTP Basic Auth and Vercel Deployment Protection.
Updates
We may update this policy from time to time; the version in force is the one on this page. Major changes will be announced via email to subscribers.