Indian Gourmet (“we”, “our”, “us”) values your privacy. This Privacy Policy explains what personal information we collect when you use our website, how we use it, and the choices you have. By using Indian Gourmet, you agree to the practices described here.

• Account information. When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.
• Order information. When you place an order, we collect the items you ordered, delivery address, contact number, and payment method (we do not store full card details).
• Device data. Standard server logs (IP address, browser type, pages visited) used for security and performance monitoring.
• Local storage. Your cart and favorites are stored in your browser's local storage so they persist between visits on the same device. They are not transmitted to our servers until you place an order.

• To create and manage your account.
• To process and deliver your orders.
• To respond to support requests.
• To prevent fraud and enforce our terms.
• To improve our products and user experience.

We do not sell your personal information.

We share data only with service providers that help us operate the store:

• Google — for account sign-in (OAuth).
• KiotViet — our point-of-sale system that processes orders and inventory.
• Vercel — our hosting provider.

We may also disclose information when required by law, to protect our rights, or in connection with a corporate transaction.

We use cookies that are strictly necessary to keep you signed in (Auth.js session cookie). We do not use advertising or third-party tracking cookies.

We keep your account information for as long as your account is active. Order records are retained for up to 7 years for tax and accounting purposes. You can request deletion of your account at any time by contacting support — see Section 9.

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent and stop using the service at any time.

We use HTTPS for all traffic, encrypted cookies for sessions, and store secrets in our hosting provider's encrypted vault. No system is perfectly secure, so we cannot guarantee absolute protection against breaches.

If you have questions about this policy or want to exercise your rights, email us at support@indiangourmet.com.

We may update this policy from time to time. We'll change the “Last updated” date at the top and, for material changes, notify you by email or a prominent notice on the site.