Privacy Policy

1.1 Information You Provide Directly

When you place an order or contact us, we collect: • Full name and delivery address • Mobile number (used for order communication via WhatsApp) • Email address (optional, if provided) • Order details including products, quantities, and amounts • Payment confirmation details (we do not store UPI transaction data on our servers)

1.2 Information Collected Automatically

When you visit our website, we automatically collect: • Browser type and device information • IP address and approximate location • Pages visited, time spent, and actions taken on our site • Referral source (how you arrived at our website) This data is collected through Google Analytics and is used solely to improve our website and services.

1.3 Cookies

We use cookies to enhance your browsing experience. These include: • Essential cookies — required for the website to function (cart, session) • Analytics cookies — Google Analytics to understand website traffic • Preference cookies — to remember your language preference You can disable cookies in your browser settings, though some features may not function properly.

We use the information we collect to: • Process and fulfill your orders • Contact you on WhatsApp with payment details, order updates, and delivery information • Send you order confirmation and receipts • Respond to your queries and provide customer support • Improve our website, products, and services • Comply with legal obligations • Detect and prevent fraud or misuse of our platform • Send promotional offers (only if you have opted in — you may opt out at any time)

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these limited circumstances: • Delivery partners — We share your name, address, and phone number with our logistics/transport partners solely to deliver your order. • Payment processing — We direct you to UPI payment apps. We do not store your payment credentials. • Legal compliance — We may disclose your information if required by law, court order, or government authority. • Business transfers — In the event of a merger or acquisition, your information may be transferred to the new entity under the same privacy protections. All third parties with whom we share data are bound by confidentiality obligations.

We implement appropriate technical and organisational security measures to protect your personal data including: • HTTPS encryption on all pages • Secure MongoDB Atlas database with access controls • Rate limiting and bot protection on all API endpoints • JWT-based authentication for admin access • No storage of payment credentials on our servers While we take every precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

We retain your personal information for as long as necessary to: • Fulfill the purposes outlined in this policy • Comply with our legal obligations (typically 3-7 years for financial records) • Resolve disputes and enforce our agreements Order information is retained for a minimum of 3 years as required under Indian tax laws. You may request deletion of your personal data by contacting us, subject to legal retention requirements.

Under applicable Indian data protection laws, you have the right to: • Access — Request a copy of the personal data we hold about you • Correction — Request correction of inaccurate or incomplete data • Deletion — Request deletion of your personal data (subject to legal requirements) • Objection — Object to processing of your personal data for marketing purposes • Withdrawal of consent — Withdraw consent for data processing at any time To exercise any of these rights, contact us at sparknest.help@gmail.com or WhatsApp us at +91 6385812382. We will respond within 30 days.

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. Firecrackers and fireworks should only be purchased by adults. If you believe a child has provided us with personal information, please contact us immediately and we will delete such information.

Our website may contain links to third-party websites such as WhatsApp, Instagram, and Google. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

We use Google Analytics to understand how visitors use our website. Google Analytics collects anonymous data about your visit such as pages viewed, time spent, and device used. This data is processed by Google and is subject to Google's Privacy Policy (policies.google.com/privacy). You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: SparkNest Muneeswaran Colony, Sivakasi Tamil Nadu — 626189, India 📧 Email: sparknest.help@gmail.com 📱 WhatsApp: +91 6385812382 🌐 Website: sparknest.co.in We are committed to resolving any privacy concerns promptly and transparently.