Privacy Policy

Last updated: 19 July 2026

Accio Case, a sole proprietorship registered in India (“Accio Case”, “we”, “us”) operates https://www.acciocase.store. This policy explains what personal data we collect when you browse or buy from us, why we collect it, and the rights you have over it. It is written to comply with India’s Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

1. What we collect

• Account & contact data: name, mobile number, and email address, collected when you sign in (via one-time SMS code) or check out.
• Order data: shipping address, phone customisation choices, order history, and delivery status.
• Payment data: we never see or store your card, UPI, or bank details. Payments are processed directly by Razorpay, a RBI-authorised payment aggregator, under its own PCI-DSS compliant systems and privacy policy.
• Usage data: pages visited, device/browser type, and approximate location (from IP), collected automatically via cookies and Google Analytics (GA4) to understand and improve the site.
• Communications: anything you send us by email, WhatsApp, or Instagram DM, kept to respond to your query.

2. Why we collect it

• To create your account and authenticate you by OTP.
• To take, process, manufacture, ship, and support your order.
• To send order and dispatch updates by email/SMS.
• To improve the site, catalogue, and marketing based on aggregate usage trends.
• To meet tax, accounting, and legal record-keeping obligations under Indian law.
• To send you offers or updates by email only if you’ve subscribed (“Owl Post”) — you can unsubscribe at any time via the link in any such email.

3. Who we share it with

We share only what each partner needs to do its job for us:

• Razorpay — to process payments and refunds.
• Supabase — our database and authentication provider, which stores your account and order records securely.
• Courier partners — your name, phone, and delivery address, solely to deliver your order.
• Zoho Mail / SMTP provider — to send order, account, and support emails.
• Google Analytics (GA4) — anonymised/aggregated usage data to understand site traffic.

We do not sell your personal data. We disclose it to government or law-enforcement authorities only when legally required to.

4. Cookies

We use essential cookies to keep you signed in and remember your cart, and analytics cookies (GA4) to measure site usage. You can disable non-essential cookies in your browser settings; the storefront will still function without them.

5. Data retention

We retain order and account records for as long as your account is active, and for the period required by Indian tax and consumer protection law thereafter (typically up to 8 years for financial records). You may request deletion of your account data at any time, subject to these legal retention requirements.

6. Your rights

Under the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you.
• Correct or update inaccurate or incomplete data.
• Withdraw consent for marketing communications at any time.
• Request erasure of your data, subject to legal retention obligations — see our User Data Deletion page for how to request this.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Lodge a grievance with our Grievance Officer (below) or with the Data Protection Board of India.

7. Security

We use industry-standard measures — encrypted connections (HTTPS), access-controlled databases, and OTP-based authentication (no passwords to leak) — to protect your data. No method of transmission or storage is 100% secure, but we work to protect your information to industry standards.

8. Children’s data

Our services are intended for users who can lawfully enter into a contract under Indian law. We do not knowingly collect data from children without verifiable parental/guardian consent.

9. Changes to this policy

We may update this policy from time to time; the “Last updated” date above will reflect the latest revision. Continued use of the site after a change constitutes acceptance of the revised policy.

10. Contact & Grievance Officer

In accordance with the IT Act, 2000 and rules made thereunder, the Grievance Officer will acknowledge your complaint within 48 hours and resolve it within 30 days of receipt.