• Order details you give us at checkout: name, phone number, email, delivery address and order notes.
• Messages you send through our contact form, email or WhatsApp.
• Records of payments we receive (amount, date, reference), but never your card or bank login details.
• Your shopping bag and your store choice (India or USA), which are stored only in your own browser and never sent to us until you place an order.
• Your approximate country, read from your connection by our host, used only to suggest the right store. It is not stored.

We never ask for or store card numbers, UPI PINs or online banking passwords. This site uses no advertising or analytics cookies and no tracking pixels, and we do not sell or share personal data for advertising.

• To confirm, pack, ship and support your order, including returns, refunds and customs paperwork for US orders.
• To reply to your questions.
• To meet legal, tax and accounting obligations.

We share only what each service needs to do its job:

• Courier and postal partners in India and the USA, and customs authorities for international parcels: name, phone, address and parcel contents.
• Payment providers or banks you pay through, to receive and reconcile your payment.
• Supabase (supabase.com), the database where your order and messages are stored.
• Web3Forms (web3forms.com), the service that emails us an alert about your order or message.
• Our website host, Vercel, which serves the site and keeps standard server logs.

We never sell or rent your personal data.

We are based in India, so if you order from the USA your data is sent to and processed in India. Some of our service providers (such as our website host, database and form service) may process data in other countries. We only use providers that protect it appropriately.

Order records are kept for as long as tax and consumer law requires (generally up to 8 years). Contact messages are deleted once they are no longer needed to help you.

Wherever you live, you can ask us to tell you what personal data we hold about you, correct it, delete it, or withdraw consent, by emailing support@pepcarestore.com. We respond within 30 days and will not treat you differently for asking.

US residents: we do not sell or share personal information, and we do not use it for targeted advertising. You can make the requests above on your own behalf or through an authorised agent.

You can also raise a concern with our grievance officer (details on the contact page).

This site is not directed at children under 18, and we do not knowingly collect their personal data.

The site is served only over HTTPS, and access to order emails is limited to the people who fulfil your order.

If we change this policy, we will update the date at the top of this page.