Atelier Privacy Policy

1. Overview & Scope

Good Fills ("we", "our", "us"), operating as an artisanal atelier in Bengaluru, Karnataka, India, is committed to safeguarding the privacy and personal data of our customers ("you", "your").

This Privacy Policy outlines how we collect, handle, process, and protect your personal information in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

We only collect information strictly necessary to fulfill your artisanal food and skincare orders:

• Contact Information: Full name, 10-digit mobile phone number, and email address.
• Shipping & Delivery Information: Street address, apartment/flat number, landmark, city, state, and 6-digit postal pincode.
• Customer Account Profile: If you sign in via Google or Email/Password, we store your authenticated email, name, and saved shipping addresses securely in our customer directory.
• Order Telemetry & Logs: Order reference ID (e.g. ORD-3595), items ordered, DTDC courier tracking number, and transaction capture status.

3. Payment Security & Gateway Processing

We operate an entirely digital, cashless payment flow powered by Razorpay:

• When you pay via UPI (Google Pay, PhonePe, Paytm, BHIM, or any bank UPI app), your transaction is authorized directly within your UPI app or bank terminal.
• Good Fills receives only an encrypted cryptographic transaction reference ID confirming payment capture. We never store, log, or have access to your bank account numbers or authorization PINs.
• Razorpay is certified as a PCI-DSS Level 1 compliant service provider, adhering to the highest global banking security standards.

4. How We Use Your Information

Your data is used strictly for legitimate operational purposes:

1. To mill, pack, and prepare your bespoke creations in our Bengaluru kitchen.
2. To print the official shipping manifest and courier label for DTDC Domestic Express.
3. To transmit transactional notifications via SMS and WhatsApp (order confirmation, dispatch alerts, and DTDC AWB tracking updates).
4. To provide customer support and address any inquiries submitted via our Concierge desk.
5. To maintain account order history and saved delivery addresses in your Customer Hub.

5. Trusted Operational Service Providers

We share your data only with verified operational partners required to run our atelier:

• DTDC Domestic Express: Name, delivery address, and phone number are provided to the courier for doorstep package delivery and delivery confirmation SMS.
• Razorpay Software Pvt. Ltd.: Order financial details for secure UPI payment processing and automated refund settlements.
• Supabase Auth: Secure, encrypted authentication tokens for 1-click Google Sign-In and account security.

6. Data Retention & Customer Rights

We retain customer order records as required by Indian accounting standards, GST regulations, and food safety traceability mandates.

You have the right to:

• Access, inspect, or update your saved shipping addresses anytime in your My Account Hub.
• Request deletion of your account and registered profile by contacting our Concierge desk.

7. Grievance Redressal & Nodal Officer

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, the details of our Grievance Officer are provided below: