Privacy Notice

1. What we collect

To create an account and fulfil orders, we collect your name, contact details (email and/or phone), shipping address(es), and order history. We do not collect or store your card number, CVV, or full payment credentials — see §5.

2. Cookies & local storage

We use one strictly-necessary cookie (gg_session) to keep you signed in — it's httpOnly and can't be read by page scripts. Your cart is kept in your browser's local storage, not on our servers, until you check out. We don't use advertising, tracking, or third-party analytics cookies.

3. Why we collect it

• To process and ship your orders, and to run our rip-and-ship shows.
• To send order and shipping updates.
• To respond to support requests.
• [Add any marketing-consent basis, if applicable.]

4. AI agents and your data

Parts of our operations — customer support replies, product recommendations, and inventory management — are assisted by AI agents built on Claude (Anthropic). Where an agent needs to look up your order or account, it works from an internal reference (e.g. an order number) rather than your name, address, or phone number directly, and any action with financial or account impact is reviewed by a human before it takes effect.

5. Payments

When online payment is open, payments are processed by PayU, a licensed payment aggregator. Your card and UPI details are entered directly with PayU and never touch our servers. We store only the transaction reference and a masked summary (e.g. card network and last 4 digits) for your order history.

At times we instead ask you to arrange payment directly with us over WhatsApp — in that case no card or UPI details are entered on this site at all; payment happens directly between you and us (typically via UPI or bank transfer), and we manually mark your order paid once it's received.

6. Who we share data with

The following third parties process data on our behalf:

• PayU — payment processing when online payment is open (§5).
• [Courier partner] — delivery of your orders.
• Anthropic — powers our AI support/recommendation agents (§4).
• [Add hosting/analytics providers once finalized.]

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you can request access to, correction of, or erasure of your personal data at any time from your Account > Privacy & Consent Center, or by contacting us at ghostandgenesistcg@gmail.com.

8. Data retention

[Specify retention periods — e.g. order/invoice data retained for [X] years for tax purposes; account data retained until deletion is requested.]

9. Cross-border transfer

Some of our service providers (including Anthropic, for the AI agents in §4) process data outside India. We rely on [transfer mechanism / contractual safeguards — confirm with counsel] for these transfers.

10. Grievance Officer

Name

Mehul Kothari

Address

Unit #212, Floor 1/Level 2, MPM Times Square Mall, Sanjana Hills, 6-3-349/9, Road Number 1, Dwarakapuri, Punjagutta, Hyderabad, Telangana-500082

Contact No

+91 98493 16600

Email

ghostandgenesistcg@gmail.com

11. Data breach notification

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act, 2023 and CERT-In directions.

12. Changes to this policy

We may update this notice from time to time — for example, as we add new features or work with new service providers. The "Last updated" date at the top of this page always reflects the current version; material changes will also be flagged on this page.