Privacy policy

This policy explains how RightOrbit LLP (“Right Orbit”, “we”) handles personal data when you use rightorbit.in. It is written to meet India’s Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

What we collect

• Account details: your name, email, mobile number, password (stored only as a secure hash) and, if you add one, a profile photo. If you check out without an account, we create one from the name, email and mobile number you enter and email you a link to set your password.
• Order details: delivery addresses, the balls you buy, order history, invoices and messages you send us.
• Payment details: online payments are processed by PhonePe Payment Gateway (PhonePe Private Limited). We receive the payment reference, amount, payment method type and status; we never see or store your full card number, CVV, UPI PIN or netbanking password.
• Technical data: device and browser type, and basic logs (such as IP address and pages requested) used to keep the site secure and working.
• Visit analytics: the pages you view, how you reached us (referring site or campaign link), and, if you choose Accept all on the cookie banner, details such as your IP address, browser and version, operating system, phone model, screen size, language and time zone. See Analytics and location.
• Location: an approximate city and region worked out from your IP address. Your precise location only if you tap Use my location while entering an address; your browser asks you first.
• WhatsApp messages: if you message us on WhatsApp, your WhatsApp number, profile name, the messages, photos, documents or locations you send, and their delivery status.

Why we use it

• To create and secure your account, and let you log in.
• To process, pack, ship and track your orders, and issue GST invoices.
• To send order confirmations, shipping updates and password-reset emails.
• To handle returns, refunds, support requests and bulk-order enquiries.
• To prevent fraud and misuse, and to meet tax and legal record-keeping duties.
• To answer your WhatsApp messages and keep a record of the conversation.
• To understand which pages, cities and devices our visitors use, so we can improve the store and plan delivery.

We only send marketing messages if you ask us to, and every such message has a way to stop them.

Who we share it with

We share the minimum needed with service providers who work for us:

• Courier and logistics partners (name, phone and delivery address) to deliver your parcel.
• PhonePe Payment Gateway, our payment gateway, which receives your order amount, order reference and the payment details you enter on its page, to process payments and refunds. PhonePe handles that data under its own privacy policy and the card industry security standard (PCI DSS).
• Our email provider, to send order and account emails.
• Our hosting provider, which stores the website and its database.
• Meta (WhatsApp Business Platform), which carries WhatsApp messages between you and us.
• OpenStreetMap’s Nominatim service, which receives the coordinates (not your name) when you use Use my location.
• Government or law-enforcement authorities when the law requires it.

We do not sell, rent or trade your personal data.

Cookies

Two secure cookies keep you logged in, and your browser stores your cart if you shop before logging in. A first-party cookie (ro_vid, kept for one year) gives your browser an anonymous visitor id so we can count visits. We don’t use advertising or cross-site tracking cookies, and no third-party analytics scripts run on this site.

Analytics and location

When you first visit, a banner lets you choose Accept all or Essential only. With Essential only we record just the pages viewed, browser family and approximate city; we do not store your IP address or device details. You can change your choice at any time by clearing this site’s data in your browser.

Approximate location comes from the GeoLite2 database by MaxMind, which runs on our own server; your IP address is not sent to MaxMind. Precise location is never read in the background: only when you tap Use my location, after your browser asks your permission. It is saved with that address so the courier can find you.

When you place an order we save your IP address and browser details with it, to help detect fraud and settle payment disputes.

How long we keep it

We keep your account data while your account is open. Order and invoice records are kept for at least 8 years because Indian tax law requires it. Logs are kept for up to 180 days. Page-view analytics are deleted after 13 months. WhatsApp conversations are kept while they are useful for support and orders, and deleted on request.

Payments

When you pay online you are taken to PhonePe Payment Gateway's secure page to enter your UPI, card or netbanking details. Those details go straight to PhonePe and your bank, not to us. After payment we check its status directly with PhonePe before confirming your order, and we keep the payment reference with your order for accounting, refunds, tax records and to resolve disputes or suspected fraud.

How we protect it

The site runs over HTTPS. Passwords are hashed with Argon2, sessions use short-lived tokens, and access to customer data is limited to staff who need it to fulfil orders.

Your rights

• See and correct your profile and addresses any time from your account settings.
• Ask for a copy of the personal data we hold about you.
• Ask us to delete your account. We’ll delete what we can and keep only records the law requires.
• Withdraw consent to optional uses, such as marketing.
• Raise a grievance with our Grievance Officer, and escalate to the Data Protection Board of India if you’re not satisfied.

To use any of these rights, email contact@rightorbit.in from the email address on your account. We reply within 7 days and resolve requests within 30 days.

Children

The store is meant for adults. Anyone under 18 should shop with a parent or guardian, who is responsible for the account.

Grievance Officer

Customer Care, Right Orbit
Email: contact@rightorbit.in · Phone: +91 99668 19494
Available Monday to Saturday, 10 am to 7 pm IST.

Who we are

• Business: RightOrbit LLP (limited liability partnership), trading as Right Orbit
• LLPIN: ADA-3631
• Registered office: Ground Floor, D No. 8-3-228/294, Kandala Residency, Rahamat Nagar, Nearby Newton Grammer High School, Yousufguda, Hyderabad, Telangana - 500045
• GSTIN: 36ABOFR2776B1ZZ
• Phone / WhatsApp: +91 99668 19494
• Email: contact@rightorbit.in

Changes to this policy

If we change how we use personal data, we’ll update this page and the date at the top, and email account holders about significant changes.