Privacy Policy

1. Information we collect

We collect information you provide directly to us:

• Name, email address, and phone number (when you create an account or place an order)
• Delivery address and billing address
• Order history, cart contents, and browsing preferences on our site
• Messages you send us via our contact form, email, or WhatsApp

We also collect technical information automatically: IP address, browser type, device identifiers, pages visited, and referring URL. This is collected via cookies and server logs.

2. How we use your information

• Process and fulfil your orders, including dispatch, tracking, and delivery coordination
• Send order confirmations, shipping updates, and GST invoices
• Respond to your enquiries and provide customer support
• Improve our website, product listings, and shopping experience
• Send promotional communications (only with your consent — you may opt out at any time)
• Comply with applicable Indian laws and tax regulations (GST)

3. Payment information & Razorpay

All payment transactions on our website are processed by Razorpay Software Private Limited, a PCI-DSS compliant payment gateway. Little eXtra does not store, transmit, or have access to your card number, CVV, UPI PIN, or net-banking credentials. These are handled entirely by Razorpay on their secure servers.

Razorpay's own privacy policy governs their handling of payment data. You can review it at razorpay.com/privacy.

4. Cookies

We use essential cookies to keep your cart, session, and login state intact. We may also use analytics cookies (e.g. to understand page performance) and preference cookies. You can control non-essential cookies through your browser settings, though this may affect some site functionality.

5. Third parties we share data with

We share your information only with the parties necessary to deliver your order and operate our service:

• Razorpay — payment processing
• Courier and logistics partners (e.g. Shiprocket, Delhivery, Blue Dart) — for delivery of your order
• Email and SMS providers — for transactional notifications
• Tax and GST compliance systems — for invoice generation

We do not sell, rent, or trade your personal information to any third party for their marketing purposes.

6. Data retention

We retain your personal data for as long as your account is active and for a period thereafter as required by Indian law (including GST records, which must be retained for at least 6 years). You may request deletion of your account data at any time subject to these legal obligations.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your account and personal data (subject to legal retention requirements)
• Opt out of marketing communications at any time
• Lodge a complaint with a relevant authority if you believe your data has been misused

8. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data transmitted between your browser and our servers is encrypted via HTTPS/TLS.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified on this page with a revised “Last updated” date. Continued use of our website after a change constitutes acceptance of the updated policy.