Privacy Policy

This website and the F&S store are operated by F&S Official (“F&S”, “we”, “us”), based in Pune, Maharashtra, India. This policy explains what personal information we collect when you visit the site, create an account or place an order, why we collect it, who we share it with, and the choices you have.

If you have any question about this policy or your information, contact us using the details in Contact and grievances.

Personal and account information

• Your name and email address when you create an account or place an order.
• Your password, if you set one. We store only a one-way (hashed) version of it, never the password itself.
• Your mobile number, if you sign in with a one-time code sent to it by SMS.
• If you choose to sign in with Google: the name, email address and Google account ID that Google shares with us.

Contact information

• Your email address, and the phone number you give with a delivery address.
• What you write to us — emails, Contact page messages (with any order number you include), privacy requests and grievances.

Shipping and billing information

• The name, address, city, state, postal code and phone number you enter at checkout.
• Saved addresses in your account, if you choose to save them.
• The delivery address is also kept with each order, so the order record shows where it was actually sent even if you later change your saved address.

Order information

• What you ordered, prices, discounts or coupon codes used, taxes, shipping and any Cash on Delivery fee.
• Order status, delivery and tracking updates, cancellations, and any return or exchange you request — including the reason you give and any photos you upload with it.

Payment information

• Online payments are processed by our payment gateway, Razorpay. You enter your card, UPI or bank details on the Razorpay payment form; we never receive or store your full card number, CVV, UPI PIN or banking password.
• We receive and keep the payment's status, amount, and Razorpay's payment and order reference numbers.
• For Cash on Delivery, we record whether and when the amount was collected.

Device and browser information

• Your browser type, operating system and device type (phone, tablet or computer) — read from the information your browser sends with each request — used for analytics only if you allow analytics cookies.
• When you place an order, a one-way hash (a scrambled code that can't be turned back into the original) of your IP address and browser details, used to detect the same device being used across many accounts for fraud.

IP address and analytics data

• If you allow analytics cookies: the pages and products you view, searches, items added to or removed from your bag, checkout steps, how you arrived at the site (for example a search engine, social media or a campaign link), and roughly how long pages are viewed.
• Your approximate location (country, state and city), estimated from your IP address. The IP address itself is not stored with this analytics data. We never collect your precise (GPS) location.
• Security logs: when someone signs in, fails to sign in, or tries to reach restricted parts of the site, we record the IP address, its approximate location and the time, to detect and block attacks on accounts and on the store.

Reviews

• Product reviews you post, which are public and shown with the name on your account.

• Directly from you — when you create an account, place an order, save an address, request a return, write a review, subscribe to emails or contact us.
• Automatically — through essential cookies that make the store work, and, only if you allow them, analytics cookies. See our Cookie Policy.
• From service providers — payment status from Razorpay, delivery updates from our shipping partner (Shiprocket), sign-in details from Google if you choose to sign in with Google, and delivery/open/click events for the emails we send, from our email provider.

• Order processing and delivery — to take payment, pack and ship your order, send order and delivery updates, and handle cancellations, returns, exchanges and refunds.
• Your account — to let you sign in, see your orders and manage your details and preferences.
• Customer support — to answer your questions and resolve problems and grievances.
• Fraud and security prevention — to protect you and us from fraud and abuse. When an order is placed, its details (items, amount, payment type, coupon, your name, email, phone, delivery address and IP address) are checked by our fraud-prevention system, which scores the order's risk. We also use order history — for example repeated failed Cash on Delivery deliveries — to decide whether options such as Cash on Delivery or coupons stay available on an account. A person reviews any order held for this reason.
• Marketing communications — to send newsletters and offers, only if you subscribed to them. See Marketing communications.
• Analytics and website improvement — to understand how the store is used and improve it, only if you allow analytics cookies.
• Legal and accounting obligations — to keep invoices and records we are required to keep, and to respond to lawful requests from authorities.

We do not sell your personal information, and we do not use it to make decisions with legal effects about you without a person reviewing them.

We only send newsletters, offers and new-collection emails if you subscribed. Placing an order or creating an account does not sign you up. Order and account emails (confirmations, shipping updates, password resets) are not marketing and are sent whenever they relate to something you did.

We use our email provider's reports of whether an email was delivered, opened or a link in it was clicked, to see how our emails perform and to stop emailing addresses that bounce or report spam.

You can stop marketing emails at any time with the unsubscribe link in every one of them, from Account → Email preferences, or by contacting us.

We share personal information only with service providers who need it to do their job for us, and only what they need:

• Payment gateway — Razorpay, to process online payments. Razorpay handles your payment details under its own privacy policy.
• Shipping — Shiprocket and the courier it assigns to your parcel, who receive your name, delivery address, phone number and parcel details to deliver (and, for returns, collect) your order.
• Email delivery — Brevo, which sends our emails on our behalf.
• Customer support mailbox — our support inbox is a Gmail account (Google), which holds the emails and Contact page messages you send us.
• Sign-in — our SMS provider (2Factor), which receives your mobile number to send your one-time sign-in code; and Google, if you choose to sign in with Google.
• Hosting and data storage — Vercel (website) and Supabase (database, with servers in Singapore).
• Analytics and advertising providers — none today. Our analytics are first-party (run by us, on our own systems). If we add a third-party analytics or advertising service, it will only load for visitors who allow that category of cookies, and we will update this policy.

We may also disclose information if the law requires it, to respond to valid legal process, or to protect the rights, property or safety of our customers, ourselves or others. If our business is sold or merged, customer information may transfer to the new owner, who would have to honour this policy.

Some of these providers may store or process information outside India. We only use providers that commit to protecting it.

• Account information — while your account is open. You can ask us to delete it at any time (see Account deletion).
• Orders, invoices and payment records — for as long as tax, accounting and other laws require us to keep them, even if you delete your account.
• Security logs — deleted after 180 days.
• Emails and Contact page messages — in our support mailbox for as long as we need them to help you and to keep a record of what was agreed.
• Analytics — individual page and product events are deleted after 90 days; visit summaries (without the individual events) after about 13 months. Aggregated daily totals that can't identify anyone may be kept longer.
• Cookie choices — an anonymous record of each choice (no name, email or IP address), kept as proof of what was chosen.
• Privacy requests and grievances — for as long as we need them to handle the request and show how it was handled, and as long as the law requires.
• Fraud-prevention records — for as long as they are needed to prevent fraud and abuse.

• The site is served over an encrypted connection (HTTPS).
• Passwords are stored only as one-way hashes; sign-in sessions use secure, HTTP-only cookies.
• Card and bank details are entered on Razorpay's payment form and never reach our systems.
• Access to customer information in our admin tools is limited to authorised staff, who must sign in with a password and an authenticator code; requests to the site are checked to block forged submissions from other websites.
• Sign-in attempts are monitored, and repeated failures are temporarily blocked.
• Return photos are stored privately and shown only to you and our staff.

No website or storage system can be guaranteed completely secure. If we become aware of a breach affecting your information, we will notify you and the relevant authorities where the law requires.

Depending on the law that applies to you, you may have the right to:

• Access the personal information we hold about you, and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your account and personal information (see Account deletion).
• Withdraw consent you gave — for marketing emails or optional cookies — at any time.
• Object to marketing, and to other uses of your information, where the law allows.
• Raise a grievance with us, and with the relevant authority if you are not satisfied with our response.

How to use these rights

• Signed in, go to Account → Settings to update your details, download a copy of your data, or request account deletion.
• Or send a request from our Grievance Redressal page, or email contact.fandsofficial@gmail.com.

To protect your information, we may need to confirm your identity before acting on a request — for example by asking you to make it while signed in, or to reply from the email address on your account. We acknowledge every request within 48 hours and aim to respond within one month.

You can ask us to delete your account from Account → Settings or through the Grievance Redressal page. When we delete an account, we remove your name, email address, password, saved addresses, wishlist, bag, email preferences and analytics history from it, unsubscribe you from marketing, and close the account so it can no longer be signed in to.

We keep the records the law requires or that are needed to prevent fraud — such as orders, invoices and payment records, which include the delivery details used for each order — as described in How long we keep information. An account can't be deleted while one of its orders, returns or exchanges is still in progress; we'll complete it once they are finished.

Optional cookies (analytics, marketing, preferences) are only used if you allow them, and you can change your choice at any time: open Cookie Settings, or use “Cookie Settings” in the footer of any page. Our Cookie Policy lists every cookie we use.

Our store is not directed at children, and you must be at least 18 years old to create an account or place an order. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

Our site may link to other websites, and online payments are completed on Razorpay's payment form. Those sites and services are run by others under their own privacy policies, which we don't control — please read them before giving them your information.

We may update this policy as our store, services or legal requirements change. The “Last updated” date at the top shows when it last changed. If we make a significant change, we will tell you by email or with a notice on the site before it takes effect, and ask for your consent again where the law requires.

F&S Official
Pune, Maharashtra, India
Email: contact.fandsofficial@gmail.com

Grievances and privacy requests: F&S Official — Customer Grievance Support, contact.fandsofficial@gmail.com. We acknowledge every grievance within 48 hours and aim to resolve it within one month.

You can also send a privacy request or grievance from our Grievance Redressal page.