Privacy policy

Your trust matters to us 💛
This policy explains, in plain words, what personal data we collect, why we collect it, who we share it with, and the choices you have.

1. Who we are

NUR Store (“NUR”, “we”, “us”) is a proprietorship owned by Nupur Nimesh Shah, located at 310-E, Flying Colour Premises, L.B.S. Marg, Mulund West, Mumbai – 400080 (GSTIN: 27DCPPS1480A1ZH). We operate nurstore.in and decide how your personal data is used.

2. What we collect

3. Why we use it

• To fulfil your order: process payment, make, pack and deliver your pair, and send order and tracking updates on WhatsApp, SMS and email.
• To look after you: handle exchanges, returns, repairs, refunds and questions.
• To keep things safe: prevent fraud and misuse, including repeated refused Cash on Delivery orders.
• To meet legal duties: keep invoices and records as required by tax and other laws.
• To improve our website: understand which pages and products people like.
• For offers and new launches (only with your consent): send marketing messages on WhatsApp and email, and show you relevant NUR ads on social media and Google.

We will not use your personal data for any other purpose without telling you first and, where required, asking for your consent.

4. Who we share it with

We never sell or rent your personal data. We share only what is needed with trusted partners who help us run NUR:

• Shopify, which hosts our website and stores order data
• Razorpay, which processes payments
• Shiprocket and its courier partners, which deliver and return your orders
• Our WhatsApp and email messaging service providers, which send order updates and, with your consent, offers
• Our product review service, which collects and displays reviews
• Meta (Facebook and Instagram) and Google, for website analytics and advertising, through cookies and pixels
• Government authorities, only when the law requires it

Some of these partners, such as Shopify, Meta and Google, may store data on servers outside India. They are required to protect it, and we transfer data only as permitted under Indian law.

5. Cookies

Cookies are small files that help our website remember your cart and preferences, and help us understand how the site is used. We also use the Meta Pixel and Google Analytics / Google Ads to measure our ads and show you relevant NUR ads. You can block or delete cookies in your browser settings. The site will still work, but some features, such as your saved cart, may not.

6. Marketing messages: your choice

• We send offers and launch updates on WhatsApp and email only if you’ve agreed, for example at checkout, in “Spin to win”, or by subscribing.
• You can stop anytime: click unsubscribe in any email, reply STOP on WhatsApp, or write to us.
• Opting out of marketing won’t affect order, delivery or service messages.

7. How long we keep it

• Order and invoice records: for as long as tax and accounting laws require (generally up to 8 years).
• Account details: while your account is active. If you ask us to delete it, we erase what we no longer need to keep by law.
• Marketing contacts: until you unsubscribe or withdraw consent.
• Website logs: for at least one year, as required by law, and then deleted.

8. Your rights

You can ask us to:

• Access a summary of the personal data we hold about you and who we’ve shared it with
• Correct or update inaccurate or incomplete data
• Erase data we no longer need, unless the law requires us to keep it
• Withdraw consent you’ve given, as easily as you gave it. This doesn’t affect anything we did before you withdrew
• Nominate someone to exercise these rights on your behalf in case of death or incapacity
• Raise a complaint with our Grievance Officer (below)

Write to care@nurstore.in with the phone number or email linked to your orders. You can also update your details yourself under My Account on our website.

9. How we protect it

• Our website uses SSL encryption, and payments are handled by Razorpay’s secure, PCI-DSS compliant systems.
• Only team members who need your data to serve you can access it.
• We follow reasonable security practices under the Information Technology Act, 2000.
• If a data breach ever affects you, we will inform you promptly with what happened, its likely impact and the steps we’re taking, and we will report it to the authorities as required by law.

10. Children

Our website is meant for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared their data with us, please write to us and we’ll delete it.

11. Grievance Officer & data contact

For any question, request or complaint about your personal data, please contact:

We acknowledge every complaint within 48 hours and resolve it within one month. If you’re not satisfied with our response, you may approach the Data Protection Board of India once it is accepting complaints.

12. Changes to this policy

We may update this policy from time to time. We’ll post the new version here with a new date. If a change significantly affects how we use your data, we’ll let you know by email or WhatsApp.