Privacy Policy

Yaksha Rituals - a brand of Rayak International LLP

1. Introduction

Rayak International LLP ("Company", "we", "us", "our"), operating the Yaksha Rituals website ("Website"), is a "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This Privacy Policy explains how we collect, use, store, share, and protect your personal data as a "Data Principal" under the DPDP Act, and the rights available to you.

By using the Website and providing your personal data, you consent to its processing as described in this Policy. If you do not agree, please discontinue use of the Website.

2. Personal Data We Collect

We collect personal data that you voluntarily provide, including:

Identity and contact data: name, phone number, email address, and delivery/billing address.

Order data: products purchased, order value, and order history.

Communication data: messages, photographs, or other information you share with us via WhatsApp or email for support, refund, or grievance purposes.

Technical data: IP address, browser type, device information, and usage data collected automatically through cookies.

3. Purpose and Lawful Basis for Processing

Under the DPDP Act, we process your personal data only for specified, lawful purposes, and only with your consent or as otherwise permitted by law. Our purposes are:

To process, fulfil, and deliver your orders.

To review and act on damage claims and refund requests, including photographic evidence you submit.

To respond to your queries and provide customer support.

To send transactional updates about your orders, and marketing communications where you have separately opted in.

To maintain records as required for accounting, tax, or legal compliance.

To improve the Website's functionality and user experience.

4. Notice and Consent

Notice: By providing your personal data at checkout or through our contact channels, you are informed of the data being collected and the purpose for its processing as outlined in this Policy.

Consent: Your provision of personal data constitutes free, specific, informed, unconditional, and unambiguous consent to its processing. For certain uses (e.g., promotional marketing), we will seek explicit consent.

Withdrawal of Consent: You may withdraw your consent at any time by contacting us. However, withdrawal will not affect the legality of processing conducted prior to the withdrawal, and it may prevent us from fulfilling an active order or providing further services.

5. Processing of Children's Data

Our Website and products are not intended for use by individuals under the age of 18 ("Child"). We do not knowingly collect personal data from a Child without verifiable parental or lawful guardian consent. We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.

6. Data Sharing and Disclosure

We do not sell or rent your personal data. We may share your data with trusted third-party "Data Processors" strictly for the purpose of operating our business, under valid contracts ensuring data protection:

Logistics partners (e.g., Shiprocket) to deliver your orders.

Payment gateways (e.g., Cashfree) to process secure payments. Note: We do not store your credit card or UPI details on our servers.

E-commerce platform providers (Shopify) hosting our Website.

We may also disclose your data if required by law, court order, or governmental authority to protect our rights or comply with legal obligations.

7. Data Security

We implement reasonable security safeguards, including encryption, secure servers (provided via Shopify), and access controls, to protect your personal data from unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable laws (such as tax or commercial record-keeping obligations). Once the purpose is served and retention is no longer legally required, we will erase your data.

9. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights regarding your personal data:

Right to Information: To request a summary of the personal data we process, the processing activities, and the identities of other Data Fiduciaries/Processors with whom your data has been shared.

Right to Correction and Erasure: To request the correction, completion, updating, or erasure of your personal data.

Right of Grievance Redressal: To register a grievance regarding our processing of your data (see Section 11).

Right to Nominate: To nominate an individual to exercise your rights in the event of your death or incapacity.

10. Duties of the Data Principal

As a Data Principal, you must:

Provide verifiable and authentic information.

Not impersonate another person.

Not register false or frivolous grievances.

11. Contact and Grievance Officer

If you have questions about this Policy or wish to exercise your rights, please contact our Grievance Officer:

Name: Durvesh Kumar

Email: rayakinternational@gmail.com

WhatsApp: +91 92969 32757

We will respond to your requests and grievances in a timely manner as prescribed by law.

12. Cookies and Tracking

Our Website uses cookies to improve user experience, remember your preferences, and analyse site traffic. You can manage or disable cookies through your browser settings, though this may affect your ability to use certain Website features.

13. Cross-Border Data Transfer

As our Website is hosted on Shopify, your data may be stored or processed on servers outside of India. We ensure such transfers comply with applicable laws and that your data remains protected to the standard required by Indian law.

14. Third-Party Links

Our Website may contain links to third-party sites. We are not responsible for the privacy practices or content of any third-party website, and we encourage you to review their privacy policies separately.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law, including the DPDP Act and its rules. Continued use of the Website after changes are posted constitutes your acceptance of the revised Policy.

Last updated: September 27, 2026