Shipping Policy

HeerWay ("we", "our", "us") operates the website https://heerway.com and related WhatsApp ordering channels. We are a retail business based in Firozabad, Uttar Pradesh, selling jewellery and ethnic clothing.

For any privacy-related queries, contact us at contact@heerway.com or on WhatsApp at 919389605423.

We collect the following categories of personal data:

• Ordering information — name, phone number, WhatsApp number, delivery address, and order details when you place an order via WhatsApp.
• Contact form data — name, email, phone, and message when you submit our contact form.
• Analytics data — page views, device type, browser, approximate location (city/country), and interaction events via PostHog. This is collected only if you consent via our Cookie Banner.
• Technical data — IP address (anonymised), referrer URL, and session data collected automatically by our hosting infrastructure.

We do not collect payment card details. Payments are handled through UPI apps or bank transfers initiated outside our website.

• To process and fulfil your order and communicate order status.
• To respond to your enquiries and provide customer support.
• To improve our website, product listings, and user experience using aggregated analytics.
• To send order confirmations and delivery updates via WhatsApp (only for customers who have initiated an order).
• We do not use your data for unsolicited marketing without your explicit consent.

Under the Information Technology (Amendment) Act, 2008 and the Digital Personal Data Protection Act, 2023 (DPDPA):

• Contract performance — processing your order requires handling your contact and address details.
• Legitimate interest — analytics to improve our business, with your consent via cookie banner.
• Consent — analytics cookies and retargeting are only activated after you accept via our Cookie Banner.

We share your personal data only with:

• Delivery partners (Delhivery, Shiprocket, or similar) — solely to fulfil your delivery.
• Supabase — our database and infrastructure provider (data stored on servers in the EU/Singapore).
• Cloudinary — for image storage (product images only, no personal data).
• PostHog — analytics provider, only if you accept cookies. PostHog data is anonymised and cannot identify you personally.

We never sell your personal data to third parties.

• Order data: retained for 3 years for accounting and legal compliance.
• Contact form submissions: retained for 1 year then deleted.
• Analytics data: retained for 12 months, then automatically purged by PostHog.

Under DPDPA 2023 and applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention obligations).
• Withdraw consent for analytics at any time by clearing your cookie preferences.

To exercise any of these rights, email us at contact@heerway.com. We will respond within 30 days.

We use cookies for analytics purposes only. See our Cookie Policy for full details. You can manage your preferences via the Cookie Banner at the bottom of any page.

We implement industry-standard security measures including encrypted database connections (TLS), Row Level Security on our database, and server-side authentication for admin access. WhatsApp conversations are protected by WhatsApp's end-to-end encryption.

We may update this policy from time to time. The effective date at the top of this page will be updated accordingly. Continued use of our website after changes constitutes acceptance.

For any privacy concerns: contact@heerway.com or WhatsApp at 919389605423.