Privacy policy

Last Updated: October 5, 2026


This Privacy Policy is part of our Terms and Conditions and explains how Neko Store Private Limited ("Company", "we", "us" or "our") collects, uses, discloses and protects personal data in connection with your use of www.thenekostore.com (the "Platform").


We are committed to handling personal data responsibly and in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the rules made under each of them.


By accessing or using the Platform, you agree to the collection and use of information as described in this Policy. If you do not agree with this Policy, please do not use the Platform.

1. Definitions

Data Fiduciary: The entity that determines the purpose and means of processing personal data. For the purposes of this Policy, the Company is the Data Fiduciary.

Data Principal: The individual to whom the personal data relates. In this Policy, "you" and "your" refer to the Data Principal.

Personal Data: Any data about an individual who is identifiable by or in relation to such data.

Processing: Any operation performed on personal data, including collection, storage, use, sharing, disclosure and erasure.

Consent: Your free, specific, informed, unconditional and unambiguous agreement to the processing of your personal data for a specified purpose.

2. Scope of This Policy

This Policy applies to personal data we collect through the Platform, including data collected when you:

  • create an account or log in;
  • browse or place an order;
  • enrol in or use our loyalty and rewards programme;
  • purchase, send, or redeem a digital gift card or voucher;
  • submit a product review;
  • subscribe to marketing communications; or
  • otherwise interact with the Platform, including through cookies and similar technologies.

This Policy does not apply to third-party websites or services that may be linked from the Platform. We encourage you to review the privacy practices of any third-party service before using it.

3. Information We Collect

3.1 Information You Provide Directly

  • Account and Login Information: To create an account, we use a third-party checkout and account-creation service that collects your mobile number along with other identifiers necessary to verify and authenticate you. This is currently our sole method of account creation and login. Certain services of this kind may operate as part of a shared network across multiple merchants; where this applies, your login profile may be recognised by that network beyond your interactions with us, in accordance with that service provider's own terms.
  • Order Information: Your name, delivery address, phone number, email address and order details, collected to process and fulfil your purchase.
  • Payment Information: We do not collect or store your full card, UPI or banking details. These are collected directly by our third-party payment gateway and processed in accordance with that provider's own terms and privacy practices.
  • Loyalty Programme Information: If you enrol in our loyalty and rewards programme, we may collect your purchase history, points balance, and, where you choose to provide it, your date of birth or anniversary date to extend applicable perks. If you use the programme's referral feature, we will share limited information (such as your name or referral code) with the person you refer, and may receive limited information about the person you refer in turn.
  • Gift Card Information: If you purchase a digital gift card or voucher, it is issued directly to you as the purchaser. Any decision to share or forward it to another person is made by you, and we do not independently collect the recipient's personal data as part of this process.
  • Review Information: If you submit a product review, we may collect the review text and any photos or videos you choose to upload. Providing your name with a review is optional; you may choose to submit a review anonymously.
  • Blog Comments: If you post a comment on our blog, we collect the name and email address you provide, along with the content of your comment. We do not collect photos or videos in connection with blog comments. The name you provide may be displayed publicly alongside your comment; your email address is not displayed publicly and is used only for moderation and, where necessary, to contact you about your comment.
  • Communications: If you contact us directly, including for support, returns or grievances, we collect the information you provide in that communication.

3.2 Information Collected Automatically

We use a third-party web analytics service to understand how visitors use the Platform. This may involve the collection of your IP address, device and browser information, pages visited, and usage patterns, through cookies and similar tracking technologies. See Section 7 (Cookies and Tracking Technologies) for details.

3.3 Information From Other Sources

We may receive limited information from our service providers in the ordinary course of their services to us, such as delivery status updates from our logistics partners or payment confirmation status from our payment gateway.

4. How We Use Your Information

We use your personal data to:

  • create and maintain your account, and authenticate your login;
  • process, fulfil, ship and deliver your orders, and communicate with you about them;
  • process payments through our payment gateway;
  • operate our loyalty and rewards programme, including calculating points, recognising referrals, and extending applicable perks;
  • enable the purchase and issuance of digital gift cards;
  • display and moderate product reviews, including photos and videos you choose to submit;
  • send you order-related and transactional communications;
  • send you marketing communications, where you have consented to receive them, as described in Section 8;
  • understand and improve how the Platform is used, through analytics;
  • detect, prevent and address fraud, abuse, security issues or violations of our Terms; and
  • comply with our legal, tax and regulatory obligations.

We do not sell your personal data to any third party.

5. How We Share Your Information

We share personal data with the following categories of service providers, solely for the purposes described in this Policy, and under contractual obligations that require them to protect your data:

  • Checkout and account-verification service providers, to create and authenticate your account;
  • Our loyalty and rewards platform provider, to operate the loyalty programme;
  • Our digital gift card platform provider, to issue and manage gift cards;
  • Our product review platform provider, to collect, host and display reviews;
  • Our logistics and delivery partners, to whom we provide your name, address and contact details solely to deliver your order;
  • Our payment gateway, to process your payment; and
  • Our web analytics service provider, to understand Platform usage.

We may also disclose personal data:

  • where required by applicable law, regulation, court order or government request;
  • to protect the rights, property or safety of the Company, our users, or the public;
  • in connection with a merger, acquisition, restructuring or sale of assets, subject to this Policy continuing to apply to your personal data; or
  • with your explicit, separate consent, for any purpose not otherwise described in this Policy.

Brand Partners: We share only aggregate, non-identifying metrics with our brand partners for reporting purposes. We do not share your individual personal data or identifiers with brand partners for their own marketing or retargeting purposes, unless you have given us separate, explicit consent to do so.

6. Cross-Border Data Transfer

Some of the third-party service providers we use to operate the Platform, including the underlying infrastructure that hosts certain applications and services on the Platform, may store or process personal data on servers located outside India.

Where personal data is transferred outside India, we take reasonable steps to ensure it continues to be protected in accordance with this Policy and applicable law, including the DPDP Act. By using the Platform, you acknowledge that your personal data may be processed in this manner.

7. Cookies and Tracking Technologies

We use cookies and similar technologies, including through our web analytics service provider, to:

  • remember your preferences and login state;
  • understand how visitors navigate and use the Platform; and
  • improve the performance and content of the Platform.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of certain features on the Platform.

8. Marketing Communications and Consent

We may send you marketing communications by email and, where you have provided your consent, by SMS.

  • You may be asked to consent to marketing communications at the time you create your account, and you may separately opt in to specific categories of marketing communications at a later time.
  • Requests to review a product following a purchase are considered a marketing communication under this Policy, and are sent only where you have not opted out of such communications.
  • You may withdraw your consent and opt out of marketing communications at any time by using the unsubscribe link in our emails, replying STOP to our SMS messages (where applicable), updating your preferences in your Account, or writing to us at hello@thenekostore.com.
  • Withdrawing consent to marketing communications does not affect our ability to send you transactional or order-related communications, which are necessary for us to provide our services to you.
  • We aim to honour opt-outs promptly and in accordance with applicable telecom regulations governing commercial communications in India.

9. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including:

  • Account information: for as long as your account remains active, and for a limited period thereafter to assist with any follow-up support, disputes or regulatory requirements.
  • Order and transaction records: for as long as required under applicable Indian tax, accounting and consumer protection law, which may extend up to eight years from the date of the transaction.
  • Review content: for as long as the review remains published on the Platform, or until you request its removal, subject to Section 10.
  • Marketing consent records: for as long as necessary to demonstrate compliance with applicable consent requirements.

Where personal data is no longer required for these purposes, we will delete or anonymise it, except where retention is required by law.

10. Your Rights as a Data Principal

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Correct or update inaccurate or incomplete personal data;
  • Erasure of your personal data, subject to our legal and regulatory retention obligations;
  • Withdraw consent for any processing that is based on your consent, at any time, without affecting the lawfulness of processing carried out before such withdrawal;
  • Grievance redressal, as described in Section 12; and
  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please write to us at grievance@thenekostore.com. We will respond to your request in accordance with the timelines set out in Section 12.

11. Data Security

We implement reasonable security practices and procedures, in accordance with applicable Indian law, to protect personal data against unauthorised access, alteration, disclosure or destruction. While we take reasonable steps to protect your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Grievance Redressal

If you have any complaint or concern regarding how we handle your personal data, you may reach out to our Grievance Redressal Officer:

Name: Karan Bhayani

Email: grievance@thenekostore.com

We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days of receipt, in accordance with applicable Indian data protection, consumer protection and information technology regulations.

13. Children's Privacy

The Platform is intended for use by persons who are 18 years or older, consistent with our Terms and Conditions. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, any account or purchase on your behalf must be made by your parent or legal guardian. If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete it.

14. Changes to This Policy

We may revise this Policy from time to time, at our discretion. When we do, we will update the "Last Updated" date at the top of this page. Continuing to use the Platform after a revision means you accept the updated Policy. We encourage you to review this Policy periodically.

15. Governing Law and Jurisdiction

This Policy is governed by the laws of India. Subject to Section 12 (Grievance Redressal), any dispute arising out of or relating to this Policy will be subject to the exclusive jurisdiction of the courts at Hyderabad, Telangana.

16. Contact Us

For general questions about this Policy or how we handle your personal data, write to us at hello@thenekostore.com. For requests relating to your data protection rights or grievances, write to us at grievance@thenekostore.com.