Who we are
yaalgo.com is operated by YAALGO GLOBAL PRIVATE LIMITED, 2/12A, Rail Vihar Colony Rd, Vikalp Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226028. For privacy questions or requests, write to support@yaalgo.com or to our Grievance Officer.
What we collect
- Account details: your name, email address and phone number, and your password (held by our sign-in provider, never visible to us). If you sign in with Google, we receive your name and email address from Google.
- Delivery and billing addresses you enter or save.
- Your orders, returns and refunds, and messages you send our support team.
- Payment information: payments are handled by Razorpay. We receive the payment's status, amount, method and reference numbers — never your full card number or UPI PIN.
- Technical data needed to run the site securely, such as your IP address and browser type.
Cookies and local storage
We use cookies to keep you signed in (accessToken, refreshToken) and to protect your account from cross-site requests (csrfToken). Your cart and wishlist are stored in your browser's local storage. We do not use advertising cookies on yaalgo.com.
Why we use it
- To take, pay for, deliver, cancel, return and refund your orders.
- To send you order updates by email, and by WhatsApp only if you opt in.
- To provide customer support and handle complaints.
- To prevent fraud and misuse.
- To meet legal obligations, such as keeping tax invoices and order records under GST law.
Who we share it with
- The seller and supplier fulfilling your order, and our courier partners — your name, phone number and delivery address, so the parcel can reach you.
- Razorpay, to process payments and refunds.
- Our service providers: hosting (Google Cloud, Singapore), database and sign-in (Supabase, Mumbai), email delivery, and WhatsApp messaging (Meta) if you opt in.
- Authorities, where the law requires it.
- We do not sell your personal data.
How long we keep it
We keep your account data while your account is open. Order, invoice and payment records are kept for 72 months from the due date of the annual return for the financial year they relate to (Section 36 of the CGST Act, 2017, read with Rule 56(16) of the CGST Rules), and longer where an appeal or other proceeding is pending, even if you close your account.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask for a summary of the personal data we hold about you, have it corrected or erased (except where the law requires us to keep it), withdraw consent you have given, and raise a grievance. Write to support@yaalgo.com; we will respond within the time the law requires.
Security
Data is encrypted in transit, access is limited to staff who need it, and payments are handled by a PCI DSS-compliant payment gateway.
Children
Yaalgo is not intended for anyone under 18 shopping without a parent or guardian.
Changes
We will post any change to this policy here, with a new date at the top.