Privacy policy

Last updated 5 September 2026

Epsilon (“we”) respects your privacy. This policy explains what personal data we collect when you use this website, why we collect it, and the choices you have. It is written to comply with India’s Digital Personal Data Protection Act, 2023.

What we collect

Account details: name, email address, mobile number and a hashed password (we never store your password in readable form).
Order details: delivery addresses, items purchased, payment method and payment status. Card, UPI and bank details are handled entirely by Razorpay and never reach our servers.
Technical data: IP address, browser type and pages visited, kept in server logs for security and troubleshooting.

Why we use it

To create and secure your account and to verify your email address.
To process, deliver and support your orders, including sharing your name, address and phone number with our courier partner.
To send transactional messages (order confirmation, shipping updates, password resets). Marketing emails are sent only after you confirm your subscription and you can unsubscribe at any time.
To prevent fraud and abuse and to meet legal and tax obligations.

Who we share it with

Only with service providers needed to run the store: Razorpay (payments), our courier partners (delivery), our email provider (transactional email) and our hosting provider. We do not sell personal data.

How long we keep it

Account data is kept while your account is active. Order and invoice records are retained as required by Indian tax law. Server logs are kept for up to 30 days.

Your rights

You may access, correct or request deletion of your personal data, and withdraw consent for marketing, by writing to support@epsilonbag.com. We respond within 30 days. Where we must keep order records for legal reasons, we will disable your account and restrict processing instead of deleting.

Cookies

We use one strictly necessary cookie to keep you signed in, and one anonymous cookie (a random identifier) that lets us count how many people visit each page and on which kind of device. That count is kept on our own servers, is never shared with third parties, contains no name or email, stores your IP address only in irreversibly hashed form, and is deleted after 90 days. We do not use advertising cookies or third-party analytics.

Contact

Epsilon · support@epsilonbag.com

What we collect

Account details: name, email address, mobile number and a hashed password (we never store your password in readable form).

Order details: delivery addresses, items purchased, payment method and payment status. Card, UPI and bank details are handled entirely by Razorpay and never reach our servers.

Technical data: IP address, browser type and pages visited, kept in server logs for security and troubleshooting.

Why we use it

To create and secure your account and to verify your email address.

To process, deliver and support your orders, including sharing your name, address and phone number with our courier partner.

To send transactional messages (order confirmation, shipping updates, password resets). Marketing emails are sent only after you confirm your subscription and you can unsubscribe at any time.

To prevent fraud and abuse and to meet legal and tax obligations.