How we keep your
information.

We only ask for what we need to send a bag of almonds to the right doorstep, and to send you a recipe now and then if you'd like one.

At checkout

• Your name, phone, email, and delivery address.
• Your order — products, quantities, totals, payment status.
• An order note, if you leave one.

If you create an account

• The same fields, plus a verified phone number and a list of past orders.

Quietly, in the background

• Anonymised browser, device and traffic data — to know which page is broken on Safari, not to know which page you are on.
• A small cart cookie so the basket survives a refresh.

Each piece of data has exactly one job. If we can't justify the job, we don't collect the data.

• To deliver your order — name, phone, address, email all flow to our courier and to your inbox for tracking.
• To process payment — handled by Razorpay; we never see or store your card or UPI details.
• To send transactional emails / SMS — order confirmations, dispatch notes, occasional refund updates.
• To improve the shop — anonymised analytics tell us which sections people read; nothing personal is tied to it.
• To send the kitchen letter — only if you ticked the box. One letter every few weeks; never daily.

A short list of trusted vendors does the work we can't do from a single laptop in Amritsar. They are bound by their own privacy notices and never hold your data for any purpose other than serving your order.

• Razorpay — payments processing.
• Shiprocket / Delhivery / India Post — last-mile dispatch.
• Cloudflare — hosting, image storage and basic security.
• ZeptoMail — transactional email delivery.

We do not sell, lease, swap or rent your information. We do not feed it to ad networks. We do not run retargeting pixels.

Order records and invoices are kept for seven years as required by Indian tax law. Account information is kept until you ask us to delete it, or until you've been inactive for two years — whichever comes first. Marketing email subscriptions live until you unsubscribe.

You own your data. You can write to the desk and ask us to:

• Show you a copy of everything we hold.
• Correct anything that is wrong.
• Delete it (we'll keep only what tax law requires).
• Stop sending you the kitchen letter.

Send any of the above to desk@nutflick.in. We reply within seven working days, often the same morning.

We use a small handful of first-party cookies — to remember your cart, to keep you logged in, and to count anonymous page-views. We do not run third-party advertising or social-tracking cookies. You can clear them in your browser at any time without breaking the shop.

The shop is meant for grown-ups. We don't knowingly collect data from anyone under 18. If you think a younger reader has signed up, write to the desk and we'll quietly remove the record.

If we materially change anything — what we collect, who we share it with, how long we keep it — we'll update the date on the plaque above and send a one-line note to anyone subscribed to the kitchen letter. The full version history is kept on file at the desk.