Privacy policy
We collect only what we need to deliver your order and look after you afterwards. We don't sell your data.
Last updated 26 October 2026
Who we are
SpikeOne runs this website and is the data fiduciary for the personal data described here, under the Digital Personal Data Protection Act, 2023.
What we collect
- Phone number: to sign you in with a one-time code and send order updates on WhatsApp.
- Email address, if you give one at checkout or sign in with Google: for your receipt, and to show orders placed with that email once you sign in with it. With Google sign-in we receive only your name and email, never your Google password.
- Name and delivery address: to deliver your order.
- Order history: what you bought, when, and how you paid (not your card or UPI details, which go straight to our payment gateway).
- Messages you send us, including photos when you report a problem.
- Basic technical data: your IP address, used to stop abuse such as repeated wrong codes.
Why we use it
- To take, deliver and support your orders.
- To send messages about your orders: confirmation, shipping, delivery and refunds.
- To keep the shop secure and prevent fraud.
- To meet tax and legal record-keeping duties.
We only send offers if you've said yes, and you can say no at any time.
Who we share it with
Only the services that help us run the shop, and only what each one needs:
- Razorpay: to take online payments.
- Google Firebase: to send and check sign-in codes, and for Google sign-in.
- Meta (WhatsApp Business): to send order messages.
- Courier partners: your name, phone and address, to deliver.
- Hostinger: the server (VPS) that runs this site and its database, in a data centre we choose.
How long we keep it
Order and invoice records are kept for 8 years for tax law. Everything else is deleted or anonymised when it's no longer needed, or when you ask us to delete it.
Your rights
You can delete your account yourself from your account page. You can also ask us to show, correct or erase your personal data, withdraw consent, or name someone to act for you. Email support@spikeone.in. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.
Cookies
We use only essential cookies: one keeps your cart, one keeps you signed in, one holds a Buy now checkout for a day, and one lets you see the receipt of an order you placed without signing in, for 7 days. No advertising or tracking cookies.
Counting visits
To know which pages are useful, we count visits without cookies and without storing anything on your device. For each page we record the page, the website or link that sent you (such as Google or Instagram), and whether you use a phone, tablet or computer. To tell visitors apart for one day, we combine your IP address and browser with a random value that we replace and delete every day, and keep only the scrambled result. We never store your IP address, and the result can't be traced back to you or linked to your visits on other days. We don't record your location. If your browser sends a “do not track” or Global Privacy Control signal, we don't count you at all. Visit counts are kept for about 13 months.
Contact
Grievance officer: support@spikeone.in.