Privacy Policy

caseorbit ("we", "us", "our") operates caseorbit.in. This policy explains what personal information we collect, how we use it, and the choices you have. We're a small studio in Mumbai — we treat your data like we'd want ours treated.

Who we are

caseorbit is operated by Sachin Kanchan Singh, sole proprietor, trading as Case Orbit. Under India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary responsible for your personal data.

• Registered address: Room No-347, Indira Nagar, V.A.D. Road, Wadala East, near Barkat Ali Baba Dargah, Mumbai, Maharashtra 400037, India
• GSTIN: 27OMKPS0508H1ZL
• Email: hello@caseorbit.in

What we collect

When you place an order or create an account we collect:

• Your name, email address and phone number
• Your shipping address
• Order history and preferences
• Payment information is never seen or stored by us — it goes directly to our payment gateway (Razorpay) which is PCI-DSS certified. We only receive a payment identifier.

When you browse the site we log standard technical information (IP address, browser type, pages viewed) for security and troubleshooting, and — only with your prior consent — we use Google Analytics to understand how visitors use the site (see the Cookies section below). We do not use advertising or cross-site tracking cookies.

How we use it

• To process, pack, and deliver your orders from our Mumbai studio
• To send order confirmations, shipping updates, and reply to your support enquiries
• To keep your account secure (rate limiting, fraud checks)
• To understand aggregate site usage and improve our products

We never sell your personal data. We do not send marketing emails without your explicit consent.

Who we share it with

We share the minimum necessary data with the following service providers, all under written data-processing terms:

• Razorpay — payment processing (name, email, phone, order amount)
• Shiprocket and its courier partners — delivery (name, address, phone, order contents)
• Resend and Zoho Mail — sending transactional email
• Supabase — database + authentication hosting
• Vercel — website hosting
• Google Analytics (Google LLC; Google Ireland Ltd for EEA visitors) — website usage analytics

We disclose personal information to law-enforcement authorities only where legally required (a court order or valid summons under Indian law).

International data transfers

Some of our processors (including Google, Vercel, Supabase, and Resend) store or process data on servers located outside India. Where this happens, the transfer is protected by Standard Contractual Clauses or equivalent safeguards, and only the minimum data needed for that service is shared.

How long we keep it

• Order, invoice and tax records: 7 years, to comply with GST and Companies Act record-keeping rules
• Account data: up to 24 months after you close your account
• Marketing consent records: until you withdraw consent

Your rights

Under the Digital Personal Data Protection Act, 2023, you may at any time:

• Ask what data we hold about you (data-access request)
• Ask us to correct or update inaccurate data
• Ask us to delete your account and personal data (note: order records must be retained per tax rules)
• Withdraw a consent you previously gave (this won't affect processing already carried out)
• Nominate someone to exercise your rights in the event of death or incapacity
• Raise a grievance about how we handle your data (see Grievance Officer below)

To exercise any of these rights, email hello@caseorbit.in from the email address on your account. We respond within 15 business days.

Children

caseorbitis not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we'll delete it.

Cookies

We use essential cookies to run the site. Google Analytics cookies are set only with your prior consent. On your first visit a consent banner lets you choose Accept all, Only essential, or Reject all — analytics cookies load only if you choose Accept all. You can change your choice at any time from the Cookie preferenceslink in the footer. If you choose essential-only, reject, or ignore the banner, no analytics cookies are set, and we honour your browser's Do Not Track signal.

We also save your device and phone-model preferencein your browser's local storage (about 30 days) so we can show you cases and accessories that fit your phone. This stays on your device, is never sent to us or used to track you, and you can clear it anytime from your browser settings.

Security

All traffic to our site is encrypted with HTTPS. Passwords are hashed (never stored in plain text). Payment details go directly to Razorpay and never touch our servers. Access to our production database is restricted to named administrators over multi-factor authenticated sessions.

No online service is perfectly secure. If you notice something suspicious, please tell us immediately at hello@caseorbit.in.

Grievance Officer

In line with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you can reach our Grievance Officer with any privacy concern or complaint:

• Name: Sachin Singh
• Email: support@caseorbit.in
• Phone: +91 87797 48080
• Address: Room No-347, Indira Nagar, V.A.D. Road, Wadala East, near Barkat Ali Baba Dargah, Mumbai, Maharashtra 400037, India

We acknowledge every grievance within 48 hours and work to resolve it as quickly as possible.

Changes to this policy

We'll update this page if practices change. Material changes are announced by email to registered customers at least 15 days before taking effect.

Contact

Case Orbit
Room No-347, Indira Nagar, V.A.D. Road, Wadala East, near Barkat Ali Baba Dargah, Mumbai, Maharashtra 400037, India
Email: hello@caseorbit.in