Privacy policy
We collect the minimum personal data needed to sell you something, deliver it, support you afterwards, and meet our legal obligations. This page states exactly what that is and what you can do about it.
Last updated 10 September 2026 · Questions? Talk to a human
Who we are
This website is owned and operated by Patel KishanKumar SureshBhai, trading as Weekend Cart, having its place of business at C-402, Shiv Bhakti Apartment, Chikuwadi Road, Harinagar-3, Udhna, Surat, Gujarat, 394210, India (referred to as "we", "us" or "WeekendCart").
Udyam (MSME) registration number: UDYAM-GJ-22-0670828.
For the purposes of the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary in respect of the personal data described below. You are the Data Principal.
This policy is published under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and under Section 5 of the Digital Personal Data Protection Act, 2023.
What we collect and why
We collect only what a purpose actually requires. Each item below is tied to the specific purpose it serves.
| Data | Why we collect it |
|---|---|
| Name, email address, phone number | To create your account, confirm your order and contact you about it |
| Mobile number and one-time codes | To sign you in by SMS code when you choose to. We store only a scrambled (hashed) form of each code, and delete it within two days |
| Delivery and billing addresses | To deliver your order and raise a correct invoice |
| Order history and cart contents | To fulfil orders, handle returns and show you your own orders |
| Payment status and reference number | To confirm payment and process refunds |
| Last four digits and card network | So you can recognise which card you used. We never receive the full number |
| GSTIN, if you supply one | To raise a business invoice you can claim input credit on |
| IP address, browser and device type | To keep the site secure and to detect fraudulent orders |
| Pages visited on this site | To measure and fix the site |
Consent and lawful basis
We process your personal data on one of two bases. Most processing happens because it is necessary for the specific purpose for which you voluntarily gave us the data — placing an order, for example. Marketing communications happen only on your consent.
Marketing consent is never bundled with a purchase. The newsletter checkbox is unticked by default, and you can withdraw consent at any time from your account settings or by using the unsubscribe link in any message. Withdrawing consent is as easy as giving it, and it does not affect processing already carried out.
What we do not do
- We do not sell your personal data to anyone, for any price.
- We do not store your full card number, CVV, UPI PIN or net-banking password. We never see them.
- We do not use dark patterns to obtain marketing consent.
- We do not process data belonging to children under 18 knowingly, and we do not run behavioural advertising or tracking directed at children.
How long we keep it
We erase personal data once the purpose it was collected for is served, unless a law requires us to keep it longer.
| Data | Retention | Why |
|---|---|---|
| Invoices and order records | 8 years | Required under Indian tax law |
| Delivery addresses | Until you delete them | So checkout stays fast |
| Support conversations | 24 months | To resolve repeat issues |
| Website and session logs | 12 months | Security and troubleshooting |
| Marketing preferences | Until you unsubscribe | So we honour your choice |
Your rights
Under the Digital Personal Data Protection Act, 2023 you have the following rights. To exercise any of them, write to us at the address in the next section. We respond within 30 days.
- Right to access — a summary of the personal data we hold about you and the processing we have carried out.
- Right to correction and completion — to have inaccurate or incomplete data corrected or updated.
- Right to erasure — to have your personal data deleted, except where we are legally required to retain it.
- Right to grievance redressal — to complain to us first, using the channel below.
- Right to nominate — to nominate another individual who may exercise these rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent — at any time, for anything processed on the basis of consent.
| What happens | When you delete your account |
|---|---|
| Addresses, wishlist, cart, marketing preferences | Deleted immediately |
| Account login and profile | Deleted immediately |
| Invoices and order records | Retained for 8 years, as tax law requires |
Grievance officer
If you have a complaint about how we handle your personal data, contact our Grievance Officer. We acknowledge every complaint within 48 hours and resolve it within one month of receipt.
Patel KishanKumar SureshBhai, Owner and Grievance Officer · Email: support@weekendcart.com · Phone: +91 70169 84341 (Monday to Saturday, 10:00am to 7:00pm IST) · Post: Patel KishanKumar SureshBhai, trading as Weekend Cart, C-402, Shiv Bhakti Apartment, Chikuwadi Road, Harinagar-3, Udhna, Surat, Gujarat, 394210, India
If we do not resolve your complaint to your satisfaction, you may escalate it to the Data Protection Board of India. Consumer complaints may also be raised with the National Consumer Helpline on 1915 or at consumerhelpline.gov.in.
How we protect it
We apply reasonable security safeguards as required under Section 8(5) of the Digital Personal Data Protection Act, 2023 and the SPDI Rules, 2011.
- The entire site is served over HTTPS with TLS encryption.
- Account passwords are stored as salted hashes, never in readable form.
- Payment credentials are handled entirely by our PCI-DSS compliant payment aggregator. They never reach our servers.
- Access to customer data within the business is limited to the people who need it to do their job.
- If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal, as required by law.
Changes to this policy
If we change this policy we will update the date shown at the top of this page. Where a change materially affects your rights, we will notify you by email or by a notice on the site before it takes effect. Continuing to use the site after that means you accept the revised policy.