Last updated: 10 October 2026
1. Who we are
Hugsy ("Hugsy", "we", "us") runs hugsyblanket.com (the "Store"). This policy explains what personal data we collect, why, who we share it with, and the rights you have. It is written with reference to the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Information Technology Act, 2000 and rules made under it.
2. Personal data we collect
- Order and account data: name, email, phone number, shipping and billing address, order history.
- Communications: messages you send us by email or chat, for example about sizing, orders, returns or exchanges.
- Payment data: payments are processed by Razorpay. We do not see or store your full card number, CVV, UPI PIN or net-banking password.
- Device and usage data: IP address, browser and device type, pages viewed and similar data collected through cookies on our Shopify store.
3. Why we use it
- To process, ship and deliver your order, and to handle returns, exchanges and refunds.
- To send order confirmations, shipping and tracking updates.
- To respond to your questions and complaints.
- To prevent fraud and meet our legal, tax and accounting obligations.
- To send offers and updates, only if you have opted in. You can unsubscribe at any time.
We process your data on the basis of your consent, or for legitimate uses permitted under the DPDPA, such as fulfilling an order you have placed.
4. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the Store, and only to the extent needed:
- Shopify (store hosting and checkout)
- Razorpay (payment processing)
- Shiprocket and its courier partners (shipping, delivery and tracking)
- Email, analytics and customer-support tools we use to run the Store
- Government or law-enforcement authorities where required by law
Some of these providers may store data outside India, subject to the safeguards and any restrictions under applicable law.
5. Cookies
Our store uses cookies needed for the cart and checkout to work, and analytics cookies to understand how the Store is used. You can manage cookies in your browser settings, though some features may not work without them.
6. How long we keep it
We keep your data only as long as needed for the purposes above, or as required by law (for example, tax records), and then delete it.
7. Security
We use reasonable security safeguards to protect your data, including encrypted checkout through Shopify and Razorpay. No system is completely secure, but we work to prevent unauthorised access, misuse or loss.
8. Your rights
Under the DPDPA you can:
- ask for a summary of the personal data we hold about you and how it is processed;
- ask us to correct, complete, update or erase your data;
- withdraw consent at any time (this does not affect processing already done);
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if unresolved, with the Data Protection Board of India.
To exercise any of these rights, email contact@hugsyblanket.com.
9. Children
Our Kids Hugsy is bought by parents and guardians. We do not knowingly collect personal data directly from children under 18. If you believe a child has shared personal data with us, please contact us and we will delete it.
10. Changes
We may update this policy from time to time. The date at the top shows the latest version.
11. Grievance contact
For any question or complaint about your personal data, contact our Grievance Officer at contact@hugsyblanket.com or write to us at WZ-53, Block G, Tilak Nagar, Vikaspuri, New Delhi, Delhi 110018, India. We aim to respond within 7 days.