Privacy Policy

Last updated: 7 October 2026

This Privacy Policy explains how Obzus India Private Limited ("we", "us", "our"), which operates Soxbae, collects, uses, shares and protects your personal data, and the rights you have under the Digital Personal Data Protection Act, 2023.

1. Who we are

Soxbae is an online store operated by Obzus India Private Limited, a company registered in India (GSTIN 24AAECO5535D1ZQ), with its registered office at Survey No. 1288, Vajepar, Third Floor, Royal Plaza, Opp. New Chandresh Society, Panchasar Road, Morbi - 363641, Gujarat, India. For any privacy question contact us at obzusindia@gmail.com or +91 97128 91700.

2. The personal data we collect

Account & contact details — your name, phone number and email address when you register or place an order.
Order & delivery information — shipping and billing addresses, the items you buy, order history and payment status.
Communications — messages you send us through the contact form, WhatsApp or email, and your reviews.
Technical & usage data — with your consent, your device type, IP address, browser, pages viewed and marketing identifiers.
Payment data — payments are processed by our gateway (Razorpay); we receive the transaction status and reference, not your full card details.

3. How and why we use your data

To create and manage your account and to process, deliver and support your orders.
To handle returns, refunds, loyalty points and customer service.
To send transactional messages about your orders (order and delivery updates by WhatsApp or email).
With your consent, to measure and improve the site (analytics) and show you relevant offers (marketing).
To meet legal obligations, including tax and accounting record-keeping.

4. Consent and its withdrawal

We rely on your consent and, where applicable, on performing your order and meeting our legal obligations. Essential cookies are always on; analytics and marketing cookies stay off until you opt in through our cookie banner. You can change or withdraw consent any time via the "Cookie settings" link in the footer; withdrawal does not affect processing already carried out.

5. Cookies and tracking

Essential cookies keep you logged in, remember your cart and keep the site secure. With consent we also use analytics tools (Google Analytics, Microsoft Clarity, first-party visit measurement) and marketing tools (the Meta pixel). You control these through the cookie banner.

6. Who we share your data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:

Payment processing — Razorpay.
Order fulfilment and delivery — our logistics and courier partners.
OTP and messaging — MSG91 and WhatsApp (Meta).
Media hosting, analytics and marketing — our hosting, image (ImageKit) and analytics/marketing providers above.

We may also disclose data where required by law or to protect our legal rights.

7. How long we keep it

We keep personal data only as long as needed for the purposes above. Order and invoice records are retained as long as tax and company law require. Analytics, marketing and enquiry data are deleted on a rolling schedule, and abandoned guest records are cleared periodically.

8. Your rights under the DPDP Act

Access — download a copy of the personal data we hold, from your account page.
Correction — update your name, email and other details from your account page.
Erasure — delete your account and personal data from your account page; we keep only the anonymised order records tax law requires.
Withdraw consent — through the cookie settings link at any time.
Grievance redressal — contact our Grievance Officer (below), and escalate to the Data Protection Board of India if unresolved.
Nominate — nominate another person to exercise your rights in the event of death or incapacity.

9. Children

Our stores are for adults. You must confirm you are 18 years or older to create an account, and we do not knowingly collect children's data or use it for tracking or targeted advertising.

10. How we protect your data

We apply reasonable security safeguards, including encryption of sensitive fields such as addresses at rest, access controls and secure payment processing. No method is completely secure, but we work to protect your data and will notify you and the Data Protection Board of a personal data breach as required by law.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date shows when it last changed; significant changes are notified on this page.

12. Grievance Officer

For any question, request or complaint about your personal data, contact our Grievance Officer:

Name: Divyesh Kotadiya
Entity: Obzus India Private Limited
Email: obzusindia@gmail.com
Phone: +91 97128 91700
Address: Survey No. 1288, Vajepar, Third Floor, Royal Plaza, Opp. New Chandresh Society, Panchasar Road, Morbi - 363641, Gujarat, India

We respond within the timelines required under the DPDP Act, 2023.