Privacy & Cookie Policy
Last updated: September 2026
This Privacy & Cookie Policy explains how COSMIC TATVA LLP (trading as "Cosmic Tatva", referred to as "we", "us" or "our") collects, uses, stores and shares your personal information when you visit Cosmic Tatva, create an account, place an order, or otherwise interact with us. By using this website you agree to the practices described here. If you do not agree, please do not use the website.
1. Information We Collect
We only collect information that is needed to run the store, fulfil your orders and improve your experience. Depending on how you use the website, this includes:
a) Information you give us at checkout
When you place an order, the checkout page asks for:
- Contact details — full name, email address and mobile number (used for order confirmations, delivery updates and courier contact).
- Billing address — address line 1 & 2, city, state, PIN code and country.
- Shipping address — the same fields, if you choose to ship to a different address.
- Order details — the products and quantities you buy, order value, any coupon code applied, and the payment method you select.
- Order notes — any optional delivery instructions you type into the order-note box.
b) Payment information
- Online payments are processed by our payment gateway (Razorpay). Your card, UPI, net-banking or wallet details are entered on and handled by the gateway — we never see or store your full card number, CVV or banking credentials. We only store the gateway's order and payment reference IDs and the payment status so we can reconcile the payment.
- Cash on Delivery — no payment information is collected online; the amount is collected by the courier at the time of delivery.
c) Account information
If you register an account we store your name, email address, mobile number, a securely hashed password (never the plain-text password), your saved addresses, order history and wishlist.
d) Other information you send us
- Contact form — your name, email address, phone number (if given) and the message you write.
- Newsletter — your email address, if you subscribe.
- Product reviews — your display name, rating and review text, which are shown publicly on the product page.
- Replacement claims — photos/videos of a damaged product and its packaging that you send as proof under our Replacement Policy.
e) Information collected automatically
When you browse the website, we and the third-party tools described in Section 5 automatically collect technical data such as your IP address, approximate location (city/region), device type, operating system, browser type, screen size, the pages you view, the products you look at or add to cart, the website you arrived from, the time spent on pages, and the ads you may have clicked to reach us. This is collected through cookies and similar technologies (see Section 4).
2. How We Use Your Information
- To process and deliver your orders — including verifying payment, packing, shipping, and sharing delivery details with our courier partner.
- To communicate with you about your order — order confirmation, processing, shipping and delivery updates, and tracking information by email and/or SMS/WhatsApp.
- To provide customer support — responding to your enquiries, and assessing replacement claims for damaged products.
- To run your account — logging you in, password resets, order history and wishlist.
- To send marketing communications — newsletters, new-product launches and offers, only where you have subscribed or placed an order with us. You can unsubscribe at any time using the link in every email.
- To measure and improve the website — understanding which pages and products are popular, where visitors drop off, and how our marketing performs, using Google Analytics.
- To advertise and show you relevant ads — measuring conversions from Google Ads and Facebook/Instagram (Meta) Ads, and showing you our ads on those platforms based on your visit (remarketing). See Section 5.
- To prevent fraud and misuse — such as detecting fraudulent orders, repeated refused Cash on Delivery orders, or false damage claims.
- To comply with law — maintaining tax, invoicing and accounting records as required under Indian law.
3. Who We Share Your Information With
We do not sell or rent your personal information to anyone. We share it only with the service providers needed to run the store, and only the information they need for that purpose:
- Shipping / courier partners — to deliver your order we share your name, mobile number, full shipping address, order number, the contents/weight of the package, and, for Cash on Delivery orders, the amount to be collected. Courier partners may contact you by phone, SMS or WhatsApp to coordinate delivery. They handle this data under their own privacy policies.
- Payment gateway (Razorpay) — to process online payments. Razorpay receives your name, email, phone number and order amount along with the payment details you enter on their secure page.
- Google (Google Analytics & Google Ads) — receives technical and browsing data described in Section 1(e), and conversion data such as order value when you complete a purchase, via cookies and tags placed on our website. See Section 5.
- Meta Platforms (Facebook & Instagram Ads) — receives similar browsing and conversion data through the Meta Pixel placed on our website. See Section 5.
- Email / SMS service providers — to send you the transactional and marketing messages described above.
- Hosting and IT providers — who store and secure the website and its database.
- Government, courts or regulators — where we are legally required to do so, or to protect our rights, property or safety and that of our customers.
Some of these providers (for example Google and Meta) may process data on servers outside India. By using the website you consent to this transfer, which is carried out in accordance with applicable law.
4. Cookie Policy
Cookies are small text files placed on your device by a website. We use the following categories of cookies and similar technologies (such as pixels and local storage):
- Strictly necessary cookies — required for the website to work: keeping your session, remembering the items in your cart, keeping you logged in, and protecting forms against misuse. These cannot be switched off.
- Analytics cookies (Google Analytics) — set by Google to help us understand how visitors use the website (pages visited, time on site, traffic sources, approximate location, device). Google Analytics uses cookies such as
_gaand_ga_*. The data is aggregated and does not directly identify you to us. - Advertising cookies (Google Ads & Meta Pixel) — set by Google and Meta (Facebook/Instagram) to measure whether our ads led to a visit or purchase (conversion tracking) and to show you our ads on Google, YouTube, Facebook and Instagram after you have visited our website (remarketing). These use cookies such as
_gcl_au,_fbpand_fbc. Google and Meta may combine this data with information they already hold about you under their own privacy policies. - Preference cookies — remember choices you make on the website, such as a recently viewed product or a dismissed notice.
Managing cookies. You can control cookies in the following ways:
- Browser settings — every browser lets you block or delete cookies. Blocking strictly necessary cookies will stop the cart and checkout from working.
- Google — opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and manage personalised ads at Google Ads Settings. Google's privacy policy is at policies.google.com/privacy.
- Meta — manage how Facebook and Instagram use data from websites at Facebook Ad Preferences. Meta's privacy policy is at facebook.com/privacy/policy.
5. Analytics & Advertising Partners
We use the following third-party tools on this website:
- Google Analytics — to measure traffic and website usage. IP addresses are processed by Google and may be truncated/anonymised where the feature is available.
- Google Ads — conversion tracking and remarketing tags, so we can measure the results of our Google advertising and show ads to people who have visited our website or shown interest in our products.
- Meta Pixel (Facebook & Instagram Ads) — conversion tracking and remarketing, so we can measure the results of our Facebook/Instagram advertising and reach visitors on those platforms. Events sent may include page views, products viewed, items added to cart, checkout started and purchases completed (with order value, but without your payment details).
These tools may receive hashed (encrypted) versions of your email or phone number when you place an order, solely to match conversions to ad campaigns and improve ad relevance. We do not give these platforms your address, payment details or order notes.
6. Data Retention
- Order and invoice records are retained for as long as required under Indian tax and accounting laws (generally 8 years), even if you delete your account.
- Account information is kept until you ask us to delete your account.
- Contact-form messages and replacement-claim evidence are kept for as long as needed to resolve the matter and for a reasonable period afterwards for our records.
- Marketing data is kept until you unsubscribe.
- Analytics and advertising data is retained by Google and Meta according to their retention settings and policies (typically 2 to 26 months).
7. Data Security
The website is served over HTTPS, account passwords are stored using industry-standard one-way hashing, and payment details are handled entirely by our PCI-DSS compliant payment gateway. Access to customer data within COSMIC TATVA LLP is restricted to staff who need it to process orders and support customers. While we take reasonable technical and organisational measures to protect your information, no method of storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Your Rights & Choices
Under applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you have the right to:
- Access the personal information we hold about you and know how it is being used.
- Correct inaccurate or incomplete information — registered customers can update their details from My Account → Profile.
- Delete your account and personal data, except where we must retain it by law (such as order and invoice records).
- Withdraw consent to marketing at any time by using the unsubscribe link in any email or by contacting us.
- Opt out of analytics and advertising cookies using the methods in Section 4.
- Raise a grievance about how your data has been handled.
To exercise any of these rights, contact us using the details in Section 11. We may need to verify your identity before acting on a request, and will respond within the time required by law.
9. Children
This website is intended for use by adults (18 years and over). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time — for example when we add a new service provider or advertising tool. The "Last updated" date at the top shows the current version. Continued use of the website after a change means you accept the updated policy.
11. Contact & Grievance Officer
For any questions about this policy, or to exercise your rights, contact:
- COSMIC TATVA LLP (Cosmic Tatva)
- Email: support@cosmictatva.com
- Phone: +91 756 783 8699
- Address: Ahmedabad, Gujarat, India
- Or via our Contact page.