Privacy Policy

1. Introduction

UniformBasket ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Information

• Phone number (used for account creation and login)
• Delivery address (required for order fulfillment)
• Order history and transaction details

Automatically Collected Information

• IP address and browser information
• Usage data (pages visited, time spent, navigation patterns)
• Device information (browser type, operating system)

3. How We Use Your Information

We use the collected information for the following purposes:

• To process and fulfill your orders
• To coordinate delivery with school offices
• To provide customer support and respond to queries
• To improve our platform and user experience
• To send order updates and delivery notifications
• To ensure platform security and prevent fraud

4. Cookies

We use a single httpOnly cookie for authentication purposes. This cookie contains a JWT (JSON Web Token) that maintains your login session. The cookie is:

• HttpOnly — not accessible via JavaScript (safe against XSS)
• SameSite=Lax — provides CSRF protection
• Secure flag enabled in production (HTTPS only)

We do not use any third-party tracking or advertising cookies.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties.

We may share your information only in the following circumstances:

• With school authorities for delivery coordination (limited to order details)
• With payment processors for transaction handling (when payments are enabled)
• When required by law or to protect our legal rights

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Passwords are hashed using bcrypt (strength 12)
• All API communication uses HTTPS in production
• JWT tokens are stored in httpOnly cookies (not accessible to JavaScript)
• Rate limiting on authentication endpoints

7. Data Retention

We retain your account information and order history for as long as your account is active. If you wish to delete your account, please contact us at +91 7064169114.

8. Your Rights

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

9. Children's Privacy

Our services are used by parents/guardians to purchase school uniforms. We do not knowingly collect personal information directly from children. All accounts are created by parents or guardians.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at +91 7064169114 or visit our Contact Us page.