Privacy Policy

Marrow & Motive ("we", "us", "our") respects your privacy and is committed to collecting only the information required to fulfil your order and support you as a customer. This policy explains what we collect, why, and how you can request its deletion.

Information we collect

When you place an order, we collect:

• Your name
• Shipping address
• Phone number (required by our courier partner for delivery)
• Email address
• Order and payment details (processed securely by our payment partner, Razorpay — we do not store your card or bank details)

We do not require you to create an account, and we do not collect any information beyond what is needed to process, ship, invoice, and support your order.

How we use your information

• To process and confirm your order
• To ship your order and allow our courier partner to contact you
• To send your GST invoice
• To deliver order confirmations, hint/solution material, and shipping updates related to your purchase
• To respond to support requests

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We do not add you to any marketing list without your separate, explicit consent.

Data retention

We retain order information for as long as necessary to meet our legal, accounting, and tax obligations (including GST record-keeping requirements), after which it is deleted or anonymised.

Your rights

You can request a copy of the personal information we hold about you, ask us to correct it, or request that we delete it, subject to what we are legally required to retain (for example, invoicing and tax records). To make a request, contact us using the details below.

Security

Payment is handled entirely by Razorpay's secure checkout — your card and banking details never pass through or get stored on our servers. We take reasonable technical and organisational measures to protect the information we do hold.

Cross-border data processing

We use service providers — Cloudflare (hosting), Razorpay (payments), and Resend (email) — who may process your data outside India in the course of providing their services, consistent with the DPDP Act's cross-border transfer provisions.

Children's data

Under India's DPDP Act, anyone under 18 is a child, and processing a child's personal data requires verifiable parental consent. Our products are suggested for ages fourteen and over, so players are within that definition — but the personal data we collect at checkout (name, address, phone number, payment details) is provided by the purchasing adult, not the player. No feature on this site currently allows anyone under 18 to submit their own personal data — we don't offer accounts, forms, or comments.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.

Contact us

For any privacy-related questions or requests, contact us at detective@marrowandmotive.in.