Privacy policy

Who we are

KashmirSoul is an online shop for saffron, dry fruits, honey, kehwa and spices. In this policy, "we" means KashmirSoul.

What we collect today

The site has no newsletter and an account is optional. We receive the contact or delivery details you choose to provide when you place an order at checkout, sign in, or send us a message.

• If you send us a message with the feedback form, we store the message, the page you sent it from, and your email address if you give one. We use the email only to reply.
• If you place an order, we store what you type at checkout: your name, email address, mobile number, and delivery address, together with the items and total of the order.
• Checkout asks for no card or bank details and takes no money. After you place an order, we use your mobile number to call or WhatsApp you to confirm it and arrange payment.
• If you sign in, you do it with your Google account. Google tells us your name, email address, and profile picture; we use only the email address. We never see your Google password. Orders placed with that email address are shown in your account.
• A signed-in account also keeps the delivery addresses of its orders (name, mobile number, address), so you do not type them again. You can delete any of them on your account page.
• Orders and accounts are kept in a database run for us by Supabase, a hosting provider, which also handles signing in. We do not sell or share them.
• Your cart is saved in your own browser so it is still there when you come back. It reaches us only as part of an order you place.
• We use PostHog (US hosting) to understand public page visits, content-to-product clicks, cart additions, checkout-page visits and orders placed, together with campaign labels such as utm_source, utm_medium and utm_campaign. For an order, PostHog receives what was ordered: the order number, products, packs, quantities, value and any coupon code. Analytics and masked session replay start automatically on eligible public pages unless you have turned them off or your browser requests no tracking. PostHog receives technical information such as browser type, a random browser identifier and the network information involved in sending a request.
• We also use Google Analytics 4 to measure visits to known public pages and orders placed. For an order, Google receives the same order details as PostHog: order number, products, packs, quantities, value and any coupon code. Google also receives a clean public page address, browser and device information, an anonymous browser identifier and technical connection information. This integration uses first-party analytics cookies, excludes URL queries, fragments and referrers, and does not send account, checkout-field or payment details. Google signals and advertising personalization are disabled. The same Cookie settings and browser no-tracking preferences apply to both analytics services.
• We do not send checkout field values, customer names, email addresses, phone numbers, delivery addresses or payment details to PostHog. Account, sign-in, admin and order-confirmation pages are excluded. Raw URLs omit queries and fragments, and referrers are excluded; only named campaign labels are kept separately. Session replay shows public text, images, buttons, scrolling and interactions, including checkout layout and validation messages. Input values, saved contact/address details and text echoed from search fields are masked. Payment controls, hidden/password fields and embedded frames are blocked. Automatic form/click event capture remains disabled. We do not use advertising or social-media trackers.
• You can turn off analytics and session replay in Cookie settings at any time. Turning them off stops future events and clears this project’s analytics browser storage and Google Analytics cookies; it does not delete events already received by either provider. A previous rejection is respected. Shopping and sign-in work without analytics.
• The fonts and images on this site are served from the site itself, not from third parties.

Server logs

Like every website, the service that hosts this site keeps routine technical logs, such as IP address, browser type, and the pages requested. They are used to run and protect the site, not to identify you.

Confirming and delivering your order

We use your mobile number to call you, or message you on WhatsApp, about your order. When we send an order, the courier is given your name, delivery address and mobile number to deliver it. If we connect an online payment provider, this policy will be updated before it is used.

Your choices

You can empty your saved cart at any time on the cookie settings page, or by clearing this site's data in your browser.

You can ask us to delete an order and the details saved with it; see the contact page.

Changes and questions

If this policy changes, the date at the top of the page changes with it. For questions, see the contact page.