Skip to content
Sakhiya

Privacy policy.

Last updated date to confirm before launch.

This policy explains what personal data Sakhiya collects when you browse the site, order from us or contact us, and what we do with it. We follow the UK GDPR and the Data Protection Act 2018.

Who we are

Sakhiya is a small online business based in Braintree, Essex, UK. Our data controller is legal name / trading status, e.g. Soumya Gajawada trading as Sakhiya, full postal address. You can contact us about your data at [email protected].

What we collect

  • Order details. Your name, email address, delivery and billing address, phone number and what you ordered. You enter these on Stripe’s secure checkout page.
  • Payment details. Card and wallet details are handled by Stripe. They go straight to Stripe and we never see or store your full card number. We receive confirmation that you paid, and the last four digits and card type.
  • Messages. If you email us or use the contact form, we keep your message and email address so we can reply.
  • Technical data. Our website host, Cloudflare, processes your IP address and basic browser information to deliver the site and protect it from attacks.
  • Anonymous site statistics. A few basic facts about each visit, with no cookies and nothing that identifies you. See “Website statistics” below.
  • Your Bag. The items in your Bag are saved in your own browser (local storage) so they are still there when you come back. This stays on your device and is not sent to us until you check out.

We don’t use advertising cookies, we don’t use third-party trackers, and we don’t track you across other sites.

Website statistics (no cookies)

To see how many people visit, which products they look at and where checkout goes wrong, we run our own simple statistics on this site. They don’t use cookies or anything else stored on your device, and nothing is sent to a third party. Each time you view a page, add or remove an item, open your Bag, start checkout or complete an order, your browser tells our own server a short message. We record:

  • the page address (without anything after a “?”), the product involved, and the time;
  • the website that sent you to us (its domain only) and any campaign tags in the link (such as utm_source);
  • whether you’re on a phone, tablet or computer, and your country (worked out by Cloudflare);
  • a daily-changing anonymous code, made by mixing your IP address and browser details with a secret that changes every day. We never store your IP address or browser details, and because the secret changes daily, the code can’t be used to recognise you on another day or on other sites.

We don’t record your name, email address, address or payment details in these statistics. Orders are counted by checking with Stripe that a payment was made, using the order number only. If your browser sends a Do Not Track or Global Privacy Control signal, we don’t record anything at all. Our legal basis is legitimate interests (running and improving a small shop). Because nothing is stored on, or read from, your device and the data can’t identify you, we don’t show a cookie banner. These statistics are kept for up to 13 months.

Why we use it, and our legal basis

  • To take payment, send your order and deal with returns or refunds: contract.
  • To keep accounting and tax records: legal obligation.
  • To reply to your questions: legitimate interests (and steps you ask us to take before a contract).
  • To keep the site secure and prevent fraud: legitimate interests.
  • To understand how the site is used and improve it, using anonymous statistics: legitimate interests.

We only send marketing emails if you have told us you want them, and you can opt out at any time. Delete this line if you will not send any marketing

Who we share it with

  • Stripe (payment processing and fraud prevention) — see stripe.com/gb/privacy.
  • Royal Mail or another courier, so we can deliver your order. They receive your name, address and, where needed, phone number.
  • Cloudflare (website hosting and security) and Google (our business email).
  • Our accountant or HMRC, if the law requires it. Remove or edit if not applicable

We don’t sell your data. Some of these providers may process data outside the UK. Where they do, it is under approved safeguards such as the UK International Data Transfer Agreement or UK Extension to the EU–US Data Privacy Framework.

How long we keep it

Order and payment records are kept for 6 years for tax and accounting purposes. Emails and messages are kept for as long as needed to deal with your enquiry and any follow-up, normally no more than 2 years.

Your rights

You can ask to see the data we hold about you, correct it, delete it, restrict or object to our use of it, or receive a copy in a portable format. Some of these rights are limited where we must keep records by law. To use any of them, email [email protected]. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

Changes

If we change this policy we’ll update the date above.