Legal
Privacy Policy
Placeholder notice. Final legal copy has not yet been supplied by the client. The structure and headings below are production-ready; approved wording drops straight in.
Overview
This policy explains what personal information Ondrea collects, why we collect it, and how it is protected. It covers our website at ondrea.in and any purchase, account, or support interaction with us.
Information we collect
- Contact and account details you provide (name, email, phone)
- Shipping and billing information needed to fulfil an order
- Order history and support correspondence
- Usage and device data, collected only with your cookie consent (see our Cookie Policy)
How we use it
- To process orders, arrange delivery, and provide support
- To send order confirmations and, where you opt in, occasional updates
- To understand and improve the site, subject to your consent for analytics
Payments
Payments are processed through a secure, hosted payment gateway. Raw card data never reaches Ondrea’s servers; PCI-DSS compliance is handled by the payment provider.
How we protect your data
- The site is served over HTTPS/SSL end to end
- Passwords are stored hashed, never in plain text
- Personal and shipping data are encrypted at rest
- Administrative access is protected by two-factor authentication
- Regular, separately stored backups guard against data loss
Your rights
You may request access to, correction of, or deletion of your personal data. Contact us and we will respond within a reasonable period.
Contact
Questions about privacy: ondreaofficial@gmail.com.