Privacy Policy

1. Introduction

Welcome to Sweettree. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. By using our website, you consent to the data practices described in this policy.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the website, express an interest in obtaining information about us or our products, or when you participate in activities on the website.

• Account Information: Your name, email address, password, phone number, alternate phone number, gender, and date of birth.
• Address Information: Names, phone numbers, pincodes, localities, street addresses, cities, states, and landmarks for shipping and billing purposes.
• Order Information: Details regarding the products you purchase, your shipping address, coupon usage, and order totals.

3. How We Use Information

We use the information we collect or receive for the following purposes:

• To facilitate account creation and the login process.
• To fulfill and manage your orders, payments, returns, and exchanges.
• To deliver and facilitate delivery of services and products to you.
• To send you administrative information, such as order confirmations and updates.
• To improve our website, user experience, and customer service.

4. Order and Payment Information

All payments are processed securely through our authorized payment gateway partner, CCAvenue. Sweettree does not directly collect, store, or process your raw credit card numbers, debit card numbers, or UPI PINs. We only retain transaction tracking IDs and bank reference numbers to verify payment status and manage refunds.

5. Cookies and Local Storage

We use cookies and similar tracking technologies to access or store information. Specifically:

• Local Storage: Used to maintain your shopping cart (sweettree_cart), wishlist (sweettree_wishlist), and user session preferences (sweettree_user) to provide a seamless browsing experience.
• Secure Cookies: We utilize secure, HttpOnly cookies for storing authentication tokens to keep your account safe from unauthorized access.

6. Third-Party Services

We may share your data with trusted third-party vendors, service providers, and partners who perform services for us, including:

• Payment Processors: CCAvenue for secure payment processing.
• Shipping Partners: Logistics partners (such as Delhivery) to deliver your orders.
• Cloud Storage: AWS S3 for secure data and media hosting.
• Media Platforms: We may embed YouTube content using privacy-enhanced modes.

7. Data Security

We implement a variety of security measures to maintain the safety of your personal information. Your passwords are encrypted using industry-standard hashing algorithms (bcrypt). Our backend APIs are secured with JWT authentication, and we utilize security practices like HTTP header protections, database sanitization, and rate limiting to prevent unauthorized access and data breaches.

8. Data Retention

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

9. User Rights and Choices

Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, or delete the personal information we hold about you. You can review, change, or terminate your account at any time by logging into your account settings and updating your profile.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Effective Date" and the updated version will be effective as soon as it is accessible. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.