Trust & Security | Baskets of Joy

This page is maintained by the Baskets of Joy team to answer common security and privacy questions about basketsofjoy.in. It describes the controls we currently have in place and is not an independent certification or audit.

Shared responsibility

Baskets of Joy runs on a managed cloud platform. The platform provides hosting, database, authentication and storage primitives. We (the Baskets of Joy team) configure them, write the application code, and are responsible for what data is collected and how it is used. You (the customer) are responsible for keeping your account password safe and using accurate details at checkout.

Access & authentication

Customer accounts use email and password or Google sign-in.
Passwords are hashed by our auth provider - we never see or store them in plain text.
Admin access to orders, customer data and the catalogue is restricted to a single owner email and enforced server-side via row-level security.
Sessions are stored in your browser and can be ended any time by signing out.

Data we collect

For orders we collect your name, delivery address, email, phone number and the items you bought. For browsing we collect anonymised page views and device type to improve the site. We do not buy personal data from third parties. Full detail is in our Privacy Policy.

Payments

Payments are processed by Razorpay. We do not store card numbers, UPI handles, CVVs or net-banking credentials on our servers. Razorpay is PCI-DSS compliant and handles encryption of payment data end-to-end. We only receive a payment reference and status from them.

Storage & transmission

The site is served over HTTPS. Traffic between your browser and our servers is encrypted in transit.
The database enforces row-level security so customers can only read their own orders, addresses and wishlist items.
Order details, addresses and wishlists are tied to your authenticated account.

Subprocessors & integrations

We work with the following service providers to run the store. Each one is used for a specific purpose only.

Cloud hosting & database - application hosting, authentication and database.
Razorpay - payment processing.
Google Analytics - anonymised usage analytics.
Email provider - order, shipping and account emails.
Logistics partners - to deliver your parcel (name, address, phone).

Cookies & analytics

We use a small number of essential cookies to keep your cart active and remember your preferences, plus Google Analytics to measure aggregate site usage. Tracking parameters such as utm_source are stripped from the URL after first paint to avoid duplicating analytics data.

Data retention & deletion

Order records are retained for as long as required by Indian tax and accounting regulations (typically 8 years). Account profile data is retained until you ask us to delete it. Anonymised analytics data is retained indefinitely. To request deletion of your account email basketsofjoy2022@gmail.com.

Privacy requests

To access, correct, export or delete the personal data we hold about you, write to basketsofjoy2022@gmail.com from the email tied to your account. We typically respond within 7 working days.

Security & vulnerability reporting

If you believe you have found a security issue affecting Baskets of Joy or our customers, please email basketsofjoy2022@gmail.com with the subject line "Security report" and include enough detail for us to reproduce the issue. We will acknowledge your report and work with you to fix it. Please do not publicly disclose the issue before we have had a chance to respond.

Compliance

Baskets of Joy is operated from Ahmedabad, India and follows applicable Indian consumer-protection and tax regulations. We do not currently hold an independent SOC 2, ISO 27001 or PCI certification in our own name; payment processing is delegated to Razorpay, which maintains PCI-DSS compliance.

Contact

📧 Email: basketsofjoy2022@gmail.com
📞 Phone: +91 9313289540
📍 Gala Gymkhana Road, South Bopal, Ahmedabad, Gujarat 380058

Last reviewed: June 2026. This page is editable content maintained by the Baskets of Joy team.