Privacy policy

Pocketeer is a brand of House of Astral, which sells through gopocketeer.com and is the business responsible for the personal data described here — the controller under the UK and EU GDPR, and the data fiduciary under India’s Digital Personal Data Protection Act 2023.

Email hello@gopocketeer.com · Telephone +91 81477 40658

Order details

Name, email, postal address and phone number. Needed to take payment, print a label, and tell you where the parcel is. The phone number goes to the carrier because every carrier asks for one.

Payment

PayPal and Razorpay collect card, UPI and bank details directly on their own systems. We never see or store them. We keep the payment reference, the amount, the currency and whether it succeeded.

Account

If you sign in, Clerk holds your email address, name and sign-in activity. Checking out as a guest quietly creates the same record so an order can be claimed later with the same email.

Gift note

The 140 characters you write are stored with the order, printed on a card and thrown away with the rest of the order data. It is never sent to Google, Meta or any advertising service.

Corporate design studio

For a business designing its own wallets: the company name, GSTIN, contact details, brief, brand colours, logos and images it gives us, and the designs made from them. Kept with the project so we can print the order and any repeat of it. Design previews are watermarked, and only the business and we can open them.

Where you are

The country of your IP address, read from the network on the first request, to decide whether you see rupees or dollars. It is not stored — only the market you end up on is, in a cookie.

Analytics and advertising

Which pages and prints get looked at, what ends up in a bag, and which advert led to an order. See section 4.

Messages

Anything you send through the contact form or by email, so we can answer it.

We do not ask for, and have no use for, anything sensitive — no government identifiers, no health or biometric data. Please do not put any in a gift note.

• To perform our contract with you — everything needed to take an order, charge for it, ship it and support it. Without this data there is no order.
• Our legitimate interests — keeping the site working and secure, preventing fraudulent orders, and understanding in aggregate how the shop is used.
• Your consent — analytics and advertising cookies where consent is required (see section 4). You can withdraw it at any time, and withdrawing is as easy as giving it.
• A legal obligation — invoices and tax records we are required to keep for a fixed number of years, whatever you ask us to delete.

When they are switched on, Google Analytics 4, the Meta pixel and Google Ads measure which pages and prints get looked at and which advert led to an order.

In the EU, the EEA, the UK and Switzerland none of it runs until you accept it. A banner appears on your first visit, “Essential only” keeps it off, and your answer is remembered for six months. Everywhere else the same tags run by default. Either way you can change your mind at any time using Cookie choices at the bottom of any page.

When you buy something we also report the sale from our own server, so one order is counted once even if your browser blocked the tag. That message carries the items, the total and the order number, plus your email, phone and address hashed — scrambled one way, so an advertising account you already hold there can be matched without the address itself ever being sent. The gift note is never included.

For California residents: sharing data with advertising services in this way may count as “sharing” for cross-context behavioural advertising. Use Cookie choices to opt out. We do not sell personal information for money, and never have.

pocketeer_region · 1 year

Which market you shop in — rupees or dollars. Essential.

pocketeer_cart · 30 days

What is in your bag, so it survives a refresh. Essential.

pocketeer_consent · 6 months

Your answer to the cookie banner. Essential.

pocketeer_gift_note · session

A gift-note draft on its way to checkout. Essential.

__clerk_*, __session · session

Keeps you signed in. Essential.

_ga, _ga_* · up to 2 years

Google Analytics. Set only with consent where consent is required.

_fbp, _fbc · up to 3 months

Meta pixel, including which advert you clicked.

_gcl_* · up to 90 days

Google Ads, to attribute an order to an advert.

We use other companies to run the shop. They act on our instructions and may not use your data for anything of their own, except the payment and advertising services, which are responsible for their own handling under their own policies.

• Vercel — hosting.
• Neon — the database, hosted in the United States.
• Clerk — accounts and sign-in.
• Resend — order and support email.
• PayPal and Razorpay — payment.
• AI design services — the corporate design studio sends a business’s brief, logos and images to the AI providers that write and draw its designs. They use them only to make those designs, and on the terms we use them under, they may not train their models on them.
• Google and Meta — analytics and advertising, as described above.
• India Post and the delivery carrier in your country — your name, address and phone number, because a parcel cannot be delivered without them.

We will also disclose data where the law requires it, and to a buyer if the business is ever sold. Nothing else.

We operate from India and our database is hosted in the United States, so shopping with us means your data leaves your country. Where personal data moves out of the EEA, the UK or Switzerland we rely on the European Commission’s standard contractual clauses, with the UK addendum where it applies, in our agreements with the providers above.

Orders and invoices

Eight years from the end of the financial year, to satisfy Indian tax and company record-keeping. This is the one thing a deletion request cannot remove.

Account

Until you close it or ask us to delete it.

Gift notes

Deleted with the order data.

Contact-form messages

Two years after the conversation ends.

Analytics

Held by Google and Meta under their own retention settings — currently up to 14 months for event data in Google Analytics.

Wherever you live, you may ask us for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to hello@gopocketeer.com and we will answer within 30 days. We may need to check you are who you say you are before acting.

In the EEA and the UK you also have the right to restrict or object to our processing, to receive your data in a portable form, and to withdraw consent at any time. If we get it wrong you can complain to your national data protection authority — in the UK, the Information Commissioner’s Office.

In India, the Digital Personal Data Protection Act 2023 gives you the right to access and correct your data, to have it erased, to a grievance procedure (section 9), and to nominate someone to exercise these rights if you die or become unable to.

In California, you may ask what categories we collected in the last twelve months, ask for deletion or correction, and opt out of sharing for advertising. We will not treat you differently for asking.

If something about your data or your order has gone wrong, tell us and we will fix it. Complaints are acknowledged within 48 hours and resolved within one month, as India’s Consumer Protection (E-Commerce) Rules 2020 require.

Grievance officer

Sri Prasanth S

Email

hello@gopocketeer.com

Telephone

+91 81477 40658

Post

House of Astral33, 1st Floor, 7th CrossKoramangala 6th BlockBengaluru 560095Karnataka, India

Pocketeer is not sold to children. We do not knowingly collect data from anyone under 18, the age India’s Digital Personal Data Protection Act treats as a child. If you believe a child has given us data, write to hello@gopocketeer.com and we will delete it.

If this policy changes we update the date at the top. If a change materially affects how we use data you have already given us, we will say so by email or on the site before it takes effect. The terms and conditions cover the sale itself.