Privacy policy

This policy describes the Warfare Labs Shop application operated by Warfare Labs Private Limited.

What we collect

For checkout we collect: name, email, mobile number, India delivery address, and, for a business customer, the legal name and GSTIN. You can check out as a guest, or sign in with an email link. Opening that link creates an account for a new address. A signed-in customer can view orders for that email and can save one delivery address, billing address, and GSTIN for the next checkout. We do not collect date of birth, passwords, card numbers, CVV, UPI credentials or identity documents.

Why

Data is used to fulfil orders, verify payment, communicate about the order, comply with tax and accounting duties, and secure the service.

Payments

Card and UPI details are entered on Zoho Payments. We store the payment reference, amount, and status. We do not store your card number or UPI PIN.

Sharing

We share necessary fulfilment data with Zoho Payments and, after dispatch, with the logistics provider you are told about. Zoho SalesIQ records the pages viewed on this site. Private order links, one-time sign-in links, the staff handoff link, the payment return page, and the assistant token page stay out of SalesIQ. The X pixel records page visits and conversion events so X can measure advertising. The page address sent to X omits those private links and the payment-return details. When we have your name, email, or mobile number, the pixel sends X a SHA-256 hash of each value with the visit. An Indian mobile number is hashed with country code 91. When an order is paid, our server also sends X the purchase, the hashed email, the hashed mobile number, the IP address, and the browser user agent. The Google Ads tag records page visits so Google can measure advertising. It is not loaded on private order links, one-time sign-in links, the staff handoff link, or the assistant token page. A paid order sends Google a purchase conversion with the order reference. Payment-return details are removed from the page address before that tag runs. We do not sell personal data. We do not use Google Analytics or Meta Pixel on this site.

Cookies and sessions

A session cookie holds your cart and CSRF protection. Zoho SalesIQ sets its own cookies to remember a visit, and those cookies are not used for advertising. The X pixel sets its own cookies to measure visits and conversions from X ads. The Google Ads tag sets its own cookies to measure visits and conversions from Google ads.

Logs

Server logs may include IP addresses, timestamps and requested paths. Payment-return query strings are minimised in access logs. Logs are retained for a limited operational period (approximately 14–30 days unless a security investigation requires longer).

Retention

A signed-in customer can remove saved checkout details. Abandoned carts and expired payment reservations are removed. Finalised orders and payment records are retained as required for Indian tax, accounting and legal duties and are not deleted merely because a session ends.

Your requests

Email business@laer.in to access, correct or discuss deletion of personal data, subject to legal retention requirements.

Security

The site is served over HTTPS. Administration is not public. Secrets are stored outside the application repository.