Privacy Policy

Information we collect

• Identity and contact details, such as your name, email address and phone number.
• Delivery and transaction details, such as your shipping address, order contents, amount, payment status and refund status.
• Incomplete checkout details, such as cart contents, contact details and campaign source, when you begin but do not complete checkout.
• Messages and support records when you contact us or raise a complaint.
• Technical and usage data, such as device, browser, IP address, referral source and interactions with the website or advertisements.

Payment information

Payments are processed by Razorpay. CRUX receives transaction identifiers and payment status but does not store complete card numbers, UPI PINs or online-banking passwords. Razorpay processes payment data under its own privacy policy and legal obligations.

Why we use personal data

• To accept payment, confirm, fulfil, deliver, cancel and refund orders.
• To understand checkout drop-offs and, where permitted, help customers resume an incomplete checkout.
• To provide customer support, fraud prevention and grievance redressal.
• To send requested batch updates and marketing messages, which you may opt out of at any time.
• To secure, maintain and improve the website, measure campaign performance and comply with law.

Cookies and analytics

We use Google Analytics 4, Meta Pixel and their server-side conversion services to understand visits, checkout activity and campaign performance. These services may receive device, browser, IP address, referral, interaction and order-event data. For checkout and purchase measurement, contact details may be normalised and cryptographically hashed before being sent to Meta for attribution and browser-to-server event deduplication. You can limit optional browser cookies through browser or device controls, though server-side order measurement may still occur where permitted by law.

Who receives data

We share only what is reasonably necessary with service providers such as Razorpay, hosting and infrastructure providers, delivery partners, customer-support tools, analytics providers and professional advisers. We may also disclose information where required by law, to prevent fraud or to protect legal rights. We do not sell personal data.

Retention and security

We retain personal data only as long as needed for orders, support, accounting, fraud prevention and legal obligations, then delete or anonymise it where reasonably possible. We use reasonable organisational and technical safeguards, but no internet service can guarantee absolute security.

Your choices and rights

Subject to applicable law, you may ask for information about your data, request correction, completion, updating or erasure, withdraw consent for optional processing, unsubscribe from marketing, or raise a grievance. Withdrawal does not affect processing already lawfully completed and may prevent us from providing a requested service.

Children

CRUX is a caffeinated product and the website is not directed to children. We do not knowingly seek personal data from children or use it for targeted advertising. If you believe a child has provided data, contact us so we can review and delete it where required.

Contact and grievance redressal

For privacy requests or complaints, contact the CRUX Grievance Officer at support@drinkcrux.co. Describe your request and the email or phone number connected to your order so we can verify and respond securely.