Privacy Policy

Privacy Policy — Noahboat
Legal & Privacy

Your Privacy, Protected.

We believe trust is earned through transparency. Here is exactly how your data is handled at Noahboat.

Last Updated: March 2026 Effective immediately Applies to noahboat.in
1

Information We Collect

To fulfil your orders and deliver the best experience possible, Noahboat collects certain personal information. Below is a clear breakdown of what we collect and why.

Category Data Collected Purpose
Identity Full name, email address, phone number Account creation, order confirmation, support
Location Delivery address, city, state, PIN code Shipping & delivery coordination
Transactional Order history, payment status, invoices Order processing, refunds, dispute resolution
Technical IP address, browser type, device info, cookies Security monitoring, site performance
Behavioural Pages visited, products viewed, click patterns Personalisation, improving recommendations
We only collect what we need. Noahboat does not collect sensitive personal data such as financial account numbers, biometric data, or government ID numbers.
2

How We Use Your Data

Your information is used solely to provide, improve, and protect our services. We never use your data for undisclosed purposes.

Process & confirm orders Arrange & track shipping Send transactional emails & SMS Handle returns & refunds Provide customer support Send exclusive loyalty offers (with consent) Detect & prevent fraud Improve website performance Comply with legal obligations
Marketing communications: If you opt in, we may send promotional emails or SMS about deals and new products. You can unsubscribe at any time via the link in any email or by contacting us directly.
3

Payment & Data Security

We never store your card details. All payment information (card numbers, CVV, UPI IDs) is handled exclusively by Razorpay, our certified payment gateway, and never passes through or is stored on our servers.

Security is a core commitment, not an afterthought. Here are the measures we take to protect your data:

Security Layer Implementation
Data Transmission All data is transmitted over HTTPS using TLS 1.2+ encryption
Payment Processing Razorpay — PCI DSS Level 1 certified gateway
Access Control Role-based access; only authorised personnel can access customer data
Data Storage Encrypted at rest; hosted on secure, audited cloud infrastructure
Incident Response Breach notification within 72 hours as required by applicable law
4

Transparency in Data Sharing

We do not sell, rent, or trade your personal data — ever. We only share data with trusted third parties strictly necessary to operate our service.

Third Party Data Shared Why
Delivery Partners
(e.g. Shiprocket, Delhivery)
Name, phone, delivery address To ship and deliver your order
Razorpay Order ID, amount, contact Secure payment processing
Email / SMS Provider Email, phone number Order confirmations & updates
Analytics Anonymised site usage data Understanding site performance
Law Enforcement As required by court order or law Legal compliance only
All third-party partners are bound by data processing agreements and are prohibited from using your data for their own marketing or any purpose beyond what is specified above.
5

Cookies & Tracking

We use cookies and similar tracking technologies to enhance your browsing experience. You remain in control of which cookies you accept.

Essential Cookies — always active Analytics Cookies — opt-in Marketing Cookies — opt-in

You can manage or withdraw your cookie consent at any time by adjusting your browser settings or contacting us. Disabling essential cookies may affect site functionality.

6

Data Retention

We retain your data only for as long as necessary to fulfil the purpose it was collected for, or as required by Indian law.

Data Type Retention Period
Order & transaction records 7 years (GST & accounting compliance)
Customer account data Duration of account + 2 years post-closure
Marketing preferences Until you unsubscribe or withdraw consent
Analytics & logs 12 months
Support communications 3 years
After the applicable retention period, data is securely deleted or anonymised so it can no longer be linked to you.
7

Your Rights

Under the Digital Personal Data Protection Act, 2023 (India) and applicable privacy laws, you have the following rights over your personal data:

Right to Access

Request a copy of personal data we hold about you.

Right to Correction

Request that inaccurate or incomplete data be corrected.

Right to Erasure

Request deletion of your personal data (subject to legal obligations).

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing of your data for marketing purposes.

Right to Withdraw Consent

Withdraw consent for processing where consent is the legal basis.

To exercise any of these rights, contact us at info@noahboat.in. We will respond to verified requests within 30 days.
8

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Here is what to expect when we do:

How we notify you: Material changes will be communicated via a notice on our website and/or by email to registered customers at least 7 days before the change takes effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of noahboat.in after changes become effective constitutes acceptance of the updated policy.

We encourage you to review this policy periodically. All previous versions are available upon request.

Questions about your privacy?

Our team is here to help. Reach out and we'll respond within one business day.