Privacy policy

Hawk Archery (“we”, “us”) runs this website and the archery shop at 4, Sangothi Amman Main Rd, Kovil Street, Sembakkam, Tambaram, Chennai, Tamil Nadu 600073. We decide how the personal data described here is used, which makes us its data fiduciary under India's Digital Personal Data Protection Act, 2023.

This policy covers the website, the chat on it, and the records we keep when you buy from us.

We only collect what we need to answer you and serve you:

• When you sign in: your mobile number. We text it a one-time code to confirm it is yours. The first time, we also ask for your name and email address so we can reply to your enquiries.
• When you send an enquiry through the chat: your message and anything you add to it — the product you're asking about, a brand or model you want us to source, specifications, budget, or the date you need it by — along with which chat topics you went through to reach us.
• When you buy from us in the shop, by phone or through the chat: your name, phone number, email address if you give it, what you bought and what you paid, so we can issue receipts, handle warranty claims and keep the accounts the law requires.
• Automatically: a scrambled (hashed) form of your IP address with each enquiry, used only to stop spam — we never store the address itself — and the standard logs our hosting provider keeps for security and troubleshooting, such as IP address, browser type and the pages requested.

This website does not take payments, so we never collect card or bank details online.

• To reply to your enquiries and call you back.
• To supply what you order: sourcing, fitting, delivery or collection, and warranty claims.
• To sign you in and keep your account secure.
• To protect the site from spam and abuse.
• To keep the business and tax records the law requires.

We use your data on the basis of the consent you give when you sign in or send us an enquiry, and — where the law allows without it — to complete a purchase you asked for or to meet a legal obligation.

We do not sell your personal data, we do not use it for advertising, and we do not send you marketing messages unless you have asked for them.

Only with the service providers that run parts of the site for us, and only what each one needs. They process it on our behalf and may not use it for anything else:

• Hosting and database — the website runs on Vercel and its data is stored with Supabase. Their servers may be outside India.
• Text messages — an SMS provider delivers your sign-in codes.
• Email — an email delivery service lets our staff know when a new enquiry arrives.
• Couriers — your name, phone number and address, when we ship an order to you.

We will also disclose personal data where the law requires it, for example to a court or a government authority.

• Sign-in codes expire within minutes and can be used only once. Records of sign-in attempts are deleted after a day.
• Your sign-in itself: 90 days on the device you signed in on, or until you sign out — see Cookies.
• Enquiries and account details: for as long as we need them to deal with your enquiry and any follow-up. You can ask us to delete them at any time.
• Purchase records: for as long as Indian tax and accounting law requires us to keep them.

The site is served only over an encrypted connection (HTTPS). Sign-in codes and IP addresses are stored only in hashed form. The shop's dashboard, where enquiries and sales are kept, is open only to staff who sign in with their own verified phone numbers and a PIN. No system is perfectly secure, but if a breach ever affected your data we would tell you and the authorities as the law requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how we use it;
• have it corrected, completed or updated;
• have it deleted, unless the law requires us to keep it;
• withdraw your consent at any time — this stops future use, but does not undo what was lawfully done before;
• nominate someone to exercise these rights for you if you die or become unable to; and
• complain to us, and have the complaint dealt with.

To do any of this, contact us using the details under Contact and grievances. We may need to confirm it's you before acting on a request, and we aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

Plenty of our customers are young archers, but this website is meant to be used by adults. If you are under 18, please ask a parent or guardian to sign in and contact us for you. If we find we have collected a child's personal data without a parent's or guardian's consent, we will delete it.

Cookies are small files a website stores in your browser. We keep them to a minimum:

• hawk_session — essential. Keeps you signed in, so you don't have to verify your number every visit. It holds a signed record of which account is signed in — never a password, as there isn't one — and can't be read by the page's scripts. It lasts 90 days from when you sign in, or until you sign out or clear your cookies, whichever comes first.
• hawk_consent — essential. Remembers your cookie choice, for 12 months.

Both are needed for the site to work. We don't use analytics, advertising or tracking cookies.

The map on our contact page is provided by OpenStreetMap, which may set its own cookies when the map loads. Their use is covered by OpenStreetMap's own privacy policy.

Change cookie settings

You can also delete or block cookies in your browser's settings. If you block essential cookies, you won't be able to sign in.

If we change how we use personal data, we will update this page and the date at the top of it. If a change is significant, we will say so on the site before it takes effect.

For any question, request or complaint about your personal data, contact our Grievance Officer:

• Email: hello@hawkarchery.in
• Phone: +91 82205 62667
• Post: Hawk Archery, 4, Sangothi Amman Main Rd, Kovil Street, Sembakkam, Tambaram, Chennai, Tamil Nadu 600073