Privacy

Who holds your details

Astha Computer, the wholesale shop in Berhampore, Murshidabad, West Bengal, that runs yourastha.in. If you want to ask anything about your details, ask us — the ways to reach us are at the bottom of this page.

What we collect

Your name and your shop's name.
Your phone number and your email address.
Your delivery address or addresses.
Your GSTIN, if you give it, so it can go on the bill.
Your orders: what you bought, what it cost, the UTR number you typed for a UPI payment, and the courier and consignment number after dispatch.
Support tickets and messages you send through the contact form.
Your password, stored only as a hash — see below.
The IP address a contact message or a sign-up came from. We keep it to stop the same machine flooding the form, and for nothing else.

We do not collect anything you have not typed into this site. There is no tracking of what you browse.

Why we have it

To take your order and check that the payment really arrived.
To pack it and get it to your address.
To bill it and to keep the books GST law requires us to keep.
To answer you when you write to us, and to tell you when your order is confirmed or dispatched.
To let you sign in and see your own past orders.

What we do not do

We do not sell, rent or trade your details to anyone.
We do not run advertising trackers or advertising pixels of any kind.
This site has no analytics at all today. Nobody, us included, is counting your visits or following you between pages.
We do not send marketing mail. There is no newsletter. The only emails we send are about your own account or your own order.
We do not store your card, bank or UPI credentials. We never see them — you pay from your own app, and all that reaches us is the UTR number you type.

Cookies and what your browser keeps

Two things, both plain:

A session cookie when you sign in, so the site knows it is still you on the next page. It is HttpOnly, so scripts on the page cannot read it, and what we hold at our end is a hash of it, not the cookie. It lasts thirty days for a customer and eight hours for staff, and signing out ends it.
Your cart, kept in your own browser's local storage. It holds only product ids and quantities, never prices and never your details, and it never leaves your browser until you place the order.

There are no other cookies. No advertising cookie, no third-party cookie, no consent banner — because there is nothing to consent to.

Your password

A password is never stored as you typed it. It is put through PBKDF2-SHA256 a hundred thousand times and only that result is kept, so nobody at the shop can read your password, and a stolen copy of our database does not hand anyone your password either. If you forget it, we cannot tell you what it was — you reset it from the sign-in page and the reset link works once and expires in an hour.

If you sign in with Google instead, Google tells us your name and your email address so we can find or make your account. Google never gives us your Google password, and we do not give Google anything about your orders.

Who else sees it

The courier. Your name, phone number and delivery address go on the parcel and to the courier who carries it — India Post, DTDC, Delhivery, Trackon, Blue Dart, The Professional Couriers, or the man who brings it by hand locally. They cannot deliver it without them.
Our own bank and UPI app. Your payment reaches the shop's own bank account directly. There is no payment company in between holding your order.
Our billing system at the counter, which raises the GST invoice for your order from the same details.
Our staff, and only the ones whose job needs it. An employee who only manages products cannot see a customer's address or an order at all.
The company that hosts this website and the service that sends our email, because the data physically sits there. They do not use it for anything of their own.
Anyone we are required by law to show it to — a tax officer or a court.

How long we keep it

Orders, invoices and payment records are kept for seven years from the end of the financial year they belong to. That is not our choice: Indian tax law requires books of account to be kept for that long, and an order and its bill are part of the books. We cannot delete an order on request while that period runs.

Your account details and your addresses are kept while your account is open. Support tickets and contact messages are kept while they are useful for answering you again.

Asking for your details, or asking us to close your account

Write to us — WhatsApp is fine — from the phone number or email address on the account, and we will:

tell you what we hold about you, and send it to you;
correct anything that is wrong, which you can also do yourself in your account;
close your account and remove your sign-in and your addresses.

Closing an account does not erase the order and tax records behind it. Those we have to keep for the period above, and after that they go too.