Privacy policy
This tells you what personal data GoBuddy Sports collects when you shop with us, why we collect it, who else sees it and what you can ask us to do with it. It is written to meet the Digital Personal Data Protection Act, 2023, under which we are the data fiduciary for your data and you are the data principal.
What we collect, and why
| What | Why we need it |
|---|---|
| Your name, delivery address, phone number and email | To take your order, deliver it, raise your GST invoice and reach you about that order |
| Order history, sizes, returns and refunds | To run the order, handle returns, and keep the accounts and GST records the law requires us to keep |
| Payment status, the last four digits and the method used | To confirm your payment and to refund you to the same place |
| Your GSTIN, only if you give it | To raise a business-to-business tax invoice |
| Whether you asked for marketing email or SMS | To send you what you asked for, and to stop when you say stop |
| Cookies and basic usage data from the website | To keep your cart and login working, and to see which pages and products people actually use |
We never see your card, UPI or net-banking credentials. Payments are taken on Razorpay's own secure page. We are told whether the payment succeeded and for how much — nothing more.
We use your data only for the purposes listed above. If we ever want it for something else, we will ask you first.
Consent, and taking it back
Placing an order is your consent to us using your data to fulfil that order. Marketing is separate and opt-in: we only email or message you offers if you ticked the box or subscribed.
You can withdraw consent at any time — click unsubscribe in any marketing email, reply STOP to a message, or write to us. Withdrawing marketing consent costs you nothing else. Withdrawing consent for order data while an order is in flight means we cannot deliver it, and we will cancel and refund instead.
Who else your data goes to
- Shopify — hosts this store and its checkout, and stores your order and account data on our behalf.
- Razorpay — takes the payment and processes refunds. Razorpay holds the payment data under its own privacy policy and RBI rules.
- Our courier partners — get your name, address and phone so they can deliver and call you.
- Our own order-management and accounting system — where the order, invoice and GST record live.
We do not sell your personal data, and we do not rent or share it with anyone for their own marketing.
Some of these providers store data on servers outside India. That is allowed under the Act except for countries the Central Government restricts, and we will not transfer your data to a restricted country.
How long we keep it
We keep your order data while your relationship with us is live and for as long as tax law requires afterwards — GST law makes us keep invoices and related records for 72 months from the due date of the annual return for that year. Marketing preferences are kept until you withdraw them. If an account has no activity for two years, we erase the personal data held in it, keeping only what tax law still requires. When a purpose is finished and no law requires us to keep the data, we erase it, and we have our processors erase it too.
Keeping it safe
The site runs over HTTPS, payment data never reaches us, and access to customer data inside GoBuddy is limited to the people who need it to ship your order or answer your question. If a personal data breach ever happens, we will report it to the Data Protection Board of India and tell every affected customer, as Section 8(6) of the Act requires.
What you can ask us to do
- See what we hold — a summary of your personal data, what we have done with it and who we shared it with (Section 11).
- Correct or complete it — a wrong spelling, an old address, a changed phone number (Section 12).
- Erase it — we will, unless GST or accounting law still requires us to hold that record (Section 12).
- Nominate someone to exercise these rights for you if you die or are incapacitated (Section 14).
- Complain to us and get an answer (Section 13). Please use this before going to the Data Protection Board, as the Act asks.
Ask by writing to the contact below with your order number so we can find you.
Children
This store is meant for adults. We do not knowingly collect data from anyone under 18 without a parent's or guardian's verifiable consent, and we do not track children's behaviour or target advertising at children. If you believe a child's data has reached us, tell us and we will erase it.
Cookies
We use cookies that are necessary to run the store — your cart, your session, and the storefront password while the store is private. We also use basic analytics cookies to count visits and see which products are viewed. You can block cookies in your browser, but the cart and checkout will not work without the necessary ones.
Who to contact about your data
Under Section 8(9) of the Act we must publish the contact details of the person who will answer your questions about your personal data. That person is:
our Grievance Officer
GOBUDDY SPORTS
St. Ann's CGHS Ltd., "The Residency", A-11, Plot No. 8-A, Sector 7, Dwarka, New Delhi-110075
gobuddysports@gmail.com · +91 99108 80017
We acknowledge every request within 48 hours and answer it within one month.
Changes
If we change this policy we will post the new version here and change the date below. Material changes that affect how we use data you have already given us will be notified to you.
This policy takes effect on 13 September 2026.