1 Information We Collect

To process your orders, ensure delivery across India, and provide prompt customer assistance, we collect the following types of information:

• Contact & Identification Details: Your full name, delivery address with landmark and PIN code, primary phone/WhatsApp number, and email address.
• Order & Transaction Details: Specific hookahs, chillams, flavours, or coals purchased, order amounts, chosen payment method, invoice logs, and delivery tracking history.
• Age Verification Acknowledgement: Digital confirmation confirming you are 18 years of age or older in compliance with Indian tobacco laws.
• Customer Care Submissions: Information, photographs, or unboxing videos submitted to verify damaged items or request support.
• Technical & Browsing Data: Internet Protocol (IP) address, device type, operating system, browser type, and interaction logs collected automatically via secure cookies to ensure smooth site navigation.

2 How We Use Your Information

Qube Shisha uses your personal information purely for business execution and customer satisfaction:

• Order Fulfillment & Packing: Printing shipping labels, generating GST invoices, and dispatching products from our Meerut distribution hub.
• Delivery Communications: Sending automated order confirmations, dispatch updates, airway bill (AWB) tracking numbers via SMS, WhatsApp, and email.
• Customer Service & Claims: Resolving queries, tracking missing parcels, and evaluating transit damage claims backed by unboxing videos.
• Fraud Prevention: Verifying Cash on Delivery (COD) orders in high-risk pincodes to curb bogus orders and return-to-origin (RTO) courier losses.

3 Payment Gateway & Card Security

• Bank-Grade Encryption: All prepaid transactions are routed through Reserve Bank of India (RBI) authorized, PCI-DSS compliant payment gateways utilizing 256-bit SSL encryption.
• Secure UPI Channels: Transactions completed through Google Pay, PhonePe, Paytm, or BHIM happen directly in your UPI application environment.
• COD Partial Advance Security: Any nominal confirmation advance requested for high-risk pin codes is processed exclusively through authentic payment links.

4 Courier & Third-Party Service Sharing

To safely deliver fragile glass hookahs and ceramic chillams, we share strictly necessary delivery details with verified operational partners:

• Logistics & Courier Partners: Your name, phone number, and address are shared with reputed carriers such as Delhivery, Bluedart, Xpressbees, DTDC, and India Post solely to accomplish physical doorstep delivery.
• Communication Platforms: Transactional SMS and WhatsApp service gateways utilized strictly to transmit your dispatch notifications and delivery OTPs.
• Legal & Regulatory Authorities: We may disclose data if legally required to comply with court orders, central law enforcement, or Indian tax authorities.

5 Cookies, Analytics & Website Performance

• Essential Session Cookies: Required to keep products in your shopping cart, remember your login session, and allow seamless checkout across pages.
• Analytics & Performance Tools: We employ Google Analytics (Site Kit) to understand anonymized visitor metrics, popular hookah categories, and mobile layout usability to improve store responsiveness.
• Managing Your Preferences: You can choose to disable or block cookies through your web browser settings; however, disabling essential cookies may impact checkout functionality.

6 Protection of Minors (18+ Age Restriction)

We do not knowingly collect personal data from children or individuals under the legal age. If we discover that an account has been created by a minor, all personal details associated with that account will be deleted from our records immediately.

7 Your Rights & Data Retention

In accordance with Indian digital privacy standards, you maintain rights regarding your personal information:

• Access & Review: You can log into your Qube Shisha dashboard anytime to review or update your saved shipping addresses, contact number, and order records.
• Account & Data Deletion: You may request the deletion of your account and customer record by emailing our privacy desk, provided there are no active transit orders or pending dispute investigations.
• Statutory Retention: Basic transaction invoices are archived for statutory accounting and GST audit compliance as mandated under Indian Commercial Law.

8 Grievance Officer & Privacy Contact

In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020, please direct all questions, concerns, or data correction requests to our designated grievance desk: