Privacy Policy

We collect information you provide directly when you:

• Book a piece — phone number, name, email address (optional), delivery address, size selection.
• Make a payment — billing information processed by Razorpay (we do not store card details).
• Use your dashboard — number selection, delivery updates, and interactions logged for your account.

We also collect data automatically:

• Device and browser type, IP address, and general location (country/region).
• Pages visited, session duration, and referral source — used to improve the Platform.

• To process your purchase and confirm your booking.
• To manufacture and ship your piece to the address you provide.
• To send you updates about your order, the drop timeline, and reveal day.
• To verify your identity via OTP when you log into the Platform.
• To communicate the outcome and coordinate delivery with the recipient.
• To comply with applicable legal and tax obligations (e.g., TDS reporting).
• To improve the Platform's performance and user experience.

We do not use your information to serve third-party advertising. We do not sell your personal data.

Payments on Flat3999 are processed by Razorpay, a PCI-DSS compliant payment gateway. When you complete a purchase, your payment information is transmitted directly to Razorpay. We receive a transaction reference and payment status only — we do not store your card number, CVV, or other sensitive payment details.

Razorpay's own privacy policy governs how they handle your payment data.

We share your information only in these circumstances:

• Logistics partners — Your name and delivery address are shared with our shipping partner to fulfil your order.
• Manufacturing partners — Your size selection is shared with theChokka to produce your piece. No other personal data is shared.
• Payment provider — Razorpay processes your payment. See Section 3.
• Legal compliance — We may disclose information if required by law, court order, or tax authority, including TDS documentation for the outcome recipient.

We do not share your information with any other third parties.

We use industry-standard security measures to protect your personal information, including encrypted connections (HTTPS), access controls, and secure storage. Your number selection is encrypted and not accessible to anyone — including us — until the selection window closes.

No method of transmission or storage is 100% secure. We encourage you to use a unique OTP each session and not share your verification code.

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data, subject to legal retention requirements.
• Withdraw consent for marketing communications at any time.

To exercise these rights, email privacy@flat3999.com. We will respond within 30 days.

The Platform uses essential cookies to maintain your session and remember your login state. We do not use advertising or tracking cookies.

You may disable cookies in your browser settings, but this may affect your ability to use the Platform, including staying logged in.

The Platform is not intended for persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via the contact information associated with your account. The version date at the top of this page reflects the most recent revision.

For questions about this Privacy Policy or how we handle your data, contact us at: