Privacy Policy

Relaxon Mattresses is operated by Sabro Industries, a [ ENTITY TYPE ] registered at [ REGISTERED ADDRESS ], GSTIN [ GSTIN ].

Under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the Data Fiduciary for the personal data described below, and you are the Data Principal. That means the decisions about why and how your data is used are ours, and the rights over that data are yours.

We sell mattresses. We are not an advertising business, and we do not sell, rent or trade your personal data to anyone, for any purpose, ever.

You can reach us about anything in this policy on +91 98854 98076 or at info@relaxonmattresses.com, or in person at any of our showrooms: Suchitra, Hyderabad, Nagole, Hyderabad, KPHB, Hyderabad, Vijayawada, Andhra Pradesh, Visakhapatnam, Andhra Pradesh.

We collect the minimum needed to take an order and deliver a mattress to your door. The table below is the complete list.

What we deliberately do not collect: we do not ask for your date of birth, gender, Aadhaar, PAN, income, or any other detail that has nothing to do with delivering a mattress. If a form ever asks you for something you cannot see the reason for, please tell us — it is a mistake.

Checkout offers to capture your precise location so our delivery team can find your door. This section explains exactly what happens, because precise location is treated as sensitive information and you deserve a clear account of it.

• It is always optional. You can complete an order by typing your address. Refusing location access never blocks a purchase, and never changes the price.
• Your browser asks first. We cannot read your location without you granting permission in the browser prompt, and you can revoke that permission at any time in your browser settings.
• We use it only for delivery. Coordinates are shown to the team fulfilling your order. They are never used for advertising, never used to build a profile of you, and never sent to any analytics service.
• We do not write coordinates to our logs.
• A geocoding service converts coordinates into an address. When you drop a pin or use autocomplete, the coordinates or the text you typed are sent to OpenStreetMap’s Nominatim service, and to Google Places if that feature is enabled, so they can be turned into a readable address. Those providers receive that query under their own privacy policies. Nothing identifying you — no name, email or order — is sent with it.
• You can ask us to erase it. Deleting the coordinates from a past order does not affect the order itself. See section 9.

We never see, handle or store your card, UPI or bank details. At present Relaxon Mattresses accepts Cash on Delivery only. No payment information is collected anywhere on this website, because there is no online payment system connected to it.

If we add online payment in future, it will be operated by a PCI-DSS compliant payment gateway that collects those details directly. We will update this policy before that happens, and even then your card number will never reach our servers.

Two kinds of things store information in your browser on this site.

Things we store ourselves. These are not cookies and are never transmitted to us:

• relaxon-cart — your shopping cart, held in your browser’s local storage. It stays on your device. Clearing your browser data empties your cart.
• Your sign-in token, so you are not asked to log in on every page. It expires, and signing out removes it.
• relaxon-consent — whether you accepted or declined analytics and advertising cookies, so we do not ask on every visit.

Analytics and advertising cookies — only if you accept. When you first visit, we ask. Nothing below is loaded unless you choose Accept; if you decline, none of it runs and the site works exactly the same.

• Google Analytics (and Google Ads conversion tracking, if we run Google ads) — cookies such as _ga and _gcl_*; pages visited, device and browser, approximate location from your IP address. Tells us which products people look at and whether our ads work.
• Meta Pixel (Facebook and Instagram) — cookies such as _fbp; pages visited, and when you place an order or tap to call or WhatsApp us. Used to measure our Facebook and Instagram ads and to show our ads to people who have visited the site.
• Microsoft Clarity — records how pages are used (clicks, scrolling) so we can find what is confusing. It masks what you type into forms.

We also load fonts from Google Fonts, which means Google receives your IP address when a page loads.

You can change your mind at any time with Cookie choices at the bottom of every page. You can also block third-party cookies in your browser settings. Neither affects your ability to browse, order, or use any part of this site.

We share the minimum necessary, with these categories only:

We do not sell your data. We do not share it with data brokers. Advertising uses only the cookies described above, and only if you accepted them.

• Order and invoice records: retained for at least eight years, as required by Indian tax law. These cannot be deleted on request while that obligation stands.
• Delivery coordinates: kept for the length of the 10-year warranty so we can service or collect the mattress, and erased sooner on request.
• Account details: kept while your account is open. Close your account and we erase them, except where an order record must legally be retained.
• Password reset links: expire ten minutes after being issued, and only a hashed form is ever stored.

Concretely, and not as a generic assurance:

• Passwords are stored as bcrypt hashes. We cannot read your password.
• Password reset tokens are stored only as SHA-256 hashes and expire after ten minutes, so a database leak cannot hand anyone a working reset link.
• Order totals are calculated on our servers from our own catalogue, so prices cannot be altered in transit.
• Access to customer records is limited to staff who need it to fulfil orders.
• Sign-in attempts and password resets are rate limited.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the Data Protection Board of India as the DPDP Act requires.

You have the right to:

• Access — a summary of the personal data we hold about you and how it is processed.
• Correction — have inaccurate or incomplete data corrected or completed.
• Erasure — have your data deleted, except where we must keep it by law.
• Withdraw consent — as easily as you gave it. Withdrawing consent for location sharing, for example, does not cancel an order already placed.
• Nominate — name someone to exercise these rights on your behalf if you die or become incapacitated.
• Grievance redressal — complain to us first, and to the Data Protection Board of India if we do not resolve it.

To exercise any of these, email [ GRIEVANCE EMAIL ]. We will respond within 30 days. We will never charge you for making a request, and never treat you differently for having made one.

This site is not intended for anyone under 18, and we do not knowingly collect data from children. The DPDP Act requires verifiable parental consent before processing a child’s data, and we do not have a mechanism for that — so please do not create an account if you are under 18. If you believe a child has given us personal data, contact us and we will erase it.

When we change this policy we update the date at the top of the page. If a change materially affects how we use your data, we will tell you by email before it takes effect, and where the law requires it we will ask for your consent again.

In accordance with the Consumer Protection (E-Commerce) Rules 2020 and the Information Technology Rules 2021, the following officer handles complaints about this website and about your personal data:

We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with the outcome, you may escalate to the Data Protection Board of India, or to the National Consumer Helpline on 1915.

See also our Terms of Service.