Privacy Policy
Your privacy is important to us. We secure all personal data according to modern standards.
Privacy Policy
What we collect, why we need it, and the control you keep over it.
Never sold
We do not sell or rent your data
No card data
Card details never touch our servers
Yours to delete
Close your account whenever you wish
Last updated: 31 July 2026
Challa Publications sells Telugu spiritual books online. To take an order and put a book in your hands we need a small amount of information about you. This page explains exactly what that is, who else sees it, and how you can get it changed or removed. We ask for nothing we do not need.
1 What we collect and how long we keep it
Information
Why we need it
How long
Account details — name, email, phone, password
To create your account, sign you in and show your order history
Until you delete your account
Delivery addresses
To pack and deliver your books to the right place
Until you remove the address or close your account
Orders, invoices and payment status
To fulfil the order and to keep the accounts and tax records the law requires
8 years, as accounting and tax law requires
Messages, enquiries and support conversations
To answer you and to keep a record of what was agreed
3 years from the last reply
Cart and wishlist contents
So your selections are still there when you come back
Until you clear them or close your account
Newsletter subscription
To send book announcements you asked for
Until you unsubscribe — every email carries a link
Technical logs — IP address, browser, pages visited
To keep the site secure and to detect fraud and abuse
90 days
Your password is never stored in a readable form. It is put through one-way encryption, so nobody at Challa Publications can read it — not even us.
2 How we use your information
- To take, pack and deliver your book order
- To send order confirmations, dispatch and delivery updates
- To answer your questions and handle damage claims
- To keep the invoices and records that Indian tax law requires
- To protect the site against fraud, abuse and misuse
- To send book announcements — only if you subscribed, and only until you unsubscribe
What we never do
- Sell, rent or trade your personal data to anyone
- Share your details with advertising networks or data brokers
- Send you marketing email you did not ask for
- Build advertising profiles from what you read or buy
3 Who else sees your information
Only the partners we need to complete your order — and each one gets the least it can do the job with:
Razorpay — payments
Handles the payment itself. Your card, UPI or netbanking details are entered on Razorpay’s secure page and never reach our servers.
Our courier partner — delivery
Receives your name, delivery address and phone number so the parcel can reach you. Nothing else.
Our email provider
Delivers order confirmations, dispatch updates and replies to your inbox.
Telegram — internal order alerts
Our own staff receive a private alert with your order number, name and phone so a new order is never missed. The alert goes only to our team, never to a public channel.
Courts and authorities
Only when Indian law, a court order or a lawful investigation requires it.
4 Cookies
We use essential cookies only — the small files that make the site work at all:
- A session cookie, so you stay signed in and your cart survives page changes
- A security token that protects your forms from being submitted by another site
- Your language choice, so English or Telugu stays selected
We do not run advertising cookies, tracking pixels or third-party ad networks on this site. If that ever changes we will say so here first and ask for your consent.
5 How we protect it
- Every page is served over an encrypted connection
- Passwords are stored only as one-way hashes, never as text
- Card and UPI details are handled entirely by our payment partner
- Staff access is limited to the people who need it to serve you
No system is perfectly secure. If a breach ever affects your data, we will tell you and the Data Protection Board of India without delay.
6 Your rights
Under the Digital Personal Data Protection Act, 2023, you may ask us at any time to:
- Show you — a copy of the personal data we hold about you
- Correct it — fix anything inaccurate, outdated or incomplete
- Erase it — delete your data, except records the law makes us keep
- Withdraw consent — stop marketing email; unsubscribe works instantly
- Nominate someone — name a person who may exercise these rights for you if you die or become incapacitated
- Complain — to us first, and then to the Data Protection Board of India
How to use these rights
Your name, phone, addresses and password can be changed yourself from your account page. For anything else — a copy of your data, erasure, or a nomination — write to us and we will reply within 30 days.
7 Children
Accounts are for adults. Under Indian law, anyone under 18 needs a parent or guardian to give consent before their personal data is processed, so a child should order only through a parent’s account.
We never track children for advertising and we never show them targeted ads. If we learn that a child has created an account without consent, we will delete the data.
8 Changes to this policy
If this policy changes, the new version appears here with a new date at the top. When a change materially affects how we use your data, we will also tell you by email.
9 Grievance Officer
If you are unhappy with how we have handled your data or your order, write to our Grievance Officer. We acknowledge every complaint within 48 hours and resolve it within 30 days.
- Challa Publications, Vijayawada, Andhra Pradesh, India
- support@challapublications.in
- +91 95810 45020
- +91 92464 11614
- Monday to Saturday, 10 AM – 6 PM IST
If we cannot resolve it, you may take the matter to the Data Protection Board of India.
Still have a question about your privacy?