Privacy Policy

Elecfy respects your privacy and is committed to handling personal information with care. This Policy describes information associated with your use of the Elecfy website, including browsing product listings, customer account forms, orders and checkout, and contacting us.

The information involved depends on the feature you use. When the customer authentication service is configured, account details you submit are sent to Elecfy's server and the first-party WordPress service to create or access your account, and password-reset messages are sent by email. Checkout details are sent to the configured WooCommerce store to create a guest order, and the site loads Google Analytics 4 and Razorpay checkout scripts for site measurement and payments.

This Policy should be read alongside our Terms & Conditions, Shipping Policy and Return Policy.

Information handled by the Website depends on the actions you take and may include:

• Order and contact details: name, email address, phone number, and billing and delivery address information that you enter during checkout.
• Order details: selected products, quantities, order number and status, and information returned by the store when an order is created. If you request a GST invoice, the GSTIN and business/legal name you provide are also sent to the store and saved with the order.
• Cart and wishlist data: product identifiers and related listing details, such as names, prices, quantities and product images, saved in your browser to provide cart and wishlist features. GST invoice details are temporarily saved in browser session storage while you use checkout.
• Payment and site-usage details: Razorpay order/payment references and status used to verify a payment, and website usage information processed by Google Analytics 4. Razorpay checkout is provided by Razorpay and may collect information under its own privacy notice.
• Messages you choose to send: information you include in an enquiry or support communication. The Website's contact form uses your device's configured email application rather than a server-side submission endpoint.

When the authentication service is configured, registration and sign-in submit your name, email address and password to Elecfy's server-side account routes, which communicate with the first-party WordPress service. WordPress stores account details and protects passwords using its native password hashing. The browser receives an HTTP-only session cookie; the session token is stored as a hash by the plugin. Password-reset requests submit your email address and, when you set a new password, the reset key and new password to the account routes. Reset keys are validated by WordPress and are not included in the reset page's server-visible URL.

Information handled through the Website may be used, as applicable, to:

• create and manage an order and provide the products requested;
• arrange order processing and delivery using the details provided;
• respond to enquiries and provide customer support;
• help manage returns, refunds or other order requests under the applicable policy;
• keep cart and wishlist functionality available in your browser;
• measure website usage through Google Analytics 4;
• maintain the Website and its features;
• help prevent fraud, misuse or activity that could affect Website security; and
• meet applicable legal requirements and address disputes.

When the authentication service is configured, registration creates a customer account in the first-party WordPress/WooCommerce store, and sign-in and password-reset requests are processed by that service. Account profile details are stored by WordPress; passwords are handled using WordPress's native password hashing. The browser holds a session token in an HTTP-only cookie, while the plugin stores only its hash and expires or revokes sessions. Password-reset keys are created and validated by WordPress. The service must be deployed and configured for these account features to be available. Orders are currently created as guest orders and are not linked to customer accounts by the order-creation code.

To submit an order, checkout sends the billing and delivery details you provide (name, email, phone number, billing and shipping addresses, and optional company/address details), together with product identifiers and quantities, to Elecfy's configured WooCommerce store. If you request a GST invoice, your GSTIN and business/legal name are added to the order as metadata. The order is created as a guest order and the store returns an order number, status and totals. These details are used to create and manage the order and support its fulfilment and related enquiries.

The browser temporarily holds pending-order details, a payment retry reference, payment-verification references and order-confirmation details in session storage. The confirmation data is removed when the confirmation page reads it; pending payment data is removed after successful payment or when checkout details change. GST invoice details remain in session storage for the browser tab. Closing the tab or clearing site data removes browser session storage. The WooCommerce store maintains the order record.

Elecfy uses Razorpay Checkout and Razorpay's payment API to process payments. The checkout integration sends Razorpay your name, email address and phone number as payment prefill details, along with the amount, currency and Razorpay order reference. Payment card numbers, CVV codes, UPI PINs and banking passwords are entered in Razorpay Checkout, not in Elecfy's order form or order API, and are handled by Razorpay.

Razorpay returns payment identifiers and a signature which the Website submits to its server for verification. The server also receives Razorpay payment notifications. Payment/order references and status are saved with the related WooCommerce order. Payment information is also subject to Razorpay's privacy notice and practices.

The Website uses browser local storage for cart and wishlist contents, which can remain between visits until removed or browser site data is cleared. It uses session storage for GST invoice details and temporary checkout, payment and order-confirmation data as described above. These browser storage features are separate from cookies.

Google Analytics 4 is loaded across the Website and is configured to measure site usage. Google Analytics may use cookies or similar technologies and process information such as pages viewed, browser/device information and interactions, according to the Google Analytics property settings and Google's privacy terms. The project code contains no Google Ads or Meta Pixel integration. It does not include a consent banner or controls for analytics cookies. Razorpay Checkout is loaded when you use checkout and may also use technologies under Razorpay's own practices. You can clear local and session storage through your browser's site-data controls; doing so removes saved cart, wishlist or temporary checkout data.

Contact details may be used to respond to enquiries you send and to handle communications about an order where needed. The contact form opens or uses the email application configured on your device; how that message is sent and handled also depends on that application and its email service.

When server-side email delivery is configured, the Website sends transactional email for a created order, a Razorpay payment that has been verified and captured, and a verified failed Razorpay payment attempt while its order is pending. Once the companion WordPress authentication plugin is deployed and configured, the Website also sends account welcome and password-reset messages. The contact form still opens the email application configured on your device.

The project code shows the following service integrations that handle information:

• WooCommerce: checkout sends order and billing/shipping details, including optional GST invoice details, to the configured store to create and manage the order.
• Razorpay: payment prefill and transaction/order references are used to process and verify payment.
• Hostinger SMTP: when configured, customer contact details and account, order or payment information are sent through the configured mailbox service for transactional messages, including account recovery.
• Google Analytics 4: the site-usage tag is loaded for analytics measurement. Google's handling of analytics data is described in its privacy information.
• Product and content requests are made to the configured WooCommerce and WordPress services. These requests serve the Website's listings and content.

The project does not identify a particular delivery provider. If Elecfy shares delivery details with a carrier to fulfil an order, the business should identify that provider and limit the information shared to what is needed for delivery. This codebase contains no Google Ads or Meta Pixel integration.

Information may also be disclosed where required by law or where needed to protect the Website, customers or business from fraud or misuse.

WooCommerce credentials, Razorpay secret/webhook keys and SMTP credentials are used by server-side code and are not sent to the browser; Razorpay Checkout receives its public key ID to start a payment. The application code alone does not establish how the store, analytics, payment, hosting or email providers protect stored data, control staff access, or secure backups. Those provider practices and Elecfy's operational safeguards should be confirmed with the business and relevant providers; no internet transmission or storage system can be guaranteed completely secure.

Keep your own devices and any email or browser accounts secure, especially when using the Website on a shared device.

Cart and wishlist details remain in local storage until removed or site data is cleared. Session storage is used for GST invoice details and temporary checkout/payment information; most pending-payment data is cleared when payment succeeds or checkout details change, and confirmation data is cleared when viewed.

When the authentication service is configured, customer account records are retained in the WordPress/WooCommerce store. Authentication sessions expire or can be revoked, and the plugin stores session-token hashes rather than the raw tokens. WordPress manages password-reset keys and their validity. The application does not set a separate retention period for account records.

The application code does not set a retention period for WooCommerce order records or Google Analytics data. The business must confirm the store and analytics retention settings and its retention schedule for order, GST invoice, payment, support and operational records before relying on this Policy.

You may contact Elecfy about information associated with an order or enquiry, including to request correction or deletion. Requests will be handled subject to applicable requirements and any retention obligations. When the authentication service is configured, you may also contact Elecfy about your customer account or associated personal information. The Website does not currently provide self-service account-data controls.

You can manage cart and wishlist information stored by this browser through the Website features or your browser's site-data settings. For information held by the configured store service, Elecfy may need to coordinate with that service to respond.

The Website may link to external websites or services. Those destinations are operated independently and have their own privacy practices. Elecfy does not control and is not responsible for how external websites handle information; review their privacy notices before providing them with personal information.

The application does not implement age verification or an age-specific collection flow. Elecfy should confirm its intended age policy and any safeguards applicable to its customers before relying on this statement.

Elecfy may update this Privacy Policy from time to time to reflect changes to the Website, its features or applicable requirements. The latest version will be published on this page. Please check this page periodically for changes.

For privacy questions or requests relating to your information, contact Elecfy using the business details below.