Privacy policy · illegalsoup

Who we are

illegalsoup is an online store selling home, kitchen and water products to customers in India. You can reach us at illegalsoupp@gmail.com or on WhatsApp at +91 97784 67921.

What we collect

When you are just browsing

You do not need an account, and we do not ask for your name or email to look around. Browsing still involves the following:

A cart identifier. A cookie named cartId links your browser to a shopping cart held by Shopify. Without it your cart would empty on every page load.
A visitor identifier. A cookie named vid, set on your first page view and kept for a year. It is a random value that identifies a browser, not a person, and it is not derived from anything about you. We send a one-way hashed copy of it to Meta so repeat visits from the same browser can be recognised as one visitor rather than several.
Advertising identifiers. Cookies named _fbp and _fbc. The second one stores the click identifier from a Meta ad, if you arrived from one.
Technical data. Your IP address and browser user agent, which reach our server with every request, as they do on any website.
One local preference. We store a flag in your browser so the first-order discount popup appears only once. It never leaves your device.

When you buy

Checkout and payment are handled entirely by Shopify. You give Shopify your name, delivery address, phone number, email address and, unless you are paying cash on delivery, your payment details. Card and UPI details never touch our servers and we never see them.

When you message us

If you contact us on WhatsApp, by email, or through Instagram or Facebook, we keep that conversation so we can answer you and handle any return. Those platforms also process the message under their own privacy policies.

The live chat window on this site is run by Tawk.to. If you open it, Tawk.to stores the conversation and basic details about your visit, such as the page you were on and your approximate location, so we can reply and pick the thread back up later. Anything you type into that window goes to Tawk.to as well as to us, under their privacy policy. Please do not send card details or passwords through it.

Advertising and measurement

We advertise on Facebook and Instagram and we measure whether those ads work. To do that we run the Meta Pixel in your browser and send a matching copy of the same events from our server using Meta's Conversions API.

The events we send are:

a page view
viewing a product
adding to cart
starting checkout
tapping a WhatsApp link
copying a discount code

Alongside each event we send your IP address, browser user agent, the _fbp and _fbc cookie values, and a one-way hashed version of your vid visitor identifier. We do not send your name, email address, phone number or delivery address from this site. Shopify separately reports completed purchases to Meta from its own checkout.

Meta uses this to attribute sales to ads, to decide who sees our ads, and to build advertising audiences. Their handling of it is governed by Meta's privacy policy.

If you would rather not be measured this way, a browser-level tracker blocker or Meta's own ad settings will stop most of it. Blocking it does not affect your ability to browse or order.

Website analytics

We use two tools to understand how this website is used, separately from the advertising measurement above.

Google Analytics 4 counts visits and shows us which pages people look at, roughly where in the world they are, and how they arrived. It sets its own cookies. Google's handling of that data is governed by Google's privacy policy.
Microsoft Clarity records how people move through pages, including scrolling, clicks and taps, so we can find parts of the site that are confusing or broken. Clarity masks text entered into form fields by default, so what you type is not captured. Microsoft describes its handling in its privacy statement.

Neither tool is used to identify you personally, and neither receives your name, address or payment details. A browser-level tracker blocker stops both, and blocking them does not affect your ability to browse or order.

Why we are allowed to use it

To complete your order. We cannot ship a parcel without an address, or take cash on delivery without a phone number.
To run the shop. Keeping a cart working, preventing fraud, answering questions.
To advertise. Measuring which ads lead to sales. You can opt out of this as described above.
To meet legal obligations. Tax and accounting records.

We do not sell your personal data. We share it only with:

Shopify, which runs our checkout and stores order records
Meta, for the advertising events described above
Google and Microsoft, for the website analytics described above
Tawk.to, if you use the live chat window
Vercel, which hosts this website
Courier and delivery partners, who need your name, address and phone number to deliver and to collect cash on delivery
Our suppliers, who ship some orders directly and receive the delivery details needed to do so
Government authorities, where the law requires it

Some of these providers run servers outside India, so your data may be processed abroad.

How long we keep it

Order records are kept as long as tax and accounting law requires. Support conversations are kept while they are useful for handling returns. Advertising cookies expire on their own, and _fbc lasts up to 90 days.

Your rights

You can ask us to:

tell you what personal data of yours we hold
correct anything that is wrong
delete your data, apart from records we must keep by law
stop using your data for advertising or analytics

Email illegalsoupp@gmail.com and we will respond. We may ask for the order number or phone number you used, so we can be sure we are talking to the right person.

How to have your data deleted

Email illegalsoupp@gmail.com with the subject line Delete my data and include the phone number or email address you used to order. We will confirm within a few days and delete everything we are not legally required to keep.

To remove the identifiers this site set in your browser, clear cookies for this site in your browser settings. That deletes vid, _fbp, _fbc and cartId immediately.

Children

This shop is not intended for children and we do not knowingly collect data from anyone under 18.

Complaints

If you are unhappy with how we have handled your data, write to illegalsoupp@gmail.com and mark it Grievance. We will acknowledge it and tell you what we are doing about it.

Changes

If we change this policy we will update the date at the top of this page.