Privacy Policy

We respect your privacy. Here is exactly what data we collect, why we collect it, and how we protect it.

Last updated: July 2026

Catholic Reads ("we", "us", "our") operates this website and online bookstore. This Privacy Policy explains how we handle personal information you provide when you browse, create an account, or make a purchase.

We collect only what we need to run the store and fulfil your orders. We do not sell your data to anyone.

Information We Collect

Account information

When you create an account, we collect your name, email address, and password (stored as a one-way hash). If you sign in with Google, we receive your name and email from Google.

Order information

When you place an order, we collect your delivery address, phone number, and payment details. We do not store card numbers — payments are processed securely by Razorpay.

Usage data

We collect basic server logs (IP address, browser type, pages visited) to keep the site running and diagnose errors. We do not use third-party analytics trackers.

How We Use Your Information

Fulfilling your order

Your name, address, and phone number are shared with Delhivery solely to deliver your order. Your email is used to send order confirmations and shipping updates.

Improving the service

We use aggregated, anonymised data to understand which books are popular and how the site is used. This data cannot identify you individually.

Promotional emails

If you opt in during sign-up, we may occasionally send you emails about new arrivals or promotions. You can unsubscribe at any time from your profile settings.

Accounting

Order details are shared with Zoho Books for invoice generation and tax compliance as required by Indian law.

How We Protect Your Information

Passwords

Passwords are hashed using bcrypt before storage. We never store or transmit your password in plain text.

Payment security

All payments are handled by Razorpay, a PCI-DSS compliant payment gateway. We never see or store your card details.

Data storage

Your data is stored in a Neon (PostgreSQL) database hosted on secure, encrypted cloud infrastructure. Access is restricted to authorised personnel only.

Your Rights

Access and correction

You can view and update your personal information (name, phone, address) at any time from your profile page.

Deletion

You may request deletion of your account and associated personal data by contacting us. We will process your request within 30 days, subject to any legal obligations to retain records.

Opt out

You can turn off promotional emails at any time from your profile settings.

Cookies

We use a small number of cookies that are strictly necessary to operate the site:

—Session cookie: Keeps you signed in between page loads. Expires when you close your browser or after 30 days.
—Cart (localStorage): Your cart is saved in your browser's local storage, not a cookie. It persists until you clear your browser data or check out.

We do not use advertising cookies or cross-site tracking cookies.

Children's Privacy

Our store is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email if you have an account with us.

Questions About Your Privacy?

If you have any questions about this policy or want to request access to or deletion of your data, please get in touch.