1. Who we are

This website is operated by:

VK BLUE SAPPHIRE GmbH
trading as „Ghar Ka Khana“
Sickingenstraße 56, 10553 Berlin, Germany
Registered at: Amtsgericht Charlottenburg (Berlin), HRB 280626 B
VAT ID / USt-IdNr.: DE462080442
Represented by: Vaibhav Shankar Rajure (Managing Director)

Contact for privacy questions: vkbluesapphiregmbh@gmail.com · Phone: +49 1522 7551111

2. What personal data we collect

When you create an account: your name, email address, and a securely hashed password. To confirm it’s really you, we email a one-time verification code (OTP) to the address you provide before the account is activated.

When you place an order: your name, delivery address, phone number, email address, and details of the items ordered.

When you pay: your payment is processed directly by Stripe, our payment provider. We do not see or store your full card number.

When you use the contact form: your name, phone number, email address, and the message you send us.

Automatically: basic technical data such as your IP address and browser type, collected for security purposes and, if enabled, basic site analytics.

3. Why we process this data, and our legal basis

Purpose	Legal basis (GDPR Art. 6)
Creating and managing your account	Performance of a contract (6.1.b)
Processing and delivering your tiffin orders	Performance of a contract (6.1.b)
Sending order confirmations and OTP verification emails	Performance of a contract (6.1.b)
Processing payments via Stripe	Performance of a contract (6.1.b)
Preventing fraudulent logins and spam	Legitimate interest (6.1.f)
Responding to contact form enquiries	Legitimate interest / pre-contractual steps
Cookies and analytics	Consent, via our cookie banner (6.1.a)

4. Who we share data with

We use the following third-party services, each processing data under its own privacy policy:

• Stripe — payment processing.
• Brevo (Sendinblue) — sends transactional emails on our behalf (order confirmations, OTP codes). Based in France (EU).
• Namecheap — our website and database hosting provider.
• Google Analytics (if/when enabled) — anonymized website usage statistics.

We do not sell your personal data to third parties.

5. How long we keep your data

We retain account and order data for as long as your account is active, and as required by German commercial and tax retention law thereafter (typically 6–10 years for invoices/order records under HGB/AO).

6. Your rights

Under GDPR, you have the right to access, correct, or delete your data, restrict or object to processing, receive your data in a portable format, withdraw consent at any time, and lodge a complaint with a supervisory authority — in Berlin, the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

To exercise any of these rights, contact us at vkbluesapphiregmbh@gmail.com.

7. Cookies

We use a cookie consent banner to ask for your permission before setting non-essential cookies. You can change your preferences at any time via the cookie settings link in the banner.

8. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page.

Last updated: 13 July 2026