Privacy Policy

We collect information you provide directly to us and information generated by your use of our website:

Information you provide:

• Mobile number (for OTP-based login and order communication)
• Name (provided during account creation or checkout)
• Email address (optional — provided for newsletters or order confirmation)
• Delivery addresses (saved for faster checkout)
• Order history and preferences
• Messages and queries sent through our contact form

Information collected automatically:

• Device information (browser type, operating system)
• IP address and approximate location (city level)
• Pages visited and time spent on our website
• Referral source (how you found us)
• Cart interactions and product views

We use the information we collect for the following purposes:

• Processing and delivering your orders
• Sending order confirmations and delivery updates via SMS
• Verifying your identity during OTP login
• Responding to your queries and support requests
• Sending promotional offers and newsletter (only if you opted in — unsubscribe anytime)
• Improving our website, products, and services
• Detecting and preventing fraud or unauthorised access
• Complying with legal obligations under Indian law

We will never sell, rent, or trade your personal information to any third party for their marketing purposes.

We share your information only in the following limited circumstances:

Your data is stored securely using Supabase (hosted on AWS infrastructure) with industry-standard encryption. All data transfers between your browser and our servers are encrypted using SSL/TLS.

We implement the following security measures:

• OTP authentication (no passwords stored)
• JWT tokens stored in httpOnly cookies (not accessible to JavaScript)
• Database access restricted to authorised services only
• Regular security reviews and updates

While we take all reasonable measures to protect your data, no method of internet transmission or electronic storage is 100% secure. We will notify you if a security breach affects your data.

We use the following types of cookies on our website:

• Essential cookies: Required for login sessions and cart functionality — cannot be disabled
• Analytics cookies: Help us understand how visitors use our site (can be disabled in browser settings)
• No advertising/tracking cookies — we do not run targeted ad campaigns through third-party cookies

You can control cookie settings through your browser preferences. Disabling essential cookies may affect your ability to use the website fully.

You have the following rights regarding your personal information:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Ask us to correct any inaccurate information
• Right to deletion: Request deletion of your account and associated data
• Right to opt-out: Unsubscribe from marketing communications at any time
• Right to data portability: Request your data in a machine-readable format

To exercise any of these rights, contact us at maaflavours74@gmail.com with the subject line "Privacy Request". We will respond within 7 working days.

We retain your personal data for as long as your account is active, and for the following periods after account closure:

• Order records: 7 years (required by Indian tax regulations)
• Contact form messages: 1 year
• Analytics data: 2 years (anonymised)
• Marketing consent records: Until withdrawn + 1 year

Our website is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a child, we will delete it promptly. If you believe we have information about a child, please contact us.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify registered users via SMS or email for significant changes. We encourage you to review this policy periodically.

For any privacy-related queries, requests, or concerns, reach out to: