Privacy Policy
Your data belongs to you. Here's exactly what we collect, why, and how we protect it.
DPDP 2023 Compliant No Data Selling Your Rights Cookie Policy
Data We Collect
MantoshShop collects only the data necessary to provide a seamless shopping experience and comply with Indian law (IT Act 2000, PDPB 2023):
| Data Type | What We Collect | Purpose |
|---|---|---|
| Identity | Name, email, phone | Account, orders, OTP |
| Address | Delivery addresses | Shipping |
| Payment | Transaction IDs only (not card details) | Order confirmation |
| Device | IP, browser, OS, device type | Security, analytics |
| Behavior | Pages visited, searches, clicks | Personalization |
| Communications | Support chat, emails sent to us | Customer service |
We never collect your full card number, CVV, banking passwords, or Aadhaar/PAN details.
How We Use Your Data
- Process and fulfill your orders, and send order status updates
- Verify your identity via OTP and prevent fraudulent transactions
- Send transactional emails (order confirmation, shipping, delivery)
- Personalize product recommendations based on your browsing history
- Improve our platform through anonymized usage analytics
- Comply with legal obligations under Indian law
We NEVER sell, rent, or trade your personal data to third parties for marketing purposes.
Data Sharing & Third Parties
We share your data only with trusted partners necessary to operate our service:
- Delivery Partners: Name, phone, address for order delivery
- Razorpay: Transaction processing (they are PCI-DSS compliant)
- Email Service: For sending transactional emails
- Cloudinary: For hosting digital product files securely
- Law Enforcement: Only when legally mandated by Indian courts/authorities
Cookies & Tracking
We use cookies and similar technologies to enhance your experience:
| Cookie Type | Purpose | Can Opt-Out? |
|---|---|---|
| Session cookies | Keep you logged in, maintain cart | No (essential) |
| Analytics cookies | Understand platform usage | Yes |
| Preference cookies | Remember your settings | Yes |
You can disable non-essential cookies in your browser settings. Note that disabling session cookies will log you out and empty your cart.
Your Rights Under Indian Law
Under the Digital Personal Data Protection Act (DPDP), 2023 and the IT Act, 2000, you have the following rights:
- Right to Access: Request a copy of all personal data we hold about you
- Right to Correction: Update inaccurate or outdated information
- Right to Erasure: Request deletion of your account and personal data
- Right to Portability: Export your data in a machine-readable format
- Right to Object: Opt out of marketing communications at any time
- Grievance Officer: Contact privacy@mantoshshop.com within 30 days response time
Data Retention & Security
Order Data
Retained 7 years (GST compliance)
Account Data
Until account deletion + 90 days
Analytics Data
Anonymized after 1 year
Support Tickets
2 years from resolution
All data is stored on encrypted servers with access controls. Employees access personal data only on a need-to-know basis under strict NDAs.