Privacy Policy

Myaamee's Masalas is an online retailer of pure natural spices and health snacks, operated from Hyderabad, Telangana, India.

We collect information in two ways: information you give us directly, and information collected automatically when you visit our site.

2.1 Information You Provide

• Account registration: First name, last name, email address, mobile number, and password (stored as an encrypted hash — never in plain text).
• Delivery addresses: Flat/door number, building name, street, landmark, city, state, and PIN code. You may save multiple delivery addresses to your account.
• Order information: Products selected, variant (weight/size), quantity, and any special instructions.
• Payment: We do not collect or store card numbers, CVV codes, or banking credentials. All payment data is handled exclusively by our payment partner, Razorpay.
• Communication: Messages you send us via WhatsApp, email, or our contact form.

2.2 Information Collected Automatically

• Session data: A temporary session cookie that keeps you logged in during your visit. It is deleted when you close your browser or log out.
• Basic server logs: Your IP address, browser type, and the pages you visit, stored temporarily by our hosting provider (Hostinger) for security purposes.
• Location (optional): If you use our GPS-assisted address feature, your device's latitude and longitude are collected with your explicit permission to help auto-fill your delivery address. This data is not shared with any third party.

We use the information collected for the following purposes:

• Order fulfilment: Processing your purchase, arranging delivery through our shipping partner (Shiprocket), and sending you order confirmation and delivery updates by email.
• Customer support: Responding to your queries, resolving disputes, and processing refund or cancellation requests.
• Account management: Creating and maintaining your account, enabling saved addresses and order history.
• Service improvement: Understanding which products are popular, improving our website, and fixing technical issues.
• Legal compliance: Maintaining records as required under applicable Indian laws (including the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020).
• Fraud prevention: Detecting and preventing fraudulent transactions and abuse of our platform.

We do not use your information to send unsolicited marketing emails or SMS messages unless you have explicitly opted in.

We never sell your personal information. We share it only in the following limited circumstances:

• Razorpay (payment processing): Your name, email, and mobile number are passed to Razorpay to initiate and verify your payment. Razorpay operates under its own Privacy Policy.
• Shiprocket (order shipping): Your name, phone number, and delivery address are shared with Shiprocket so that our courier partner can deliver your order. Shiprocket operates under its own privacy policy.
• Hostinger (web hosting): Our website and database are hosted on Hostinger's servers. They process technical data (server logs, backups) in accordance with their privacy policy.
• Legal authorities: We may disclose your information if required by law, court order, or government authority in India.

No other third parties receive your personal data.

We use a minimal set of cookies strictly necessary to operate the website:

• Session cookie (PHPSESSID): Keeps you logged in across pages. Expires when you close your browser or log out. This cookie does not track you across other websites.
• Cart cookie: If you shop without an account, a session identifier stores your cart contents temporarily.

We do not use advertising cookies, Google Analytics, Facebook Pixel, or any cross-site tracking technology. You can disable cookies in your browser settings, but some parts of the site (like logging in) may not work without them.

We retain your data for as long as necessary for the purposes described in this policy:

• Account data: Kept for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g., order records for tax purposes).
• Order records: Retained for 7 years as required under Indian tax laws.
• Server logs: Automatically purged by our hosting provider after 30–90 days.
• Email logs: Kept for 6 months to help diagnose delivery issues.

We take reasonable technical and organisational measures to protect your personal information:

• All data transmitted between your browser and our website is encrypted using HTTPS / TLS (SSL).
• Passwords are stored as bcrypt hashes — we cannot read your password, and neither can our staff.
• Payment data is never stored on our servers — it is processed entirely by Razorpay, a PCI-DSS compliant gateway.
• Access to the admin panel is restricted to authorised personnel only.
• Our database is hosted on Hostinger's secured infrastructure with regular automated backups.

No method of transmission or storage over the internet is 100% secure. While we do our best to protect your data, we cannot guarantee absolute security. If you suspect any unauthorised access to your account, please contact us immediately at orders@myaamees.in.

You have the following rights regarding your personal data:

• Access: You can view your account details and order history by logging into your account at any time.
• Correction: You can update your name, mobile number, and delivery addresses from the My Account page.
• Deletion: You may request deletion of your account and personal data by emailing us at orders@myaamees.in. We will process your request within 30 days, subject to any legal obligations to retain certain records.
• Portability: You may request a copy of your personal data in a readable format.
• Objection: You may object to the processing of your data for any purpose beyond order fulfilment.

To exercise any of these rights, contact us at orders@myaamees.in or WhatsApp +91 9177 318 248. We will respond within 15 business days.

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information without parental consent, please contact us and we will delete it promptly.

Our website may contain links to external sites (such as WhatsApp or Razorpay). Once you leave myaamees.in, this Privacy Policy no longer applies. We encourage you to read the privacy policies of any third-party websites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

For significant changes, we will notify registered customers by email.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to us:

We are committed to addressing your concerns fairly and promptly.