PRIVACY POLICY
Last updated: 27th July 2026
We collect only what we need to fulfil your order and improve your experience. We do not sell your information. You can ask us to correct or delete your data at any time. This policy applies to everything you share with us on mihirabyremya.com.
WHAT WE COLLECT
When you visit mihirabyremya.com, we may collect the following:
- Name and contact details – collected at checkout and account creation.
- Delivery address – collected at checkout; used only for order fulfilment.
- Payment information – processed by Razorpay; we do not store card or UPI data.
- Email address – used to send order confirmations and shipping updates.
- Browsing behaviour – pages visited, products viewed, session duration; collected via cookies and analytics tools.
- Device and location data – browser type, IP address, and approximate location; collected automatically on site visit.
HOW WE USE IT
We use your information only for the following purposes:
- To process and fulfil your order, including dispatch and delivery communication.
- To send transactional emails - order confirmation, shipping update, delivery confirmation, and return initiation. No promotional emails unless you have separately opted in.
- To operate and improve mihirabyremya.com - identifying errors, understanding navigation patterns, and improving product pages.
- To comply with our legal obligations under Indian law, including GST record-keeping requirements.
- To respond to your queries when you contact us directly.
YOUR RIGHTS
Under the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, you have the following rights in relation to the personal data we hold about you:
- Access – you may request a copy of the personal data we hold about you.
- Correction – you may ask us to correct inaccurate or incomplete information.
- Deletion – you may ask us to delete your personal data, subject to our legal retention obligations.
- Withdrawal of consent – where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
- Grievance redressal – you may contact our Grievance Officer at hello@mihirabyremya.com if you believe your data has been mishandled. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India as provided under the DPDP Act, 2023.
- Nomination – under the DPDP Act, 2023, you may nominate an individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, write to us at hello@mihirabyremya.com. We will respond within 30 days of receiving your request.
DATA RETENTION
We retain your personal data for as long as necessary to fulfil your order and comply with our legal obligations. Order records, including name, address, and transaction data, are retained for a minimum of 8 years in accordance with GST record-keeping requirements under the CGST Act, 2017. After this period, data is deleted or anonymised. You may request early deletion of non-mandatory records by writing to us; requests will be honoured subject to legal retention obligations.
SECURITY
We take reasonable technical and organisational measures to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We recommend that you avoid sharing sensitive information with us through insecure or unofficial channels.
CHILDREN
Mihirabyremya.com is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us at hello@mihirabyremya.com and we will delete it promptly.
CHANGES TO THIS POLICY
We may update this policy from time to time. When we do, we will revise the date at the top of this page. If changes are material, we will notify you by email or by placing a notice on mihirabyremya.com before the changes take effect. Continuing to use our store after changes are published means you accept the revised policy.
QUESTIONS OR CONCERNS
If you have any questions about this policy or about how we handle your information, you may contact us in the following ways:
The Grievance Officer is designated under the Information Technology Act, 2000. Response time: within 30 days of receipt.