Privacy Policy

Mithila Thekua, Roshan Nagar, Veer Bazar Road, Faridabad Sector 91, Haryana 121013, India, is responsible for the personal information collected through this website. We can be reached at mithilathekua@gmail.com or +91 75310 44556.

We collect the minimum we need to send you your order and answer your questions. We do not sell personal information. The only third-party measurement on this site is Meta's, described in sections 3 and 5, and it is limited to telling us which advertisements lead to orders.

• Order information — your name, email address, phone number, delivery address, PIN code, any delivery note you add, the items and quantities ordered, and the amount paid.
• Payment status — the payment and order reference returned by Razorpay, and whether the payment succeeded. We never receive your card number, CVV, UPI PIN or net-banking credentials.
• Enquiries — the name, email, optional phone number and message you submit through the contact form.
• Technical information — standard server and security logs kept by our hosting provider, such as IP address, browser type, and the pages requested.

We do not ask for and do not want sensitive information such as government ID numbers, health data or financial account details. Please do not send these to us.

Your shopping cart is stored in your own browser using localStorage, not on our servers, so it survives a page reload. Clearing your browser storage empties the cart. Razorpay sets its own cookies while you are on its payment window, governed by its privacy policy.

We also use Meta’s advertising measurement, which sets two cookies on this site: _fbp, an identifier for your browser, and _fbc, recorded only if you arrived by clicking one of our advertisements. They let us tell which advertisements lead to real orders. You can block them with your browser’s cookie controls or an ad blocker, and the shop will work normally without them.

• To take payment, fulfil and deliver your order, and handle returns or refunds — this is necessary to perform our contract with you.
• To send transactional messages: order confirmation, dispatch and delivery updates, and replies to your enquiries.
• To keep records required by tax, food safety and company law.
• To detect and prevent fraud, abuse and payment disputes — our legitimate interest in running the shop safely.
• To measure our advertising: which advertisements lead to real orders, so we are not spending your money’s worth showing them to the wrong people. This is our legitimate interest in running the shop viably, and you can opt out as described in section 3.

We will only send you marketing messages if you ask us to, and you can stop them at any time by replying or writing to us.

We share only what each provider needs to do its job:

• Razorpay Software Private Limited — to process payments and refunds.
• Courier partners — your name, address and phone number, to deliver the parcel.
• Resend — to send order and enquiry emails.
• Cloudflare — hosting, the order database, and network security.
• Meta Platforms — to measure our advertising. We send the event (for example, that an order was placed), its value, and identifiers such as your email address or phone number in one-way hashed (pseudonymised) form, so Meta receives no readable email address, phone number, name or address and can only use them to recognise an account it already holds the same details for. Hashing happens on our server, and for details you type into a form, in your own browser before they are transmitted. Your IP address and browser details are sent as they are, which Meta requires in order to match the event to the right visit.
• Professional advisors and authorities — where we are legally required to disclose information, or to establish or defend legal claims.

Some of these providers operate infrastructure outside India. Where information is transferred abroad, we rely on providers that offer comparable protection by contract.

• Order and payment records: as long as tax and accounting law requires, currently eight years.
• The Meta browser and click identifiers stored with an order (see section 3), and your browser’s user-agent string: kept with the order record and used only to report that order’s purchase. We do not store your IP address with an order.
• Customer accounts: your email address and the date you first signed in, for as long as you keep the account. Write to us to have it removed.
• Contact-form enquiries: up to two years, then deleted.
• Server and security logs: short retention periods set by our hosting provider.

The site is served only over HTTPS. Order data is stored in a managed database that is encrypted at rest by the provider. Access to order data is restricted to the people who need it, behind an identity-verified admin area. Payment credentials never reach our systems. No system is perfectly secure, but we take reasonable technical and organisational measures appropriate to the sensitivity of what we hold.

Write to mithilathekua@gmail.com to ask for a copy of the information we hold about you, to correct it, to have it deleted, or to withdraw a consent you gave us. We may need to verify who you are, and we may have to keep records that law requires us to retain. We respond within 30 days.

This site is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.

If we change how we handle personal information, we will update this page and the date at the top. For significant changes we will say so on the site.