Privacy Policy

Last updated: [date]

This policy explains what personal information Moulyax collects when you shop with us, online or in our store, why we need it, who we share it with and the choices you have.

1. Who we are and what this covers

Moulyax is a toys, gifts and books shop run by [legal entity name], [registered address] ("Moulyax", "we", "us"). This policy applies to our website, online orders, store pickups and purchases made at our billing counter.

We process your personal data in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. By using our website or giving us your details in store, you agree to the processing described here.

2. Information you give us

• Mobile number, used to sign you in with a one-time password sent on WhatsApp and to identify your account.
• Name and, if you choose, email address, so we can address your orders and receipts.
• Order details: the items you order, prices, the store you collect from and your pickup status.
• In-store purchases: if you share your mobile number at the counter, we link the bill to it and can send your e-bill on WhatsApp.
• Messages you send us, for example on WhatsApp or by email, about orders, returns or complaints.

3. Information we collect automatically

When you use our website we collect basic technical information: device and browser type, IP address, pages visited and the time of your visit. We use cookies to keep you signed in, remember your cart and keep the site secure. We may use analytics tools such as Google Analytics to understand, in aggregate, how the site is used. You can block cookies in your browser, but signing in and checkout need them.

4. Information from others

• Razorpay, our payment provider, tells us whether a payment succeeded and gives us a payment reference. We never see or store your full card number, UPI PIN or bank login.
• WhatsApp (Meta) tells us whether a message we sent was delivered.

5. How we use your information

• To sign you in and keep your account secure.
• To process, prepare and hand over your orders, and to take payment.
• To send you order updates, pickup reminders and e-bills on WhatsApp.
• To issue GST invoices and keep the tax and accounting records the law requires.
• To handle cancellations, returns, refunds and complaints.
• To prevent fraud and misuse, and to improve our website and range.
• To tell you about offers, only if you have agreed to it. You can opt out at any time.

We contact you on WhatsApp and, if you gave it, by email. We do not send SMS.

6. Who we share it with

We do not sell your personal data. We share it only with:

• service providers who help us run the shop — payments (Razorpay), messaging (WhatsApp Business), hosting, and analytics — and only for that purpose;
• our accountants, auditors and legal advisers;
• government and tax authorities, courts or police where the law requires it;
• a buyer or successor, if our business is sold or restructured, under the same protections.

7. Children

We sell products for children, but our website is meant for adults. You must be 18 or older to create an account or place an order. We do not knowingly collect personal data from children; if you believe a child has given us their details, contact us and we will delete them.

8. How long we keep it

We keep your account details while your account is active. Invoices and the records behind them are kept for as long as GST and accounting laws require. Sign-in codes expire within minutes and are stored only in scrambled form. When we no longer need your data, we delete or anonymise it.

9. How we protect it

Our website uses encrypted (HTTPS) connections. Access to customer data is limited to staff who need it for their work, and payment details are handled by Razorpay, which is PCI-DSS compliant. No system is completely secure, so please keep your phone and WhatsApp account protected and never share your sign-in code.

10. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete or update it;
• withdraw consent and ask us to delete your data, except what we must keep by law;
• nominate someone to exercise these rights on your behalf;
• raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.

To use any of these rights, contact us using the details below. We'll respond within 30 days.

11. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it last changed. For significant changes we'll tell you on the website or on WhatsApp.

12. Contact us

If you have a question or complaint about your personal data, contact us:

Email: contact@moulyax.com
WhatsApp: +91 79966 22225