Privacy Policy

Your privacy matters to us. This Privacy Policy explains how MelaMart (melamart.in) collects, uses, stores and protects your personal information when you visit our website or place an order.

1. Information We Collect

Information you provide

• Account & order data: name, email address, phone number, delivery address.
• Payment data: Online payments are processed by Cashfree Payments. We do not store your card number, UPI VPA or net-banking credentials.
• Communications: messages you send us via email or WhatsApp.

Information collected automatically

• Usage data: pages visited, products viewed, add-to-cart and purchase events.
• Device data: browser type, operating system, IP address.
• Cookies & local storage: we use first-party cookies for your session, cart and attribution. No third-party advertising cookies are set.

2. How We Use Your Information

• Process and fulfil your orders.
• Send order confirmations and updates.
• Respond to your queries and support requests.
• Improve our website, products and services.
• Prevent fraud and maintain security.
• Send marketing emails (only if you have subscribed; you can unsubscribe at any time).

3. Data Sharing

We do not sell your personal data. We share it only with service providers who help us operate our business:

• Cashfree Payments — to process online transactions.
• MongoDB Atlas — secure cloud database (AWS infrastructure).
• Google (Firebase Analytics / GA4) — anonymised website analytics (optional).
• Courier partners — name, phone and address to deliver your order.
• WhatsApp / Meta — when you contact us via WhatsApp.

All service providers are bound by data protection agreements and may not use your data for their own marketing.

4. Data Retention

We retain order data for a minimum of 3 years for accounting and legal purposes. Account data is retained until you request deletion. Analytics events are retained for up to 400 days.

5. Your Rights

Under applicable law you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data (subject to legal obligations).
• Withdraw consent for marketing communications at any time.

To exercise these rights, contact us (details below).

6. Cookies

We use the following first-party cookies:

• Session & visitor ID — to link events in a single session.
• Attribution — to record which link brought you to the site (30-day lifetime).
• Auth session — to keep you signed in (7 days).

You can clear cookies from your browser settings at any time. This will sign you out and reset your cart.

7. Security

We use HTTPS (TLS) for all data in transit, bcrypt for password hashing, and role-based access controls. Sensitive keys and secrets are never stored in source code.

8. Third-Party Links

Our website may link to Instagram, WhatsApp or other third-party platforms. We are not responsible for their privacy practices.

9. Children

Our website is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top will reflect any changes.

11. Contact

Privacy queries: WhatsApp +919996821315.